https://threatticker.com/news/pillow-13-0-0-fixes-critical-flaws-that-can-turn-image-processing-into-codeThreatTickeren2026-10-24T16:10:14.684ZPillow 13.0.0 fixes critical flaws that can turn image processing into code execution https://threatticker.com/tr/haber/pillow-13-0-0-gorsel-islemeyi-kod-calistirmaya-donusturebilen-kritik-aciklariThreatTickertr2026-10-24T16:10:14.684ZPillow 13.0.0, görsel işlemeyi kod çalıştırmaya dönüştürebilen kritik açıkları kapattı https://threatticker.com/news/exposed-server-shows-inc-and-gentlemen-ransomware-affiliates-running-intrusionsThreatTickeren2026-10-24T16:10:09.553ZExposed server shows INC and Gentlemen ransomware affiliates running intrusions with AI agents https://threatticker.com/tr/haber/acikta-kalan-sunucu-inc-ve-gentlemen-fidye-yazilimi-ortaklarinin-yapay-zekaThreatTickertr2026-10-24T16:10:09.553ZAçıkta kalan sunucu, INC ve Gentlemen fidye yazılımı ortaklarının yapay zekâ ajanı kullandığını ortaya koydu https://threatticker.com/news/blackx-uefi-bootkit-bypasses-secure-boot-on-patched-windows-systemsThreatTickeren2026-10-24T16:10:04.335ZBlackX UEFI bootkit bypasses Secure Boot on patched Windows systems https://threatticker.com/tr/haber/blackx-uefi-bootkit-i-yamali-windows-sistemlerde-secure-boot-u-asiyorThreatTickertr2026-10-24T16:10:04.335ZBlackX UEFI bootkit'i yamalı Windows sistemlerde Secure Boot'u aşıyor https://threatticker.com/news/stolen-session-tokens-used-to-hijack-microsoft-365-accounts-at-79-organizationsThreatTickeren2026-10-23T13:08:35.386ZStolen session tokens used to hijack Microsoft 365 accounts at 79 organizations https://threatticker.com/tr/haber/calinti-oturum-token-lariyla-79-kurumda-microsoft-365-hesaplari-ele-gecirildiThreatTickertr2026-10-23T13:08:35.386ZÇalıntı oturum token'larıyla 79 kurumda Microsoft 365 hesapları ele geçirildi https://threatticker.com/news/hpe-patches-eight-maximum-severity-flaws-in-arubaos-enabling-unauthenticated-rceThreatTickeren2026-10-23T13:08:30.426ZHPE patches eight maximum-severity flaws in ArubaOS enabling unauthenticated RCE https://threatticker.com/tr/haber/hpe-arubaos-ta-kimlik-dogrulamasiz-kod-calistirmaya-imkan-veren-8-kritik-acigiThreatTickertr2026-10-23T13:08:30.426ZHPE, ArubaOS'ta kimlik doğrulamasız kod çalıştırmaya imkân veren 8 kritik açığı kapattı https://threatticker.com/news/x402-sdk-flaws-could-let-malicious-apis-drain-ai-agents-token-balancesThreatTickeren2026-10-23T10:09:38.511Zx402 SDK flaws could let malicious APIs drain AI agents' token balances https://threatticker.com/tr/haber/x402-sdk-aciklari-kotu-niyetli-api-lerin-yapay-zeka-ajanlarinin-bakiyesiniThreatTickertr2026-10-23T10:09:38.511Zx402 SDK açıkları, kötü niyetli API'lerin yapay zekâ ajanlarının bakiyesini boşaltmasına izin veriyordu https://threatticker.com/news/iran-s-prince-of-persia-apt-hosts-command-servers-in-the-us-for-first-timeThreatTickeren2026-10-23T10:09:33.779ZIran's Prince of Persia APT hosts command servers in the US for first time since 2016 https://threatticker.com/tr/haber/iranli-prince-of-persia-grubu-2016-dan-bu-yana-ilk-kez-abd-de-komuta-sunucusuThreatTickertr2026-10-23T10:09:33.779Zİranlı Prince of Persia grubu 2016'dan bu yana ilk kez ABD'de komuta sunucusu kullanıyor https://threatticker.com/news/quest-diagnostics-says-hackers-accessed-patient-records-via-quanum-lab-systemThreatTickeren2026-10-23T10:09:28.733ZQuest Diagnostics says hackers accessed patient records via Quanum lab