{"schema":"sgh-cti-feed/1","generated_at":"2026-10-30T18:53:16+03:00","window_days":30,"count":1035,"items":[{"id":"yetkisiz-codex-claude-code-relay-guvenlik-korumalari-12-kurum-2026-10-30","first_seen":"2026-10-30T18:58:00+03:00","updated":"2026-10-30T18:58:00+03:00","title":"Yetkisiz Codex/Claude Code aktarıcıları 12 kurumda güvenlik korumalarını devre dışı bıraktı (GBHackers)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/feed/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"aur0ra-fidye-cursor-claude-otomasyon-gbhackers-2026-10-30","first_seen":"2026-10-30T18:58:00+03:00","updated":"2026-10-30T18:58:00+03:00","title":"Aur0ra fidye yazılımı operasyonunda Cursor ve Claude ile saldırı otomasyonu (GBHackers)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/feed/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":"Aur0ra","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"musebot-auth-bypass-cve-2026-119660-2026-10-30","first_seen":"2026-10-30T18:58:00+03:00","updated":"2026-10-30T18:58:00+03:00","title":"MuseBot <2.0.0 sabit anahtarla yönetici oturumu sahteleme (CVE-2026-119660, NVD CRITICAL)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119660","cve":["CVE-2026-119660"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"coreshop-sqli-cve-2026-119655-119656-2026-10-30","first_seen":"2026-10-30T18:58:00+03:00","updated":"2026-10-30T18:58:00+03:00","title":"CoreShop ≤1.5.5 kimlik doğrulamasız SQL enjeksiyonu (CVE-2026-119655/119656, NVD HIGH)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119655","cve":["CVE-2026-119655"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"traefik-kubernetes-ingress-auth-bypass-cve-2026-119572-2026-10-30","first_seen":"2026-10-30T17:55:00+03:00","updated":"2026-10-30T17:55:00+03:00","title":"Traefik 3.7.0-ea.1–3.7.14 Kubernetes Ingress kimlik doğrulama atlatma (CVE-2026-119572, NVD HIGH)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119572","cve":["CVE-2026-119572"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":"Traefik 3.7.0-ea.1","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"opendeepwiki-sabit-jwt-anahtari-cve-2026-119597-2026-10-30","first_seen":"2026-10-30T17:55:00+03:00","updated":"2026-10-30T17:55:00+03:00","title":"OpenDeepWiki ≤2.0.6 sabit JWT imzalama anahtarı (CVE-2026-119597, NVD CRITICAL)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119597","cve":["CVE-2026-119597"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"steam-sifir-tiklama-atredis-iki-tasma-2026-10-30","first_seen":"2026-10-30T15:49:23+03:00","updated":"2026-10-30T15:49:23+03:00","title":"Steam: aynı hesaba bağlı başka PC üzerinden sıfır tıklamalı ele geçirme — Atredis Partners iki arabellek taşması, çalışan istismar yayımlandı (yamalı/süre doldu)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ao3-guvenlik-olayi-olasi-veri-ihlali-2026-10-30","first_seen":"2026-10-30T15:49:23+03:00","updated":"2026-10-30T15:49:23+03:00","title":"Archive of Our Own (AO3) güvenlik olayı ve olası veri ihlali uyarısı, site erişilemez","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Archive of Our Own","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"au-small-finance-bank-sizinti-tehdidi-2026-10-30","first_seen":"2026-10-30T15:49:23+03:00","updated":"2026-10-30T15:49:23+03:00","title":"Hindistan AU Small Finance Bank: hackerlar Aadhaar/PAN ve müşteri kayıtlarını sızdırmakla tehdit ediyor (iddia)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Hindistan AU Small Finance Bank","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"sqlite-fts5-session-heap-tasma-cve-2026-119373-2026-10-30","first_seen":"2026-10-30T15:49:23+03:00","updated":"2026-10-30T15:49:23+03:00","title":"SQLite <3.54.0 FTS5/session uzantısı yığın taşmaları (CVE-2026-119373/119374/119379) ve .recover komut enjeksiyonu (CVE-2026-119586)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119373","cve":["CVE-2026-119373","CVE-2026-119586"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"vsftpd-ftps-kimlik-dogrulama-atlatma-cve-2026-119568-2026-10-30","first_seen":"2026-10-30T15:49:23+03:00","updated":"2026-10-30T15:49:23+03:00","title":"vsftpd ≤3.0.5 ssl_data_accept kimlik doğrulama atlatma, FTPS veri bağlantısı ele geçirme (CVE-2026-119568)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119568","cve":["CVE-2026-119568"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"element-web-misafir-kimlik-url-parcasi-cve-2026-119407-2026-10-30","first_seen":"2026-10-30T15:49:23+03:00","updated":"2026-10-30T15:49:23+03:00","title":"Element Web/Desktop <1.12.32 URL parçasından misafir kimlik kabulü (CVE-2026-119407)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119407","cve":["CVE-2026-119407"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"android-gorunmez-sms-of-death-reboot-dongusu-2026-10-30-ad5806","first_seen":"2026-10-30T14:51:23+03:00","updated":"2026-10-30T14:51:23+03:00","title":"Cybernews: «Invisible SMS of Death» Android telefonu yeniden başlatma döngüsüne sokuyor (fabrika ayarına dönmeden çıkmıyor)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Cybernews","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"manufacturing","country":null,"sgb_id":null,"kev":false},{"id":"japonya-disisleri-3600-kayit-veri-ihlali-aa-2026-10-30","first_seen":"2026-10-30T14:51:23+03:00","updated":"2026-10-30T14:51:23+03:00","title":"Japonya Dışişleri Bakanlığı 3.600 kaydı etkileyen veri ihlali bildirdi (AA)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"quest-diagnostics-veri-ihlali-hasta-kayitlari-2026-10-30","first_seen":"2026-10-30T14:51:23+03:00","updated":"2026-10-30T14:51:23+03:00","title":"Quest Diagnostics veri ihlali: kişisel bilgiler ve hasta kayıtları açığa çıktı (CPO Magazine)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"kairos-ddos-botnet-linux-tcp-gbhackers-2026-10-30","first_seen":"2026-10-30T14:51:23+03:00","updated":"2026-10-30T14:51:23+03:00","title":"yeni Kairos DDoS botneti Linux cihazları ele geçiriyor (Kairos fidye grubuyla isim benzerliği)","category":"ransomware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/feed/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"polymarket-sahte-dolandiricilik-agi-11-milyon-gbhackers-2026-10-30","first_seen":"2026-10-30T14:51:23+03:00","updated":"2026-10-30T14:51:23+03:00","title":"Sahte Polymarket dolandırıcılık ağı ~11 milyon dolarlık kripto yatırımı topladı (GBHackers)","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/feed/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"connectwise-backup-2250-kiraci-2026-10-30","first_seen":"2026-10-30T14:51:23+03:00","updated":"2026-10-30T14:51:23+03:00","title":"ConnectWise yedekleme saldırısı: 2.250 kiracı etkilendi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/feed/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"tatil-rezervasyon-siber-saldiri-turizm-aktuel-2026-10-30","first_seen":"2026-10-30T13:57:45+03:00","updated":"2026-10-30T13:57:45+03:00","title":"«Tatil rezervasyonlarına siber saldırı» (Turizm Aktüel, Google News 30 Eki) — muhtemelen Amadeus/havayolu olayının yansıması","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"transport","country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1432","first_seen":"2026-10-30T13:11:27+03:00","updated":"2026-10-30T17:11:51+03:00","title":"SGB TR-26-1432: Kriptek - Vatos DLP Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Kriptek Kripto ve Bilişim Teknolojileri Sanayi Tic. A. Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1432","cve":["CVE-2026-86715"],"cvss":3.1,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/kriptek-vatos-dlp-acigi-cve-2026-86715-tr-26-1432-sgb.html","summary":"Kriptek Kripto ve Bilişim Teknolojileri Sanayi Tic. A. Ş. tarafından geliştirilen Vatos DLP ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az v1.1.243 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Kriptek Kripto ve Bilişim Teknolojileri Sanayi Tic. A. Ş.","affected_products":["Vatos DLP"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":"TR-26-1432","kev":false},{"id":"drupal-commerce-core-cve-2026-118539-aktif-istismar-2026-10-30","first_seen":"2026-10-30T12:58:07+03:00","updated":"2026-10-30T13:57:45+03:00","title":"Drupal Commerce Core erişim atlatma açığı CVE-2026-118539 aktif istismarda","category":"vulnerability","severity":"critical","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1424","cve":["CVE-2026-118539"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"teamviewer-cve-2026-111585-teknisyen-ele-gecirme-securityweek-2026-10-30","first_seen":"2026-10-30T12:58:07+03:00","updated":"2026-10-30T12:58:07+03:00","title":"TeamViewer CVE-2026-111585 tamsayı taşması — kötü niyetli ana