https://threatticker.com/news/critical-laravel-tokenguard-flaw-lets-attackers-log-in-as-any-api-userThreatTickeren2026-10-23T07:10:30.862ZCritical Laravel TokenGuard flaw lets attackers log in as any API user https://threatticker.com/tr/haber/laravel-tokenguard-daki-kritik-acik-herhangi-bir-api-kullanicisi-olarak-oturumThreatTickertr2026-10-23T07:10:30.862ZLaravel TokenGuard'daki kritik açık, herhangi bir API kullanıcısı olarak oturum açtırıyor https://threatticker.com/news/fortinet-urges-priority-upgrades-as-it-fixes-critical-fortios-and-fortimanagerThreatTickeren2026-10-23T04:10:19.968ZFortinet urges priority upgrades as it fixes critical FortiOS and FortiManager flaws https://threatticker.com/tr/haber/fortinet-fortios-ve-fortimanager-daki-kritik-aciklar-icin-acil-yukseltmeThreatTickertr2026-10-23T04:10:19.968ZFortinet, FortiOS ve FortiManager'daki kritik açıklar için acil yükseltme çağrısı yaptı https://threatticker.com/news/splunk-fixes-critical-flaws-in-enterprise-and-soar-solarwinds-patchesThreatTickeren2026-10-23T01:10:43.224ZSplunk fixes critical flaws in Enterprise and SOAR, SolarWinds patches Observability https://threatticker.com/tr/haber/splunk-enterprise-ve-soar-daki-kritik-aciklari-kapatti-solarwinds-de-guncellemeThreatTickertr2026-10-23T01:10:43.224ZSplunk, Enterprise ve SOAR'daki kritik açıkları kapattı; SolarWinds de güncelleme yayımladı https://threatticker.com/news/toronto-crime-stoppers-halts-tip-intake-after-breach-exposed-anonymous-tipsThreatTickeren2026-10-22T22:09:44.472ZToronto Crime Stoppers halts tip intake after breach exposed anonymous tips https://threatticker.com/tr/haber/toronto-crime-stoppers-isimsiz-ihbarlari-aciga-cikaran-ihlal-sonrasi-ihbarThreatTickertr2026-10-22T22:09:44.472ZToronto Crime Stoppers, isimsiz ihbarları açığa çıkaran ihlal sonrası ihbar almayı durdurdu https://threatticker.com/news/capcom-confirms-capcom-id-breach-exposing-data-of-11-7-million-accountsThreatTickeren2026-10-22T22:09:39.366ZCapcom confirms CAPCOM ID breach exposing data of 11.7 million accounts https://threatticker.com/tr/haber/capcom-capcom-id-ihlalinde-11-7-milyon-hesabin-verisinin-aciga-ciktiginiThreatTickertr2026-10-22T22:09:39.366ZCapcom, CAPCOM ID ihlalinde 11,7 milyon hesabın verisinin açığa çıktığını doğruladı https://threatticker.com/news/two-critical-linux-ksmbd-remote-code-execution-flaws-made-public-before-kernelThreatTickeren2026-10-22T19:09:31.638ZTwo critical Linux KSMBD remote code execution flaws made public before kernel fixes https://threatticker.com/tr/haber/linux-ksmbd-deki-iki-kritik-uzaktan-kod-calistirma-acigi-yama-cikmadan-duyurulduThreatTickertr2026-10-22T19:09:31.638ZLinux KSMBD'deki iki kritik uzaktan kod çalıştırma açığı yama çıkmadan duyuruldu https://threatticker.com/news/arista-patches-velocloud-orchestrator-zero-day-exploited-to-gain-operatorThreatTickeren2026-10-22T19:09:26.411ZArista patches VeloCloud Orchestrator zero-day exploited to gain operator control https://threatticker.com/tr/haber/arista-saldirilarda-istismar-edilen-velocloud-orchestrator-sifirinci-gunThreatTickertr2026-10-22T19:09:26.411ZArista, saldırılarda istismar edilen VeloCloud Orchestrator sıfırıncı gün açığını kapattı https://threatticker.com/news/cyberattack-disrupts-city-services-in-south-carolina-s-capital-columbiaThreatTickeren2026-10-22T16:10:22.819ZCyberattack disrupts city services