Genel Siber Güvenlik
307 news found
Genel Siber Güvenlik
MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks
Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics.
The post MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks appeared first on SecurityWeek.
Genel Siber Güvenlik
Anthropic Acquires Confidential AI Startup Opaque Systems
Opaque Systems has developed technology that lets AI systems use sensitive data while keeping it protected by the underlying hardware.
The post Anthropic Acquires Confidential AI Startup Opaque Systems appeared first on SecurityWeek.
Genel Siber Güvenlik
Critical Vulnerability in SiteGuard WAF Allows Command Execution as Admin
A critical vulnerability in SiteGuard's WAF, tracked as CVE-2026-106931, is being actively exploited, allowing attackers to execute commands with root or SYSTEM privileges. Organizations using affected versions must take immediate action to mitigate this risk.
🔐
Genel Siber Güvenlik
Critical BlockStrap Vulnerability Threatens Magento Servers
A maximum-severity vulnerability, CVE-2026-103849, has been identified in Magento and Adobe Commerce platforms, potentially allowing arbitrary code execution. Despite no active exploitation observed, the risk of future attacks is significant.
Genel Siber Güvenlik
Microsoft Patches Two Dozen RCE Flaws in Office
In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office.
The post Microsoft Patches Two Dozen RCE Flaws in Office appeared first on SecurityWeek.
Genel Siber Güvenlik
Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
The post Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis appeared first on SecurityWeek.
Genel Siber Güvenlik
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
The post Context Is King in the Fight Against Modern Cyberattacks appeared first on SecurityWeek.
Genel Siber Güvenlik
Microsoft fixes bug causing Windows black screens, Explorer crashes
Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August. [...]
Genel Siber Güvenlik
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements.
The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek.
Genel Siber Güvenlik
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.
The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek.
Genel Siber Güvenlik
Google Partially Reverses Chrome Bug Bounty Cuts
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.
The post Google Partially Reverses Chrome Bug Bounty Cuts appeared first on SecurityWeek.
Genel Siber Güvenlik
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user's package without having to steal their credentials.
"Your configuration becomes validated and exempt from expiry after its first successful publish," the Microsoft-owned subsidiary