bilgisayar destek teknisyeninin makinesini ele geçirebilir","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.securityweek.com/teamviewer-flaw-could-let-malicious-hosts-take-over-support-technicians-machines/","cve":["CVE-2026-111585"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ivanti-connect-secure-0day-csn-2026-10-30","first_seen":"2026-10-30T12:58:07+03:00","updated":"2026-10-30T14:51:23+03:00","title":"CyberSecurityNews: Ivanti Connect Secure sıfırıncı gün açıkları kimlik doğrulamasız root erişimi için sahada istismar ediliyor (30 Eki 11:26)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"CyberSecurityNews","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"n-central-zero-day-yonetilen-uc-noktalar-orcarouter-2026-10-30","first_seen":"2026-10-30T12:58:07+03:00","updated":"2026-10-30T12:58:07+03:00","title":"OrcaRouter: N-central zero-day — saldırganlar yönetilen uç noktalara ulaştı (30 Eki 12:22)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"OrcaRouter","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cathay-pacific-veri-ihlali-bloomberg-2026-10-30","first_seen":"2026-10-30T12:58:07+03:00","updated":"2026-10-30T12:58:07+03:00","title":"Bloomberg: Cathay Pacific veri ihlali, havayolu ihlalleri listesine katıldı (30 Eki 12:12)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"transport","country":null,"sgb_id":null,"kev":false},{"id":"claude-sandbox-yerel-baglanti-kisiti-atlatma-gbhackers-2026-10-30","first_seen":"2026-10-30T11:59:18+03:00","updated":"2026-10-30T11:59:18+03:00","title":"Claude yapay zekâsı iç sandbox ayrıntılarını açığa vurdu, araştırmacı yerel bağlantı kısıtlarını atlattı","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/claude-ai-sandbox-restrictions/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"bithumb-844-musteri-veri-ihlali-biggo-2026-10-30","first_seen":"2026-10-30T11:59:18+03:00","updated":"2026-10-30T11:59:18+03:00","title":"Bithumb veri ihlali: 844 müşteri etkilendi (BigGo Finance 30 Eki)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Bithumb","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"claude-code-open-vsx-sahte-eklenti-ssh-anahtari-2026-10-30","first_seen":"2026-10-30T11:07:21+03:00","updated":"2026-10-30T14:05:34+03:00","title":"Zararlı Claude Code Sürümü 5 Bine Kadar Cursor Kullanıcısına Ulaştı","category":"malware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://cursor.com/blog/claude-code-extension-security-notice","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/claude-code-eklentisi-cursor-ssh-arka-kapi-2026.html","summary":"Cursor mağazasında 29 Ekim'de 11 saat dağıtılan zararlı Claude Code 2.1.313 sürümü en fazla 5.000 kullanıcıya ulaştı; SSH anahtarı ekleyip arka kapı kurmaya çalışıyor.","tags":["origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"gravity-forms-cve-2026-103039-php-nesne-enjeksiyonu-2026-10-30","first_seen":"2026-10-30T11:06:26+03:00","updated":"2026-10-30T11:06:26+03:00","title":"Gravity Forms (WordPress) ≤3.1.2 kimlik doğrulamasız PHP nesne enjeksiyonu CVE-2026-103039 (CVSS 9,8, Wordfence CNA); 3.1.3'te düzeltildi","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103039","cve":["CVE-2026-103039"],"cvss":9.8,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"synology-nas-c3rb3r-fidye-kore-2026-10-30","first_seen":"2026-10-30T11:06:26+03:00","updated":"2026-10-30T11:59:18+03:00","title":"Güney Kore'de Synology NAS cihazlarına C3RB3R (Cerber türevi) fidye saldırıları; KISA'ya çok sayıda bildirim (ChosunBiz 30 Eki)","category":"ransomware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://biz.chosun.com/en/en-it/2026/10/30/QW7K2CGWJJGB5IZUO227IVDRKM/","cve":["CVE-2026-13639"],"cvss":9.8,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"fldoe-4-9-milyon-kayit-ihlali-2026-10-30","first_seen":"2026-10-30T10:10:00+03:00","updated":"2026-10-30T13:57:45+03:00","title":"Florida Eğitim Bakanlığı (FLDOE) veri ihlali: 4,9 milyon kişi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"4,9 milyon kişi","sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"dhs-calisanlari-sizinti-iddiasi-2026-10-30","first_seen":"2026-10-30T10:10:00+03:00","updated":"2026-10-30T11:06:26+03:00","title":"DHS çalışanlarına ait veri sızıntısı iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"daishin-securities-sizinti-2026-10-30","first_seen":"2026-10-30T10:10:00+03:00","updated":"2026-10-30T10:10:00+03:00","title":"Güney