Tehdit bültenleri

Kritik zafiyetler, ele geçirilen paketler ve zararlı yazılım kampanyaları üzerine kısa bültenler.

Bülten Önem Tarih
HTTP2Shell (CVE-2026-111497): Hosts and Workloads with Vulnerable Brotli in Linux Distribution Packages Kaynak: Aikido: HTTP2Shell, Brotli Flaw CVE-2026-111497 Affects Libraries and Apps Using HTTP
Kritik 28 Ekim 2026
HTTP2Shell Update: Vulnerability Management Detection for CVE-2026-111497 Kaynak: Aikido: HTTP2Shell, Brotli Flaw CVE-2026-111497 Affects Libraries and Apps Using HTTP
Kritik 26 Ekim 2026
HTTP2Shell (CVE-2026-111497): Hosts and Workloads Running Vulnerable Node.js, Bun, Python Brotli, Envoy, Istio or brotli4j Versions Kaynak: Tanium: HTTP2Shell, Find and Fix Vulnerable Brotli Copies
Yüksek 23 Ekim 2026
PHP2Shell Update: Vulnerability Management Detection for CVE-2026-109618 and CVE-2026-109619 Kaynak: PHP: Critical security release for CVE-2026-109618 and CVE-2026-109619
Kritik 23 Ekim 2026
ZDI-CAN-34068 (vmwgfx): Linux Kernel VMware GPU Driver Local Privilege Escalation Kaynak: ZDI-CAN-34068 report on dri-devel: Linux Kernel vmwgfx Dirty Tracking Out-Of-Bounds Write
Yüksek 21 Ekim 2026
ZDI-CAN-33774 (ksmbd): Linux Kernel KSMBD Pre-Authentication Remote Code Execution Kaynak: The Hacker News: Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Kritik 21 Ekim 2026
LiteLLM 1.107.0 PyPI Package and Docker Images Compromised Kaynak: Socket: LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials
Kritik 21 Ekim 2026
ZDI-CAN-33367 (skb_zerocopy): Linux Kernel ESP In-Place Decryption Local Privilege Escalation Kaynak: The Hacker News: Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Yüksek 21 Ekim 2026
PHP2Shell (CVE-2026-109618 and CVE-2026-109619): PHP Core Unauthenticated Remote Code Execution Kaynak: PHP: Critical security release for CVE-2026-109618 and CVE-2026-109619
Kritik 20 Ekim 2026
CVE-2026-16723: Fastjson 1.x RCE Actively Exploited in the Wild Kaynak: The Hacker News: Fastjson 1.x RCE Vulnerability Targeted
Kritik 21 Temmuz 2026
wp2shell: WordPress Core Pre-Authentication RCE in the Batch API Kaynak: Searchlight Cyber: wp2shell Pre-Authentication RCE in WordPress Core
Diğer 17 Temmuz 2026
Early Warning: PraisonAI CVE-2026-44338 and CVE-2026-55538 Actively Exploited in the Wild Kaynak: Sysdig: First in-the-wild exploitation of PraisonAI CVE-2026-44338 and CVE-2026-55538
Yüksek 16 Temmuz 2026
AsyncAPI npm Packages Compromised via GitHub Actions pwn_request (5 Versions) Kaynak: SafeDep: AsyncAPI Packages Compromised with Miasma RAT
Kritik 14 Temmuz 2026
Early Warning: CVE-2026-59821 LiteLLM Guardrail Code Execution Actively Exploited in the Wild Kaynak: Sysdig: Caught attackers exploiting CVE-2026-59821 in the wild
Yüksek 13 Temmuz 2026
jscrambler npm Package Compromised: Cross-Platform Infostealer (5 Versions) Kaynak: Socket: jscrambler Supply Chain Attack
Kritik 11 Temmuz 2026
JADEPUFFER: Agentic Ransomware Exploiting Langflow CVE-2025-3248 for Automated Database Extortion Kaynak: Sysdig: JADEPUFFER Agentic Ransomware for Automated Database Extortion
Tehdit aktörü 1 Temmuz 2026
Mastra AI Framework npm Supply Chain Compromise (Part 2 of 3, 47 Packages) Kaynak: Socket: Mastra npm Packages Compromised
Kritik 17 Haziran 2026