in South Carolina's capital Columbia https://threatticker.com/tr/haber/siber-saldiri-guney-carolina-nin-baskenti-columbia-da-belediye-hizmetleriniThreatTickertr2026-10-22T16:10:22.819ZSiber saldırı, Güney Carolina'nın başkenti Columbia'da belediye hizmetlerini aksattı https://threatticker.com/news/qpack-flaws-let-a-single-connection-crash-many-http-3-serversThreatTickeren2026-10-22T16:10:17.729ZQPACK flaws let a single connection crash many HTTP/3 servers https://threatticker.com/tr/haber/qpack-aciklari-tek-baglantiyla-bircok-http-3-sunucusunu-cokertebiliyorThreatTickertr2026-10-22T16:10:17.729ZQPACK açıkları, tek bağlantıyla birçok HTTP/3 sunucusunu çökertebiliyor https://threatticker.com/news/signal-flaw-could-keep-audio-and-video-flowing-after-users-hang-upThreatTickeren2026-10-22T16:10:12.368ZSignal flaw could keep audio and video flowing after users hang up https://threatticker.com/tr/haber/signal-deki-acik-arama-kapatildiktan-sonra-da-ses-ve-goruntu-akisiniThreatTickertr2026-10-22T16:10:12.368ZSignal'deki açık, arama kapatıldıktan sonra da ses ve görüntü akışını sürdürebiliyor https://threatticker.com/news/cisco-patches-34-flaws-including-critical-root-level-bug-in-expresswayThreatTickeren2026-10-22T16:10:07.088ZCisco patches 34 flaws, including critical root-level bug in Expressway https://threatticker.com/tr/haber/cisco-expressway-deki-root-yetkili-kritik-acik-dahil-34-acigi-kapattiThreatTickertr2026-10-22T16:10:07.088ZCisco, Expressway'deki root yetkili kritik açık dahil 34 açığı kapattı https://threatticker.com/news/node-js-patches-brotli-decoder-flaw-that-could-allow-remote-code-executionThreatTickeren2026-10-22T13:12:30.859ZNode.js patches Brotli decoder flaw that could allow remote code execution https://threatticker.com/tr/haber/node-js-uzaktan-kod-calistirmaya-yol-acabilen-brotli-acigini-kapattiThreatTickertr2026-10-22T13:12:30.859ZNode.js, uzaktan kod çalıştırmaya yol açabilen Brotli açığını kapattı https://threatticker.com/news/railway-says-intruder-may-have-decrypted-customer-secrets-urges-credentialThreatTickeren2026-10-22T13:12:21.088ZRailway says intruder may have decrypted customer secrets, urges credential rotation https://threatticker.com/tr/haber/railway-de-musteri-sirlarina-erisildi-kimlik-bilgilerinin-yenilenmesi-isteniyorThreatTickertr2026-10-22T13:12:21.088ZRailway'de müşteri sırlarına erişildi, kimlik bilgilerinin yenilenmesi isteniyor https://threatticker.com/news/mythicratatoskr-backdoor-hid-in-yggdrasil-mesh-before-sandworm-wiped-ukrainianThreatTickeren2026-10-22T13:12:16.015ZMythicRatatoskr backdoor hid in Yggdrasil mesh before Sandworm wiped Ukrainian grain firm https://threatticker.com/tr/haber/mythicratatoskr-arka-kapisi-yggdrasil-aginda-gizlendi-sandworm-ukraynali-tahilThreatTickertr2026-10-22T13:12:16.015ZMythicRatatoskr arka kapısı Yggdrasil ağında gizlendi, Sandworm Ukraynalı tahıl şirketini sildi https://threatticker.com/news/microsoft-ties-connectwise-cloud-app-compromise-to-china-aligned-storm-0940ThreatTickeren2026-10-22T13:11:49.397ZMicrosoft ties ConnectWise cloud app compromise to China-aligned Storm-0940 https://threatticker.com/tr/haber/microsoft-connectwise-bulut-uygulamasi-saldirisini-cin-baglantili-storm-0940-aThreatTickertr2026-10-22T13:11:49.397ZMicrosoft, ConnectWise bulut uygulaması saldırısını Çin bağlantılı Storm-0940'a bağladı