system https://threatticker.com/tr/haber/quest-diagnostics-quanum-laboratuvar-sistemi-uzerinden-hasta-kayitlarinaThreatTickertr2026-10-23T10:09:28.733ZQuest Diagnostics, Quanum laboratuvar sistemi üzerinden hasta kayıtlarına erişildiğini açıkladı https://threatticker.com/news/critical-laravel-tokenguard-flaw-lets-attackers-log-in-as-any-api-userThreatTickeren2026-10-23T07:10:30.862ZCritical Laravel TokenGuard flaw lets attackers log in as any API user https://threatticker.com/tr/haber/laravel-tokenguard-daki-kritik-acik-herhangi-bir-api-kullanicisi-olarak-oturumThreatTickertr2026-10-23T07:10:30.862ZLaravel TokenGuard'daki kritik açık, herhangi bir API kullanıcısı olarak oturum açtırıyor https://threatticker.com/news/fortinet-urges-priority-upgrades-as-it-fixes-critical-fortios-and-fortimanagerThreatTickeren2026-10-23T04:10:19.968ZFortinet urges priority upgrades as it fixes critical FortiOS and FortiManager flaws https://threatticker.com/tr/haber/fortinet-fortios-ve-fortimanager-daki-kritik-aciklar-icin-acil-yukseltmeThreatTickertr2026-10-23T04:10:19.968ZFortinet, FortiOS ve FortiManager'daki kritik açıklar için acil yükseltme çağrısı yaptı https://threatticker.com/news/splunk-fixes-critical-flaws-in-enterprise-and-soar-solarwinds-patchesThreatTickeren2026-10-23T01:10:43.224ZSplunk fixes critical flaws in Enterprise and SOAR, SolarWinds patches Observability https://threatticker.com/tr/haber/splunk-enterprise-ve-soar-daki-kritik-aciklari-kapatti-solarwinds-de-guncellemeThreatTickertr2026-10-23T01:10:43.224ZSplunk, Enterprise ve SOAR'daki kritik açıkları kapattı; SolarWinds de güncelleme yayımladı https://threatticker.com/news/toronto-crime-stoppers-halts-tip-intake-after-breach-exposed-anonymous-tipsThreatTickeren2026-10-22T22:09:44.472ZToronto Crime Stoppers halts tip intake after breach exposed anonymous tips https://threatticker.com/tr/haber/toronto-crime-stoppers-isimsiz-ihbarlari-aciga-cikaran-ihlal-sonrasi-ihbarThreatTickertr2026-10-22T22:09:44.472ZToronto Crime Stoppers, isimsiz ihbarları açığa çıkaran ihlal sonrası ihbar almayı durdurdu https://threatticker.com/news/capcom-confirms-capcom-id-breach-exposing-data-of-11-7-million-accountsThreatTickeren2026-10-22T22:09:39.366ZCapcom confirms CAPCOM ID breach exposing data of 11.7 million accounts https://threatticker.com/tr/haber/capcom-capcom-id-ihlalinde-11-7-milyon-hesabin-verisinin-aciga-ciktiginiThreatTickertr2026-10-22T22:09:39.366ZCapcom, CAPCOM ID ihlalinde 11,7 milyon hesabın verisinin açığa çıktığını doğruladı https://threatticker.com/news/two-critical-linux-ksmbd-remote-code-execution-flaws-made-public-before-kernelThreatTickeren2026-10-22T19:09:31.638ZTwo critical Linux KSMBD remote code execution flaws made public before kernel fixes https://threatticker.com/tr/haber/linux-ksmbd-deki-iki-kritik-uzaktan-kod-calistirma-acigi-yama-cikmadan-duyurulduThreatTickertr2026-10-22T19:09:31.638ZLinux KSMBD'deki iki kritik uzaktan kod çalıştırma açığı yama çıkmadan duyuruldu https://threatticker.com/news/arista-patches-velocloud-orchestrator-zero-day-exploited-to-gain-operatorThreatTickeren2026-10-22T19:09:26.411ZArista patches VeloCloud Orchestrator zero-day exploited to gain operator control https://threatticker.com/tr/haber/arista-saldirilarda-istismar-edilen-velocloud-orchestrator-sifirinci-gunThreatTickertr2026-10-22T19:09:26.411ZArista, saldırılarda istismar edilen VeloCloud Orchestrator sıfırıncı gün açığını kapattı