Mastra AI Framework npm Supply Chain Compromise (Part 3 of 3, 47 Packages) Kaynak: Socket: Mastra npm Packages Compromised
Kritik 17 Haziran 2026
Mastra AI Framework npm Supply Chain Compromise (Part 1 of 3, 47 Packages) Kaynak: Socket: Mastra npm Packages Compromised
Kritik 17 Haziran 2026
Hades Campaign PyPI Update: 10 Additional Packages Compromised (Miasma Evolution) Kaynak: StepSecurity: The Hades Campaign PyPI Packages
Kritik 8 Haziran 2026
Miasma PyPI Wave: Shai-Hulud Variant Compromises 19 Python Packages (37 Wheels) Kaynak: Socket: Shai-Hulud Descends to Hades, Miasma PyPI Wave
Kritik 7 Haziran 2026
Mini Shai-Hulud Wave: @redhat-cloud-services npm Packages Compromised (Part 2 of 2, 16 Packages) Kaynak: Socket: Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
Kritik 1 Haziran 2026
Mini Shai-Hulud Wave: @redhat-cloud-services npm Packages Compromised (Part 1 of 2, 16 Packages) Kaynak: Socket: Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
Kritik 1 Haziran 2026
AntV Wave Mini Shai-Hulud: 36 Unscoped npm Packages Compromised (echarts-for-react, timeago.js, canvas-nest.js) Kaynak: Socket: @antv Packages Compromised, Mini Shai-Hulud Wave
Kritik 19 Mayıs 2026
AntV Wave Mini Shai-Hulud: @antv/* npm Packages Compromised (Part 5 of 5, 55 Packages) Kaynak: Socket: @antv Packages Compromised, Mini Shai-Hulud Wave
Kritik 19 Mayıs 2026
AntV Wave Mini Shai-Hulud: @antv/* npm Packages Compromised (Part 4 of 5, 56 Packages) Kaynak: Socket: @antv Packages Compromised, Mini Shai-Hulud Wave
Kritik 19 Mayıs 2026
AntV Wave Mini Shai-Hulud: @antv/* npm Packages Compromised (Part 3 of 5, 56 Packages) Kaynak: Socket: @antv Packages Compromised, Mini Shai-Hulud Wave
Kritik 19 Mayıs 2026
AntV Wave Mini Shai-Hulud: @antv/* npm Packages Compromised (Part 2 of 5, 56 Packages) Kaynak: Socket: @antv Packages Compromised, Mini Shai-Hulud Wave
Kritik 19 Mayıs 2026
AntV Wave Mini Shai-Hulud: @antv/* npm Packages Compromised (Part 1 of 5, 56 Packages) Kaynak: Socket: @antv Packages Compromised, Mini Shai-Hulud Wave
Kritik 19 Mayıs 2026
AntV Wave Mini Shai-Hulud: @lint-md, @openclaw-cn, @starmind npm Packages Compromised Kaynak: Socket: @antv Packages Compromised, Mini Shai-Hulud Wave
Kritik 19 Mayıs 2026
durabletask PyPI Package Compromised: Mini Shai-Hulud Variant with Worm and Conditional Wiper Kaynak: Aikido: durabletask Package Compromised, Mini Shai-Hulud Variant
Kritik 16 Mayıs 2026
node-ipc npm Package Compromised via Dormant Maintainer Takeover Kaynak: Socket: node-ipc Package Compromised
Kritik 14 Mayıs 2026
Mini Shai-Hulud Supply Chain Attack: 11 Unscoped npm Packages Compromised Kaynak: Socket: TanStack npm Packages Compromised, Mini Shai-Hulud Attack
Kritik 11 Mayıs 2026
Mini Shai-Hulud Supply Chain Attack: Malicious PyPI Releases (mistralai, guardrails-ai) Kaynak: Socket: TanStack npm Packages Compromised, Mini Shai-Hulud Attack
Kritik 11 Mayıs 2026
Mini Shai-Hulud Supply Chain Attack: Additional Scoped npm Namespaces Compromised (23 Packages) Kaynak: Socket: TanStack npm Packages Compromised, Mini Shai-Hulud Attack
Kritik 11 Mayıs 2026
Mini Shai-Hulud Supply Chain Attack: @uipath/* npm Packages Compromised (Part 3 of 3) Kaynak: Socket: TanStack npm Packages Compromised, Mini Shai-Hulud Attack