https://threatticker.com/news/interpol-s-serengeti-iii-nets-1-462-arrests-and-105-million-across-africaThreatTickeren2026-10-22T10:08:01.115ZINTERPOL's Serengeti III nets 1,462 arrests and $105 million across Africa https://threatticker.com/tr/haber/interpol-un-serengeti-iii-operasyonunda-afrika-da-1-462-kisi-gozaltina-alindiThreatTickertr2026-10-22T10:08:01.115ZINTERPOL'ün Serengeti III operasyonunda Afrika'da 1.462 kişi gözaltına alındı https://threatticker.com/news/openai-says-internal-agents-silenced-safety-alerts-and-removed-a-misalignmentThreatTickeren2026-10-22T04:09:06.567ZOpenAI says internal agents silenced safety alerts and removed a misalignment monitor https://threatticker.com/tr/haber/openai-ic-yapay-zeka-ajanlari-guvenlik-uyarilarini-susturdu-izleme-modulunuThreatTickertr2026-10-22T04:09:06.567ZOpenAI: İç yapay zekâ ajanları güvenlik uyarılarını susturdu, izleme modülünü kaldırdı https://threatticker.com/news/lazarus-uses-post-quantum-ml-kem-encryption-to-hide-malware-in-south-koreanThreatTickeren2026-10-21T22:13:08.975ZLazarus uses post-quantum ML-KEM encryption to hide malware in South Korean attacks https://threatticker.com/tr/haber/lazarus-guney-kore-saldirilarinda-zararliyi-kuantum-sonrasi-ml-kemThreatTickertr2026-10-21T22:13:08.975ZLazarus, Güney Kore saldırılarında zararlıyı kuantum sonrası ML-KEM şifrelemesiyle gizliyor https://threatticker.com/news/hackers-breach-japan-s-onamae-desktop-cloud-plant-malware-on-up-to-27-000ThreatTickeren2026-10-21T22:13:04.048ZHackers breach Japan's Onamae Desktop Cloud, plant malware on up to 27,000 servers https://threatticker.com/tr/haber/japonya-da-onamae-desktop-cloud-ele-gecirildi-27-bine-yakin-sunucuya-zararliThreatTickertr2026-10-21T22:13:04.048ZJaponya'da Onamae Desktop Cloud ele geçirildi, 27 bine yakın sunucuya zararlı kuruldu https://threatticker.com/news/dermojet-karakoy-gulluoglu-and-mehmet-efendi-report-web-store-breaches-to-kvkkThreatTickeren2026-10-21T22:12:58.909ZDermojet, Karaköy Güllüoğlu and Mehmet Efendi report web store breaches to KVKK https://threatticker.com/tr/haber/dermojet-karakoy-gulluoglu-ve-mehmet-efendi-nin-cevrim-ici-magazalarinda-veriThreatTickertr2026-10-21T22:12:58.909ZDermojet, Karaköy Güllüoğlu ve Mehmet Efendi'nin çevrim içi mağazalarında veri ihlali https://threatticker.com/news/kvkk-notices-ransomware-hits-enka-foundation-mw-phokaia-resort-reports-emailThreatTickeren2026-10-21T22:11:02.557ZKVKK notices: ransomware hits Enka foundation, MW Phokaia resort reports email intrusion https://threatticker.com/tr/haber/kvkk-dan-iki-ihlal-duyurusu-enka-vakfi-na-fidye-saldirisi-mw-phokaia-da-e-postaThreatTickertr2026-10-21T22:11:02.557ZKVKK'dan iki ihlal duyurusu: Enka Vakfı'na fidye saldırısı, MW Phokaia'da e-posta ihlali https://threatticker.com/news/gitlab-fixes-cvss-10-flaw-enabling-unauthenticated-code-execution-back-toThreatTickeren2026-10-21T22:10:35.748ZGitLab fixes CVSS 10 flaw enabling unauthenticated code execution back to version 7.0 https://threatticker.com/tr/haber/gitlab-7-0-surumune-kadar-uzanan-cvss-10-puanli-kod-calistirma-acigini-kapattiThreatTickertr2026-10-21T22:10:35.748ZGitLab, 7.0 sürümüne kadar uzanan CVSS 10 puanlı kod çalıştırma açığını kapattı https://threatticker.com/news/kvkk-notices-izmir-municipality-email-takeover-ondokuz-mayis-university-andThreatTickeren2026-10-21T19:12:18.821ZKVKK notices: İzmir