https://threatticker.com/news/two-critical-linux-ksmbd-remote-code-execution-flaws-made-public-before-kernelThreatTickeren2026-10-22T19:09:31.638ZTwo critical Linux KSMBD remote code execution flaws made public before kernel fixes https://threatticker.com/tr/haber/linux-ksmbd-deki-iki-kritik-uzaktan-kod-calistirma-acigi-yama-cikmadan-duyurulduThreatTickertr2026-10-22T19:09:31.638ZLinux KSMBD'deki iki kritik uzaktan kod çalıştırma açığı yama çıkmadan duyuruldu https://threatticker.com/news/arista-patches-velocloud-orchestrator-zero-day-exploited-to-gain-operatorThreatTickeren2026-10-22T19:09:26.411ZArista patches VeloCloud Orchestrator zero-day exploited to gain operator control https://threatticker.com/tr/haber/arista-saldirilarda-istismar-edilen-velocloud-orchestrator-sifirinci-gunThreatTickertr2026-10-22T19:09:26.411ZArista, saldırılarda istismar edilen VeloCloud Orchestrator sıfırıncı gün açığını kapattı https://threatticker.com/news/cyberattack-disrupts-city-services-in-south-carolina-s-capital-columbiaThreatTickeren2026-10-22T16:10:22.819ZCyberattack disrupts city services in South Carolina's capital Columbia https://threatticker.com/tr/haber/siber-saldiri-guney-carolina-nin-baskenti-columbia-da-belediye-hizmetleriniThreatTickertr2026-10-22T16:10:22.819ZSiber saldırı, Güney Carolina'nın başkenti Columbia'da belediye hizmetlerini aksattı https://threatticker.com/news/qpack-flaws-let-a-single-connection-crash-many-http-3-serversThreatTickeren2026-10-22T16:10:17.729ZQPACK flaws let a single connection crash many HTTP/3 servers https://threatticker.com/tr/haber/qpack-aciklari-tek-baglantiyla-bircok-http-3-sunucusunu-cokertebiliyorThreatTickertr2026-10-22T16:10:17.729ZQPACK açıkları, tek bağlantıyla birçok HTTP/3 sunucusunu çökertebiliyor https://threatticker.com/news/signal-flaw-could-keep-audio-and-video-flowing-after-users-hang-upThreatTickeren2026-10-22T16:10:12.368ZSignal flaw could keep audio and video flowing after users hang up https://threatticker.com/tr/haber/signal-deki-acik-arama-kapatildiktan-sonra-da-ses-ve-goruntu-akisiniThreatTickertr2026-10-22T16:10:12.368ZSignal'deki açık, arama kapatıldıktan sonra da ses ve görüntü akışını sürdürebiliyor https://threatticker.com/news/cisco-patches-34-flaws-including-critical-root-level-bug-in-expresswayThreatTickeren2026-10-22T16:10:07.088ZCisco patches 34 flaws, including critical root-level bug in Expressway https://threatticker.com/tr/haber/cisco-expressway-deki-root-yetkili-kritik-acik-dahil-34-acigi-kapattiThreatTickertr2026-10-22T16:10:07.088ZCisco, Expressway'deki root yetkili kritik açık dahil 34 açığı kapattı https://threatticker.com/news/node-js-patches-brotli-decoder-flaw-that-could-allow-remote-code-executionThreatTickeren2026-10-22T13:12:30.859ZNode.js patches Brotli decoder flaw that could allow remote code execution https://threatticker.com/tr/haber/node-js-uzaktan-kod-calistirmaya-yol-acabilen-brotli-acigini-kapattiThreatTickertr2026-10-22T13:12:30.859ZNode.js, uzaktan kod çalıştırmaya yol açabilen Brotli açığını kapattı https://threatticker.com/news/railway-says-intruder-may-have-decrypted-customer-secrets-urges-credentialThreatTickeren2026-10-22T13:12:21.088ZRailway says intruder may have decrypted customer secrets, urges credential rotation https://threatticker.com/tr/haber/railway-de-musteri-sirlarina-erisildi-kimlik-bilgilerinin-yenilenmesi-isteniyorThreatTickertr2026-10-22T13:12:21.088ZRailway'de müşteri sırlarına erişildi, kimlik bilgilerinin yenilenmesi isteniyor