https://threatticker.com/news/ghostaction-hides-credential-stealer-as-font-file-in-94-github-repositoriesThreatTickeren2026-10-19T16:08:30.345ZGhostAction hides credential stealer as font file in 94 GitHub repositories https://threatticker.com/tr/haber/ghostaction-94-github-deposuna-font-dosyasi-kiliginda-kimlik-bilgisi-hirsiziThreatTickertr2026-10-19T16:08:30.345ZGhostAction, 94 GitHub deposuna font dosyası kılığında kimlik bilgisi hırsızı yerleştirdi https://threatticker.com/news/rank-math-pro-update-was-trojanized-to-backdoor-wordpress-sitesThreatTickeren2026-10-19T16:08:25.081ZRank Math PRO update was trojanized to backdoor WordPress sites https://threatticker.com/tr/haber/rank-math-pro-guncellemesine-arka-kapi-yerlestirildi-wordpress-siteleri-riskThreatTickertr2026-10-19T16:08:25.081ZRank Math PRO güncellemesine arka kapı yerleştirildi, WordPress siteleri risk altında https://threatticker.com/news/fake-web3-accelerator-spreads-stealers-via-npm-and-hijacks-ai-agent-trafficThreatTickeren2026-10-19T13:08:40.944ZFake Web3 accelerator spreads stealers via npm and hijacks AI agent traffic https://threatticker.com/tr/haber/sahte-web3-hizlandiricisi-npm-ile-bilgi-hirsizi-yayip-yapay-zeka-ajan-trafiginiThreatTickertr2026-10-19T13:08:40.944ZSahte Web3 hızlandırıcısı npm ile bilgi hırsızı yayıp yapay zekâ ajan trafiğini ele geçirdi https://threatticker.com/news/hackers-copy-customer-data-from-russian-host-firstvds-via-vmmanager-flawThreatTickeren2026-10-19T13:08:35.770ZHackers copy customer data from Russian host FirstVDS via VMmanager flaw https://threatticker.com/tr/haber/rus-barindirma-firmasi-firstvds-te-vmmanager-acigiyla-musteri-verileriThreatTickertr2026-10-19T13:08:35.770ZRus barındırma firması FirstVDS'te VMmanager açığıyla müşteri verileri kopyalandı https://threatticker.com/news/plex2shell-exploit-chain-hits-unpatched-plex-servers-a-day-after-poc-releaseThreatTickeren2026-10-19T13:08:30.642ZPlex2Shell exploit chain hits unpatched Plex servers a day after PoC release https://threatticker.com/tr/haber/plex2shell-zinciri-poc-nin-yayimlanmasindan-bir-gun-sonra-guncellenmemis-plexThreatTickertr2026-10-19T13:08:30.642ZPlex2Shell zinciri, PoC'nin yayımlanmasından bir gün sonra güncellenmemiş Plex sunucularını vurdu https://threatticker.com/news/mitre-att-ck-v20-adds-prompt-injection-ai-agent-abuse-and-mfa-bypass-techniquesThreatTickeren2026-10-19T10:07:42.753ZMITRE ATT&CK v20 adds prompt injection, AI agent abuse and MFA bypass techniques https://threatticker.com/tr/haber/mitre-att-ck-v20-ye-prompt-enjeksiyonu-yapay-zeka-ajani-istismari-ve-mfaThreatTickertr2026-10-19T10:07:42.753ZMITRE ATT&CK v20'ye prompt enjeksiyonu, yapay zekâ ajanı istismarı ve MFA atlatma eklendi https://threatticker.com/news/openai-says-internal-models-bypassed-authorization-and-used-a-stranger-s-testThreatTickeren2026-10-19T04:08:45.193ZOpenAI says internal models bypassed authorization and used a stranger's test wallet https://threatticker.com/tr/haber/openai-ic-modeller-yetki-denetimlerini-atlatti-baskasinin-test-cuzdaniniThreatTickertr2026-10-19T04:08:45.193ZOpenAI: İç modeller yetki denetimlerini atlattı, başkasının test cüzdanını kullandı https://threatticker.com/news/decades-old-broadcom-wi-fi-bug-lets-attackers-hijack-routers-without-theThreatTickeren2026-10-19T01:08:00.014ZDecades-old Broadcom Wi-Fi bug lets attackers hijack routers without the password https://threatticker.com/tr/haber/broadcom-wi-fi-yongalarindaki-eski-acik-modemlerin-parolasiz-ele-gecirilmesineThreatTickertr2026-10-19T01:08:00.014ZBroadcom Wi-Fi yongalarındaki eski açık, modemlerin parolasız ele geçirilmesine yol açıyor https://threatticker.com/news/attackers-exploit-siteguard-waf-flaw-to-run-commands-as-root-or-systemThreatTickeren2026-10-18T16:07:03.828ZAttackers exploit SiteGuard WAF flaw to run commands as root or SYSTEM https://threatticker.com/tr/haber/siteguard-waf-taki-acik-saldirganlara-root-ve-system-yetkisiyle-komutThreatTickertr2026-10-18T16:07:03.828ZSiteGuard WAF'taki açık, saldırganlara root ve SYSTEM yetkisiyle komut çalıştırtıyor https://threatticker.com/news/opencode-breach-may-have-exposed-users-openai-anthropic-and-google-api-keysThreatTickeren2026-10-18T10:08:43.096ZOpenCode breach may have exposed users' OpenAI, Anthropic and Google API keys https://threatticker.com/tr/haber/opencode-ihlalinde-openai-anthropic-ve-google-api-anahtarlari-aciga-cikmisThreatTickertr2026-10-18T10:08:43.096ZOpenCode ihlalinde OpenAI, Anthropic ve Google API anahtarları açığa çıkmış olabilir https://threatticker.com/news/public-exploit-gains-root-on-openbsd-7-9-by-chaining-a-decades-old-sharedThreatTickeren2026-10-18T04:10:39.176ZPublic exploit gains root on OpenBSD 7.9 by chaining a decades-old shared-memory bug https://threatticker.com/tr/haber/openbsd-7-9-da-onlarca-yillik-paylasimli-bellek-hatasiyla-root-veren-istismarThreatTickertr2026-10-18T04:10:39.176ZOpenBSD 7.9'da onlarca yıllık paylaşımlı bellek hatasıyla root veren istismar yayımlandı https://threatticker.com/news/stolen-ets-login-exposed-data-on-millions-of-california-students-for-monthsThreatTickeren2026-10-18T04:10:34.321ZStolen ETS login exposed data on millions of California students for months https://threatticker.com/tr/haber/calinan-ets-parolasi-milyonlarca-kaliforniyali-ogrencinin-verisini-aylarcaThreatTickertr2026-10-18T04:10:34.321ZÇalınan ETS parolası milyonlarca Kaliforniyalı öğrencinin verisini aylarca açıkta bıraktı https://threatticker.com/news/russian-police-detain-suspected-datasuckers-hackers-after-dodo-pizza-breachThreatTickeren2026-10-17T22:09:27.610ZRussian police detain suspected DataSuckers hackers after Dodo Pizza breach https://threatticker.com/tr/haber/dodo-pizza-ihlalinin-ardindan-datasuckers-uyesi-oldugu-iddia-edilen-3-kisiThreatTickertr2026-10-17T22:09:27.610ZDodo Pizza ihlalinin ardından DataSuckers üyesi olduğu iddia edilen 3 kişi gözaltında