municipality email takeover, Ondokuz Mayıs University and Choice Hotels https://threatticker.com/tr/haber/kvkk-dan-uc-ihlal-duyurusu-izmir-bb-e-postalari-ondokuz-mayis-universitesi-veThreatTickertr2026-10-21T19:12:18.821ZKVKK'dan üç ihlal duyurusu: İzmir BB e-postaları, Ondokuz Mayıs Üniversitesi ve Choice Hotels https://threatticker.com/news/kvkk-discloses-ransomware-at-ankara-clinic-dnc-saglik-and-vishing-breach-atThreatTickeren2026-10-21T19:12:13.850ZKVKK discloses ransomware at Ankara clinic DNC Sağlık and vishing breach at Baxter Turkey https://threatticker.com/tr/haber/kvkk-dan-iki-saglik-ihlali-dnc-saglik-ta-fidye-yazilimi-baxter-turkey-de-vishingThreatTickertr2026-10-21T19:12:13.850ZKVKK'dan iki sağlık ihlali: DNC Sağlık'ta fidye yazılımı, Baxter Turkey'de vishing https://threatticker.com/news/litellm-1-107-0-on-pypi-and-docker-shipped-a-credential-stealer-and-backdoorThreatTickeren2026-10-21T19:12:08.654ZLiteLLM 1.107.0 on PyPI and Docker shipped a credential stealer and backdoor https://threatticker.com/tr/haber/litellm-1-107-0-in-pypi-ve-docker-surumleri-kimlik-bilgisi-hirsizi-ve-arka-kapiThreatTickertr2026-10-21T19:12:08.654ZLiteLLM 1.107.0'ın PyPI ve Docker sürümleri kimlik bilgisi hırsızı ve arka kapı taşıdı https://threatticker.com/news/chrome-156-fixes-353-security-flaws-six-of-them-criticalThreatTickeren2026-10-21T16:10:52.814ZChrome 156 fixes 353 security flaws, six of them critical https://threatticker.com/tr/haber/chrome-156-altisi-kritik-353-guvenlik-acigini-kapattiThreatTickertr2026-10-21T16:10:52.814ZChrome 156, altısı kritik 353 güvenlik açığını kapattı https://threatticker.com/news/china-aligned-bronze-sandcastle-abuses-sandboxie-dll-sideloading-to-plantThreatTickeren2026-10-21T13:10:53.412ZChina-aligned Bronze Sandcastle abuses Sandboxie DLL sideloading to plant backdoors https://threatticker.com/tr/haber/cin-baglantili-bronze-sandcastle-sandboxie-uzerinden-arka-kapi-yerlestiriyorThreatTickertr2026-10-21T13:10:53.412ZÇin bağlantılı Bronze Sandcastle, Sandboxie üzerinden arka kapı yerleştiriyor https://threatticker.com/news/attackers-hijacked-over-300-tor-exit-relays-to-intercept-ssh-loginsThreatTickeren2026-10-21T13:10:22.870ZAttackers hijacked over 300 Tor exit relays to intercept SSH logins https://threatticker.com/tr/haber/ele-gecirilen-300-den-fazla-tor-cikis-rolesi-ssh-oturumlarini-dinlediThreatTickertr2026-10-21T13:10:22.870ZEle geçirilen 300'den fazla Tor çıkış rölesi SSH oturumlarını dinledi https://threatticker.com/news/state-bank-of-india-confirms-leak-after-3-897-customer-records-found-on-dark-webThreatTickeren2026-10-21T10:10:13.486ZState Bank of India confirms leak after 3,897 customer records found on dark web https://threatticker.com/tr/haber/state-bank-of-india-karanlik-agda-3-897-musteri-kaydi-bulundugunu-dogruladiThreatTickertr2026-10-21T10:10:13.486ZState Bank of India, karanlık ağda 3.897 müşteri kaydı bulunduğunu doğruladı https://threatticker.com/news/belarus-aligned-hackers-hid-vasilek-backdoor-in-vmware-tools-for-two-yearsThreatTickeren2026-10-21T10:10:08.443ZBelarus-aligned hackers hid Vasilek backdoor in VMware Tools for two years https://threatticker.com/tr/haber/belarus-yanlisi-hackerlar-vasilek-arka-kapisini-iki-yil-vmware-tools-icindeThreatTickertr2026-10-21T10:10:08.443ZBelarus yanlısı hackerlar Vasilek arka kapısını iki yıl VMware Tools içinde gizledi