Saldırı haberleri

Siber saldırılar, veri ihlalleri, fidye yazılımı olayları ve aktif istismar edilen zafiyetler.

Haber Kaynak Tarih
Hackers target government Windows systems in Asia with new malware The previously unknown malware, dubbed NetamLoader, uses legitimate Microsoft software components to execute malicious code, evade security tools and download additional programs onto infected computers.
The Record 30 Ekim 2026
Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. It is telling everyone who bought a Trezor from CryptoBilis since March 2026…
The Hacker News 30 Ekim 2026
Fresh WordPress Vulnerability in Attackers’ Crosshairs Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.
SecurityWeek 30 Ekim 2026
Russian popular home goods chain faces days of disruption following cyberattack Poryadok, which operates 48 stores across 32 Russian cities, first reported technical problems on Sunday, saying its website, mobile app and physical stores were temporarily unavailable.
The Record 30 Ekim 2026
$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds. Ayrıca: The Record
SecurityWeek 30 Ekim 2026
Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor Cybersecurity researchers have disclosed that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a persistent SSH backdoor on affected systems. The malicious update, version 2.1.313, was…
The Hacker News 30 Ekim 2026
As Russia's Cyberwar Evolves, Belarus Steps Forward The "FrostyNeighbor" advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian cyber objectives.
Dark Reading 30 Ekim 2026
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13.… Ayrıca: BleepingComputer, SecurityWeek
The Hacker News 30 Ekim 2026
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-97229 (CVSS score: 10.0)… Ayrıca: SecurityWeek, BleepingComputer
The Hacker News 30 Ekim 2026
Binance probes potential $5.8 billion crypto-theft hack Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack in history. [...] Ayrıca: The Record, The Hacker News, The Register, SecurityWeek
BleepingComputer 29 Ekim 2026
Hugging Face malware campaign returns to hijack GPUs for crypto mining A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is positioned to trick AI coding agents into installing a NetSupport RAT.…
BleepingComputer 29 Ekim 2026
Japan Airlines suffers third-party data breach exposing passenger info Japan Airlines (JAL) has announced that a data breach at Amadeus's Passenger Service System exposed the data of about 92,000 customers. [...]
BleepingComputer 29 Ekim 2026
Extent of Crime Stoppers data breach unknown: Sault Police chief James Hopkin reports: The Sault’s police chief says it’s currently unclear how many anonymous tips received by Crime Stoppers locally were potentially exposed in a massive data breach. Both the Sault Ste. Marie Police Service and the Anishinabek Police Service have paused their relationship with…
DataBreaches.net 29 Ekim 2026
Polymarket halts trading after crypto-draining script breach, $2.5M traced Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet. [...]
BleepingComputer 29 Ekim 2026
Anthropic-Themed Phishing Emails Bypass Top Security Tools Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products.
Dark Reading 29 Ekim 2026
UNM Health addresses cyberattack in New Mexico after ransomware group claims responsibility John Rupolo reports: University of New Mexico Health is addressing concerns after a cyberattack on Monday, with reports surfacing this week that a ransomware group claimed responsibility for the incident. “So what I can say is we’re also aware of those claims by that group,” said Chris Ramirez,…
DataBreaches.net 29 Ekim 2026
Florida education department says data breach may affect 4.9 million people Eric Weiss reports: The Florida Department of Education says a breach of its student financial aid website may have exposed personal information, including Social Security numbers, belonging to approximately 4.9 million people. The department said staff learned of unauthorized criminal access to…
DataBreaches.net 29 Ekim 2026
A RIZAP Employee Uploaded 726 People’s Health Records to a Personal AI Chat Rowan Sterling reports: On 20 August 2026 an employee of RIZAP Inc., the Japanese fitness and health-guidance group, was pulling records out of the health-guidance management system it operates for insurers when the data went into a generative AI service on a personal account the company had…
DataBreaches.net 29 Ekim 2026
Student SSNs and Medicaid IDs Exposed in Frontline School Software Breach Kalleigh Lane reports: If your school district used Frontline Central or School Health Management, your Social Security number, date of birth, or government ID could have been caught up in a cybersecurity incident. That risk applies to some adults and minors whose information was processed…
DataBreaches.net 29 Ekim 2026
DHS personnel leak exposes contact details and sensitive job information David DiMolfetta reports: Searchable records identifying more than 41,000 current and former Department of Homeland Security employees and contractors were published Wednesday, exposing contact information and details about sensitive assignments across the department, according to the…
DataBreaches.net 29 Ekim 2026
Fake crypto app on Apple App Store linked to $23K wallet theft A fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, has been linked to the theft of approximately $23,000 from 27 Solana wallets. [...]
BleepingComputer 29 Ekim 2026
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift. [...]
BleepingComputer 29 Ekim 2026
Chrome extensions with 13.4 million installs caught hijacking searches A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users' searches through tracking servers to generate advertising revenue from Bing and Yahoo. [...]