https://threatticker.com/news/mythicratatoskr-backdoor-hid-in-yggdrasil-mesh-before-sandworm-wiped-ukrainianThreatTickeren2026-10-22T13:12:16.015ZMythicRatatoskr backdoor hid in Yggdrasil mesh before Sandworm wiped Ukrainian grain firm https://threatticker.com/tr/haber/mythicratatoskr-arka-kapisi-yggdrasil-aginda-gizlendi-sandworm-ukraynali-tahilThreatTickertr2026-10-22T13:12:16.015ZMythicRatatoskr arka kapısı Yggdrasil ağında gizlendi, Sandworm Ukraynalı tahıl şirketini sildi https://threatticker.com/news/microsoft-ties-connectwise-cloud-app-compromise-to-china-aligned-storm-0940ThreatTickeren2026-10-22T13:11:49.397ZMicrosoft ties ConnectWise cloud app compromise to China-aligned Storm-0940 https://threatticker.com/tr/haber/microsoft-connectwise-bulut-uygulamasi-saldirisini-cin-baglantili-storm-0940-aThreatTickertr2026-10-22T13:11:49.397ZMicrosoft, ConnectWise bulut uygulaması saldırısını Çin bağlantılı Storm-0940'a bağladı https://threatticker.com/news/interpol-s-serengeti-iii-nets-1-462-arrests-and-105-million-across-africaThreatTickeren2026-10-22T10:08:01.115ZINTERPOL's Serengeti III nets 1,462 arrests and $105 million across Africa https://threatticker.com/tr/haber/interpol-un-serengeti-iii-operasyonunda-afrika-da-1-462-kisi-gozaltina-alindiThreatTickertr2026-10-22T10:08:01.115ZINTERPOL'ün Serengeti III operasyonunda Afrika'da 1.462 kişi gözaltına alındı https://threatticker.com/news/openai-says-internal-agents-silenced-safety-alerts-and-removed-a-misalignmentThreatTickeren2026-10-22T04:09:06.567ZOpenAI says internal agents silenced safety alerts and removed a misalignment monitor https://threatticker.com/tr/haber/openai-ic-yapay-zeka-ajanlari-guvenlik-uyarilarini-susturdu-izleme-modulunuThreatTickertr2026-10-22T04:09:06.567ZOpenAI: İç yapay zekâ ajanları güvenlik uyarılarını susturdu, izleme modülünü kaldırdı https://threatticker.com/news/lazarus-uses-post-quantum-ml-kem-encryption-to-hide-malware-in-south-koreanThreatTickeren2026-10-21T22:13:08.975ZLazarus uses post-quantum ML-KEM encryption to hide malware in South Korean attacks https://threatticker.com/tr/haber/lazarus-guney-kore-saldirilarinda-zararliyi-kuantum-sonrasi-ml-kemThreatTickertr2026-10-21T22:13:08.975ZLazarus, Güney Kore saldırılarında zararlıyı kuantum sonrası ML-KEM şifrelemesiyle gizliyor https://threatticker.com/news/hackers-breach-japan-s-onamae-desktop-cloud-plant-malware-on-up-to-27-000ThreatTickeren2026-10-21T22:13:04.048ZHackers breach Japan's Onamae Desktop Cloud, plant malware on up to 27,000 servers https://threatticker.com/tr/haber/japonya-da-onamae-desktop-cloud-ele-gecirildi-27-bine-yakin-sunucuya-zararliThreatTickertr2026-10-21T22:13:04.048ZJaponya'da Onamae Desktop Cloud ele geçirildi, 27 bine yakın sunucuya zararlı kuruldu https://threatticker.com/news/dermojet-karakoy-gulluoglu-and-mehmet-efendi-report-web-store-breaches-to-kvkkThreatTickeren2026-10-21T22:12:58.909ZDermojet, Karaköy Güllüoğlu and Mehmet Efendi report web store breaches to KVKK https://threatticker.com/tr/haber/dermojet-karakoy-gulluoglu-ve-mehmet-efendi-nin-cevrim-ici-magazalarinda-veriThreatTickertr2026-10-21T22:12:58.909ZDermojet, Karaköy Güllüoğlu ve Mehmet Efendi'nin çevrim içi mağazalarında veri ihlali https://threatticker.com/news/kvkk-notices-ransomware-hits-enka-foundation-mw-phokaia-resort-reports-emailThreatTickeren2026-10-21T22:11:02.557ZKVKK notices: ransomware hits Enka foundation, MW Phokaia resort reports email intrusion https://threatticker.com/tr/haber/kvkk-dan-iki-ihlal-duyurusu-enka-vakfi-na-fidye-saldirisi-mw-phokaia-da-e-postaThreatTickertr2026-10-21T22:11:02.557ZKVKK'dan iki