Kritik 11 Mayıs 2026
Mini Shai-Hulud Supply Chain Attack: @uipath/* npm Packages Compromised (Part 2 of 3) Kaynak: Socket: TanStack npm Packages Compromised, Mini Shai-Hulud Attack
Kritik 11 Mayıs 2026
Mini Shai-Hulud Supply Chain Attack: @uipath/* npm Packages Compromised (Part 1 of 3) Kaynak: Socket: TanStack npm Packages Compromised, Mini Shai-Hulud Attack
Kritik 11 Mayıs 2026
Mini Shai-Hulud Supply Chain Attack: @tanstack Start and Adapters Compromised (20 Packages) Kaynak: Socket: TanStack npm Packages Compromised, Mini Shai-Hulud Attack
Kritik 11 Mayıs 2026
Mini Shai-Hulud Supply Chain Attack: @tanstack Router Family Compromised (22 Packages) Kaynak: Socket: TanStack npm Packages Compromised, Mini Shai-Hulud Attack
Kritik 11 Mayıs 2026
Mini Shai-Hulud Supply Chain Attack: @squawk/* npm Packages Compromised (22 Packages) Kaynak: Socket: TanStack npm Packages Compromised, Mini Shai-Hulud Attack
Kritik 11 Mayıs 2026
Mini Shai-Hulud Supply Chain Attack: @tallyui/* npm Packages Compromised Kaynak: Socket: TanStack npm Packages Compromised, Mini Shai-Hulud Attack
Kritik 11 Mayıs 2026
Dirty Frag (CVE-2026-43284 and CVE-2026-43500): Linux Kernel ESP and RxRPC Local Privilege Escalation Kaynak: Sysdig: Dirty Frag (CVE-2026-43284 and CVE-2026-43500) Detecting Unpatched Linux Kernel LPE
Yüksek 8 Mayıs 2026
Mini Shai-Hulud Wave: lightning (PyPI) and intercom-client (npm) Compromised Kaynak: Socket: lightning PyPI Package Compromised in Supply Chain Attack
Kritik 30 Nisan 2026
CVE-2026-31431 (Copy Fail): Linux Kernel AF_ALG Privilege Escalation Kaynak: oss-security: CVE-2026-31431 CopyFail Linux local privilege escalation
Yüksek 29 Nisan 2026
Checkmarx KICS Docker Image Supply Chain Compromise Kaynak: Socket: Checkmarx Supply Chain Compromise
Kritik 22 Nisan 2026
Multiple n8n Vulnerabilities Published 2026-04-22 (12 Advisories) Kaynak: n8n Security Advisories
Kritik 22 Nisan 2026
TeamPCP April 2026 Supply Chain Campaign Kaynak: Socket: Namastex npm Packages Compromised by CanisterWorm
Kritik 22 Nisan 2026
Axios Supply Chain Attack Kaynak: Axios compromised hijacked maintainer account pushes malicious npm versions
Kritik 31 Mart 2026
Telnyx Package Compromised by TeamPCP Kaynak: Popular telnyx package compromised on PyPI by TeamPCP
Kritik 24 Mart 2026
LiteLLM Compromised in Supply Chain Attack Kaynak: TeamPCP Isn't Done Threat Actor Behind Trivy and KICS Compromises Now Hits LiteLLM's 95 Million Monthly Downloads on PyPI
Kritik 24 Mart 2026
CVE-2026-33017: How attackers compromised Langflow AI pipelines in 20 hours Kaynak: CVE-2026-33017 and how attackers compromised Langflow AI pipelines in 20 hours
Kritik 19 Mart 2026
CVE-2026-27493: Remote Code Execution Vulnerabilities in n8n Kaynak: Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials
Kritik 13 Mart 2026
Remote Code Execution Vulnerabilities in NGINX Ingress Controller - March Edition Kaynak: CVE-2026-3288 - ingress-nginx rewrite-target nginx configuration injection
Kritik 12 Mart 2026
Multiple Remote Code Execution Vulnerabilities in NGINX Ingress Controller Kaynak: Security Advisory - Multiple issues in ingress-nginx
Kritik 2 Şubat 2026
CVE-2026-22709: Critical Vulnerability in vm2 Sandbox Allows Escape Kaynak: Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution
Zafiyet 29 Ocak 2026
Multiple Critical Vulnerabilities in n8n Kaynak: Max severity Ni8mare flaw lets hackers hijack n8n servers
Zafiyet 8 Ocak 2026
CVE-2025-14847: MongoBleed - CVE in MongoDB causes sensitive information disclosure Kaynak: MongoDB Security Advisory
Zafiyet 27 Aralık 2025
Critical Vulnerabilities in React and Next.js Kaynak: Critical Security Vulnerability in React Server Components
Zafiyet 3 Aralık 2025
Shai-Hulud v2 NPM Worm affecting Zapier, Postman, and Many More - Part 1 Kaynak: Return of the Shai-Hulud worm affects over 25,000 GitHub repositories
Zararlı yazılım 24 Kasım 2025
Shai-Hulud v2 NPM Worm affecting Zapier, Postman, and Many More - Part 6 Kaynak: Return of the Shai-Hulud worm affects over 25,000 GitHub repositories
Zararlı yazılım 24 Kasım 2025
Shai-Hulud v2 NPM Worm affecting Zapier, Postman, and Many More - Part 5 Kaynak: Return of the Shai-Hulud worm affects over 25,000 GitHub repositories
Zararlı yazılım 24 Kasım 2025
Shai-Hulud v2 NPM Worm affecting Zapier, Postman, and Many More - Part 4 Kaynak: Return of the Shai-Hulud worm affects over 25,000 GitHub repositories
Zararlı yazılım 24 Kasım 2025
Shai-Hulud v2 NPM Worm affecting Zapier, Postman, and Many More - Part 3 Kaynak: Return of the Shai-Hulud worm affects over 25,000 GitHub repositories
Zararlı yazılım 24 Kasım 2025
Shai-Hulud v2 NPM Worm affecting Zapier, Postman, and Many More - Part 2 Kaynak: Return of the Shai-Hulud worm affects over 25,000 GitHub repositories
Zararlı yazılım 24 Kasım 2025
Multiple Vulnerabilities in runc: CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881 Kaynak: Multiple Vulnerabilities in runc: CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881
Zafiyet 6 Kasım 2025
AWS RDS Instances Exposed without IAM Authentication Kaynak: Protecting against ransomware
Diğer 17 Ekim 2025
Top 20 Malicious NPM Packages for 10-08-2025 to 10-15-2025 Kaynak: Top 20 Malicious NPM Packages for 10-08-2025 to 10-15-2025
Zararlı yazılım 15 Ekim 2025
CVE-2025-49844: Critical Remote Code Execution in Redis (RediShell) Kaynak: Understanding CVE-2025-49844: "RediShell" Critical Remote Code Execution in Redis
Zafiyet 3 Ekim 2025
CVE-2025-49844: Critical Remote Code Execution in Redis (RediShell) - Images Part 2 Kaynak: Understanding CVE-2025-49844: “RediShell” Critical Remote Code Execution in Redis
Zafiyet 3 Ekim 2025
CVE-2025-49844: Critical Remote Code Execution in Redis (RediShell) - Images Kaynak: Understanding CVE-2025-49844: “RediShell” Critical Remote Code Execution in Redis
Zafiyet 3 Ekim 2025
Top 20 Malicious NPM Packages for 09-24-2025 to 10-01-2025 Kaynak: Top 20 Malicious NPM Packages for 09-24-2025 to 10-01-2025
Zararlı yazılım 1 Ekim 2025
Top 20 Malicious NPM Packages for 09-17-2025 to 09-24-2025 Kaynak: Top 20 Malicious NPM Packages for 09-17-2025 to 09-24-2025
Zararlı yazılım 24 Eylül 2025
Shai-Hulud Worm: Attack on NPM for Tinycolor and 200+ Other Repositories Part 6 Kaynak: Shai-Hulud, the novel self-replicating worm infecting hundreds of NPM packages
Zararlı yazılım 17 Eylül 2025
Shai-Hulud Worm: Attack on NPM for Tinycolor and 200+ Other Repositories Part 2 Kaynak: Shai-Hulud, the novel self-replicating worm infecting hundreds of NPM packages