BleepingComputer 29 Ekim 2026
Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim to be desktop…
The Hacker News 29 Ekim 2026
Belgium's tax agency confirms cyberattack, pulls services offline Officials confirm this week’s tax deadlines extended to November as a result
The Register 29 Ekim 2026
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell flaws in the wild. [...] Ayrıca: The Register
BleepingComputer 29 Ekim 2026
Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour 'The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully'
The Register 29 Ekim 2026
26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories 26,400 credentials that developers left in public code on Gitee, a Chinese code-hosting service, still worked when a researcher tested them. Anyone who copied one from that code could have used it. Independent researcher Ben Zimmermann found them by scanning 7.25 million public Gitee…
The Hacker News 29 Ekim 2026
Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that it said has been exploited in the wild. The vulnerability, tracked as CVE-2026-76418, is rated 8.6 on the CVSS…
The Hacker News 29 Ekim 2026
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project's own GitLab server a week after GitLab released a fix, Alpine Linux said on 28 October. The flaw, CVE-2026-97229 (CVSS score: 10.0), can let an attacker run code on a GitLab server through a…
The Hacker News 29 Ekim 2026
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN network. The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between sites and store them for later…
The Hacker News 29 Ekim 2026
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in…
The Hacker News 29 Ekim 2026
GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub The supply chain attack campaign's shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.
Dark Reading 28 Ekim 2026
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains of compromised…
The Hacker News 28 Ekim 2026
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25,…
The Hacker News 28 Ekim 2026
JPN: Times Car reporting ¥5.5 billion loss has firms bracing for data breach fallout Maddie Baker and Spencer Landers As cyberattacks continue across Japan, companies are coming to realize the great financial risk of such attacks if their lax cybersecurity systems cause millions of peoples’ personal information to be leaked. Times Car, which saw personal data that included the…
DataBreaches.net 28 Ekim 2026
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
Dark Reading 28 Ekim 2026
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) , a case of improper authentication in the Oracle Application…
The Hacker News 28 Ekim 2026
KR: Bithumb discloses data leak after internal system breach; One of three financial firm breaches reported that day CoinTelegraph reports: South Korea’s crypto exchange Bithumb is investigating the extent of a data leak caused by a hack of its internal mobile system earlier this week, Yonhap News Agency reported Wednesday. Bithumb discovered the breach of its in-house mobile system — the platform used by…
DataBreaches.net 28 Ekim 2026
123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus Company chiefs believe the attackers could be the same as those who used ARTEX to breach South Korea’s financial giants
The Register 28 Ekim 2026
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed Modern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer obvious signs behind.…
The Hacker News 28 Ekim 2026
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand. The reward program opened on October 28 and pays only if a tip helps lead to an arrest… Ayrıca: DataBreaches.net
The Hacker News 28 Ekim 2026
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery… Ayrıca: The Register
The Hacker News 28 Ekim 2026
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are…
The Hacker News 28 Ekim 2026
External Teams Chats Anchor 15-Minute Malware Delivery Mail bombing is getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang.
Dark Reading 27 Ekim 2026
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises.
Dark Reading 27 Ekim 2026
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat…
The Hacker News 27 Ekim 2026
'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants The malware's focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure from a single compromised endpoint.
Dark Reading 27 Ekim 2026
Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack University hospitals once again accepting patients after initial ambulance diversion, but recovery to continue in phases
The Register 27 Ekim 2026
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when…
The Hacker News 27 Ekim 2026
Attack on email hosting provider for German far right party AfD exposed 345k accounts Alternative für Deutschland swats away scandals as reporters swarm leaked email tranche
The Register 27 Ekim 2026
Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key could build counterfeit devices that pass the online check owners use to verify a Keystone.…
The Hacker News 27 Ekim 2026
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russian cybersecurity…
The Hacker News 27 Ekim 2026
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration and creating…
The Hacker News 27 Ekim 2026
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate… Ayrıca: The Register
The Hacker News 27 Ekim 2026
Japanese virtual desktop cloud hacked so hard it asks to be banned CEO admits service used for foreign exchange trading had holes company was slow to fix
The Register 27 Ekim 2026
Worm armed 42 GitHub repos by hiding a payload too big to fail Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
The Register 26 Ekim 2026
In-the-Wild Attack Abuses AI Agents' Trust in Markdown A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
Dark Reading 26 Ekim 2026
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by…
The Hacker News 26 Ekim 2026
'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
Dark Reading 26 Ekim 2026
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation scams or to deliver malware. "A consistent pattern of attacker…
The Hacker News 26 Ekim 2026
AI Tools Are Generating Massive Attacks for Little Cost One campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change.
Dark Reading 23 Ekim 2026
State Bank of India Suffers a Customer PII Data Leak Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.
Dark Reading 23 Ekim 2026
Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation.
Dark Reading 22 Ekim 2026
TiDB Breach Exposes Flawed Cloud Security Assumptions Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the unseen information comes to light.
Dark Reading 21 Ekim 2026
LiteLLM supply chain attack hoovers up passwords and secrets Plus a RAT for good measure - get threat hunting now
The Register 21 Ekim 2026
OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
Dark Reading 21 Ekim 2026
PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched Websites down as precaution as exploits have already been published Ayrıca: Dark Reading
The Register 21 Ekim 2026
Decades-Old Windows Utility Powers Modern ClickFix Attack The attack uses malicious Google search results related to Amazon and leverages the "finger" utility to launch a CAPTCHA that installs malware, including the Lumma stealer.
Dark Reading 21 Ekim 2026
Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised. Ayrıca: The Register
Dark Reading 20 Ekim 2026
Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree A Chinese-speaking attacker has compromised hundreds of websites across the globe, looting from big fish like John Deere, SharkNinja, and engine manufacturer Cummins.
Dark Reading 20 Ekim 2026
Researchers Infiltrate Microsoft Tech Support Scam Operation A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
Dark Reading 19 Ekim 2026
ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed. Ayrıca: The Register
Dark Reading 19 Ekim 2026