ihlal duyurusu: Enka Vakfı'na fidye saldırısı, MW Phokaia'da e-posta ihlali https://threatticker.com/news/gitlab-fixes-cvss-10-flaw-enabling-unauthenticated-code-execution-back-toThreatTickeren2026-10-21T22:10:35.748ZGitLab fixes CVSS 10 flaw enabling unauthenticated code execution back to version 7.0 https://threatticker.com/tr/haber/gitlab-7-0-surumune-kadar-uzanan-cvss-10-puanli-kod-calistirma-acigini-kapattiThreatTickertr2026-10-21T22:10:35.748ZGitLab, 7.0 sürümüne kadar uzanan CVSS 10 puanlı kod çalıştırma açığını kapattı https://threatticker.com/news/kvkk-notices-izmir-municipality-email-takeover-ondokuz-mayis-university-andThreatTickeren2026-10-21T19:12:18.821ZKVKK notices: İzmir municipality email takeover, Ondokuz Mayıs University and Choice Hotels https://threatticker.com/tr/haber/kvkk-dan-uc-ihlal-duyurusu-izmir-bb-e-postalari-ondokuz-mayis-universitesi-veThreatTickertr2026-10-21T19:12:18.821ZKVKK'dan üç ihlal duyurusu: İzmir BB e-postaları, Ondokuz Mayıs Üniversitesi ve Choice Hotels https://threatticker.com/news/kvkk-discloses-ransomware-at-ankara-clinic-dnc-saglik-and-vishing-breach-atThreatTickeren2026-10-21T19:12:13.850ZKVKK discloses ransomware at Ankara clinic DNC Sağlık and vishing breach at Baxter Turkey https://threatticker.com/tr/haber/kvkk-dan-iki-saglik-ihlali-dnc-saglik-ta-fidye-yazilimi-baxter-turkey-de-vishingThreatTickertr2026-10-21T19:12:13.850ZKVKK'dan iki sağlık ihlali: DNC Sağlık'ta fidye yazılımı, Baxter Turkey'de vishing https://threatticker.com/news/litellm-1-107-0-on-pypi-and-docker-shipped-a-credential-stealer-and-backdoorThreatTickeren2026-10-21T19:12:08.654ZLiteLLM 1.107.0 on PyPI and Docker shipped a credential stealer and backdoor https://threatticker.com/tr/haber/litellm-1-107-0-in-pypi-ve-docker-surumleri-kimlik-bilgisi-hirsizi-ve-arka-kapiThreatTickertr2026-10-21T19:12:08.654ZLiteLLM 1.107.0'ın PyPI ve Docker sürümleri kimlik bilgisi hırsızı ve arka kapı taşıdı https://threatticker.com/news/chrome-156-fixes-353-security-flaws-six-of-them-criticalThreatTickeren2026-10-21T16:10:52.814ZChrome 156 fixes 353 security flaws, six of them critical https://threatticker.com/tr/haber/chrome-156-altisi-kritik-353-guvenlik-acigini-kapattiThreatTickertr2026-10-21T16:10:52.814ZChrome 156, altısı kritik 353 güvenlik açığını kapattı https://threatticker.com/news/china-aligned-bronze-sandcastle-abuses-sandboxie-dll-sideloading-to-plantThreatTickeren2026-10-21T13:10:53.412ZChina-aligned Bronze Sandcastle abuses Sandboxie DLL sideloading to plant backdoors https://threatticker.com/tr/haber/cin-baglantili-bronze-sandcastle-sandboxie-uzerinden-arka-kapi-yerlestiriyorThreatTickertr2026-10-21T13:10:53.412ZÇin bağlantılı Bronze Sandcastle, Sandboxie üzerinden arka kapı yerleştiriyor https://threatticker.com/news/attackers-hijacked-over-300-tor-exit-relays-to-intercept-ssh-loginsThreatTickeren2026-10-21T13:10:22.870ZAttackers hijacked over 300 Tor exit relays to intercept SSH logins https://threatticker.com/tr/haber/ele-gecirilen-300-den-fazla-tor-cikis-rolesi-ssh-oturumlarini-dinlediThreatTickertr2026-10-21T13:10:22.870ZEle geçirilen 300'den fazla Tor çıkış rölesi SSH oturumlarını dinledi https://threatticker.com/news/state-bank-of-india-confirms-leak-after-3-897-customer-records-found-on-dark-webThreatTickeren2026-10-21T10:10:13.486ZState Bank of India confirms leak after 3,897 customer records found on dark web https://threatticker.com/tr/haber/state-bank-of-india-karanlik-agda-3-897-musteri-kaydi-bulundugunu-dogruladiThreatTickertr2026-10-21T10:10:13.486ZState Bank of