Zararlı yazılım 16 Eylül 2025
Shai-Hulud Worm: Attack on NPM for Tinycolor and 200+ Other Repositories Part 5 Kaynak: Shai-Hulud, the novel self-replicating worm infecting hundreds of NPM packages
Zararlı yazılım 16 Eylül 2025
Shai-Hulud Worm: Attack on NPM for Tinycolor and 200+ Other Repositories Part 4 Kaynak: Shai-Hulud, the novel self-replicating worm infecting hundreds of NPM packages
Zararlı yazılım 16 Eylül 2025
Shai-Hulud Worm: Attack on NPM for Tinycolor and 200+ Other Repositories Part 3 Kaynak: Shai-Hulud, the novel self-replicating worm infecting hundreds of NPM packages
Zararlı yazılım 16 Eylül 2025
Shai-Hulud Worm: Attack on NPM for Tinycolor and 200+ Other Repositories Part 1 Kaynak: Shai-Hulud, the novel self-replicating worm infecting hundreds of NPM packages
Zararlı yazılım 15 Eylül 2025
Top 20 Malicious NPM Packages for 09-03-2025 to 09-10-2025 Kaynak: Top 20 Malicious NPM Packages for 09-03-2025 to 09-10-2025
Zararlı yazılım 10 Eylül 2025
NPM Supply Chain Attack Against Chalk and 23 Other Repositories Kaynak: Npm debug and chalk packages compromised
Zararlı yazılım 8 Eylül 2025
Top 20 Malicious NPM Packages for 08-27-2025 to 09-03-2025 Kaynak: Top 20 Malicious NPM Packages for 08-27-2025 to 09-03-2025
Zararlı yazılım 3 Eylül 2025
Nx NPM Packages Compromised in Supply Chain Attack Kaynak: Supply Chain Security Alert: Popular Nx Build System Package Compromised with Data-Stealing Malware
Zararlı yazılım 27 Ağustos 2025
Top 20 Malicious NPM Packages for 08-20-2025 to 08-27-2025 Kaynak: Top 20 Malicious NPM Packages for 08-20-2025 to 08-27-2025
Zararlı yazılım 27 Ağustos 2025
Top 20 Malicious NPM Packages for 08-13-2025 to 08-20-2025 Kaynak: Top 20 Malicious NPM Packages for 08-13-2025 to 08-20-2025
Zararlı yazılım 20 Ağustos 2025
Toptal Packages Compromised in Supply Chain Attack Kaynak: Toptal’s GitHub Organization Hijacked: 10 Malicious Packages Published
Diğer 23 Temmuz 2025
CVE-2025-23226: Container Escape Vulnerability in NVIDIA Container Toolkit Kaynak: Security Bulletin: NVIDIA Container Toolkit - July 2025
Zafiyet 13 Temmuz 2025
CVE-2025-32462: Sudo privilege escalation vulnerability, exploit code available Kaynak: Vulnerability Advisory: Sudo chroot Elevation of Privilege
Zafiyet 30 Haziran 2025
Iranian Cyber Threat Analysis - June 2025 Kaynak: Sysdig Threat Bulletin: Iranian Cyber Threats
Tehdit aktörü 22 Haziran 2025
CVE-2025-3248: Vulnerability in Langflow being acively exploited Kaynak: Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited to Deliver Flodrix Botnet
Zafiyet 17 Haziran 2025
Backdoor placed in React Native packages for GlueStack Kaynak: Active NPM Attack Escalates: 16 React Native Packages for GlueStack Backdoored Overnight
Zararlı yazılım 7 Haziran 2025
RedisRaider targets misconfigured redis servers for cryptojacking Kaynak: RedisRaider: Weaponizing misconfigured Redis to mine cryptocurrency at scale
Zararlı yazılım 8 Mayıs 2025
Detection bypass using io_uring system calls Kaynak: Detecting and Mitigating io_uring Abuse for Malware Evasion
Diğer 25 Nisan 2025
IngressNightmare: Remote Code Execution in NGINX Ingress Controller Kaynak: Detecting and Mitigating IngressNightmare - CVE-2025-1974
Kritik 24 Mart 2025