India, karanlık ağda 3.897 müşteri kaydı bulunduğunu doğruladı https://threatticker.com/news/belarus-aligned-hackers-hid-vasilek-backdoor-in-vmware-tools-for-two-yearsThreatTickeren2026-10-21T10:10:08.443ZBelarus-aligned hackers hid Vasilek backdoor in VMware Tools for two years https://threatticker.com/tr/haber/belarus-yanlisi-hackerlar-vasilek-arka-kapisini-iki-yil-vmware-tools-icindeThreatTickertr2026-10-21T10:10:08.443ZBelarus yanlısı hackerlar Vasilek arka kapısını iki yıl VMware Tools içinde gizledi https://threatticker.com/news/oracle-s-october-2026-patch-update-fixes-1-209-cves-including-six-rated-cvss-10ThreatTickeren2026-10-21T07:10:13.490ZOracle's October 2026 patch update fixes 1,209 CVEs, including six rated CVSS 10.0 https://threatticker.com/tr/haber/oracle-in-ekim-2026-yama-paketi-altisi-cvss-10-0-olan-1-209-acigi-kapattiThreatTickertr2026-10-21T07:10:13.490ZOracle'ın Ekim 2026 yama paketi altısı CVSS 10.0 olan 1.209 açığı kapattı https://threatticker.com/news/nist-cisa-and-nsa-publish-incident-response-practices-for-rogue-ai-agentsThreatTickeren2026-10-21T04:10:18.598ZNIST, CISA and NSA publish incident response practices for rogue AI agents https://threatticker.com/tr/haber/nist-cisa-ve-nsa-dan-kontrolden-cikan-yapay-zeka-ajanlari-icin-olay-mudahaleThreatTickertr2026-10-21T04:10:18.598ZNIST, CISA ve NSA'dan kontrolden çıkan yapay zekâ ajanları için olay müdahale rehberi https://threatticker.com/news/23andme-successor-agrees-to-pay-california-6-million-over-2023-data-breachThreatTickeren2026-10-21T04:10:13.703Z23andMe successor agrees to pay California $6 million over 2023 data breach https://threatticker.com/tr/haber/23andme-nin-devami-olan-sirket-2023-ihlali-icin-california-ya-6-milyon-dolarThreatTickertr2026-10-21T04:10:13.703Z23andMe'nin devamı olan şirket, 2023 ihlali için California'ya 6 milyon dolar ödeyecek https://threatticker.com/news/zeabur-to-shut-down-after-second-breach-exposes-321-000-accountsThreatTickeren2026-10-21T04:08:25.964ZZeabur to shut down after second breach exposes 321,000 accounts https://threatticker.com/tr/haber/zeabur-321-bin-hesabi-etkileyen-ikinci-ihlalin-ardindan-kapaniyorThreatTickertr2026-10-21T04:08:25.964ZZeabur, 321 bin hesabı etkileyen ikinci ihlalin ardından kapanıyor https://threatticker.com/news/fbi-and-cisa-warn-safepay-ransomware-has-hit-at-least-600-victims-since-2024ThreatTickeren2026-10-21T01:09:48.962ZFBI and CISA warn SafePay ransomware has hit at least 600 victims since 2024 https://threatticker.com/tr/haber/fbi-ve-cisa-uyardi-safepay-fidye-yazilimi-2024-ten-bu-yana-600-den-fazlaThreatTickertr2026-10-21T01:09:48.962ZFBI ve CISA uyardı: SafePay fidye yazılımı 2024'ten bu yana 600'den fazla kurbana ulaştı https://threatticker.com/news/stolen-updraftcentral-keys-used-to-plant-backdoors-on-wordpress-sitesThreatTickeren2026-10-21T01:09:43.974ZStolen UpdraftCentral keys used to plant backdoors on WordPress sites https://threatticker.com/tr/haber/calinan-updraftcentral-anahtarlariyla-wordpress-sitelerine-arka-kapiThreatTickertr2026-10-21T01:09:43.974ZÇalınan UpdraftCentral anahtarlarıyla WordPress sitelerine arka kapı yerleştiriliyor https://threatticker.com/news/php-warns-of-two-critical-flaws-emergency-patches-due-october-21ThreatTickeren2026-10-21T01:09:38.799ZPHP2Shell: PHP patches two critical RCE flaws amid reports of attacks https://threatticker.com/tr/haber/php-iki-kritik-acik-icin-uyardi-acil-yamalar-21-ekim-de-geliyorThreatTickertr2026-10-21T01:09:38.799ZPHP2Shell: PHP iki kritik RCE açığını yamaladı, saldırı girişimleri bildiriliyor