Kore Daishin Securities veri sızıntısı","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Güney Kore Daishin Securities","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"adobe-veeam-juniper-yamalari-securityweek-2026-10-30","first_seen":"2026-10-30T10:10:00+03:00","updated":"2026-10-30T10:10:00+03:00","title":"Adobe, Veeam ve Juniper güvenlik yamaları (SecurityWeek özeti)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Adobe","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"alman-sirketi-siber-saldiri-gzt-2026-10-30","first_seen":"2026-10-30T10:10:00+03:00","updated":"2026-10-30T10:10:00+03:00","title":"«Alman devi» şirkete siber saldırı (GZT başlığı)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"android-sms-of-death-sifir-tiklama-telefon-cokme-2026-10-30","first_seen":"2026-10-30T08:59:00+03:00","updated":"2026-10-30T11:07:21+03:00","title":"Android «SMS of Death»: tek bozuk SMS ile telefon sürecini çökerten, acil aramaları da kesebilen etkileşimsiz açık (araştırmacı Mark B)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/new-zero-click-android-vulnerability/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"warp-panda-vmware-esxi-sifir-gun-hukuk-burolari-crowdstrike-2026-10-29","first_seen":"2026-10-30T08:59:00+03:00","updated":"2026-10-30T17:11:51+03:00","title":"CrowdStrike: Çin bağlantılı WARP PANDA, VMware ESXi'deki bir sıfır gün açığıyla ABD hukuk bürolarını hedef aldı (casusluk)","category":"apt","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/chinese-hackers-exploit-vmware-esxi-zero-day/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"legal","country":null,"sgb_id":null,"kev":false},{"id":"azure-sre-agent-cve-2026-62830-2026-10-30","first_seen":"2026-10-30T08:59:00+03:00","updated":"2026-10-30T08:59:00+03:00","title":"Azure SRE Agent CVE-2026-62830 (CVSS 9.9) — bulut tarafında Ağustos'ta düzeltilmiş; yeni değerlendirme yazıları","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-62830"],"cvss":9.9,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Azure SRE Agent","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"glib-networking-tls13-oturum-onbellegi-nvd-2026-10-30","first_seen":"2026-10-30T08:59:00+03:00","updated":"2026-10-30T08:59:00+03:00","title":"glib-networking TLS 1.3 istemci oturum önbelleği açığı (NVD 24s) + WP eklenti NVD kayıtları","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1431","first_seen":"2026-10-30T08:44:54+03:00","updated":"2026-10-30T08:44:54+03:00","title":"SGB TR-26-1431: Progress Telerik Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Progress Telerik","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1431","cve":["CVE-2026-118038","CVE-2026-118037","CVE-2026-118036","CVE-2026-118035","CVE-2026-118040","CVE-2026-118039"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Progress Telerik ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili dokümanın gözden geçirilmesi ve gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Progress Telerik","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1431","kev":false},{"id":"sgb:TR-26-1430","first_seen":"2026-10-30T08:42:47+03:00","updated":"2026-10-30T08:42:47+03:00","title":"SGB TR-26-1430: Kaspersky Network Agent Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Kaspersky Network Agent","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1430","cve":["CVE-2026-88941"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Kaspersky Network Agent'da güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Kaspersky Network Agent","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1430","kev":false},{"id":"sgb:TR-26-1429","first_seen":"2026-10-30T08:40:14+03:00","updated":"2026-10-30T08:40:14+03:00","title":"SGB TR-26-1429: Microsoft Edge Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Microsoft Edge","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1429","cve":["CVE-2026-96192","CVE-2026-88078","CVE-2026-88077","CVE-2026-96196","CVE-2026-96187","CVE-2026-85899","CVE-2026-85330","CVE-2026-88090","CVE-2026-20942","CVE-2026-96203"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Microsoft Edge ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Microsoft Edge","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1429","kev":false},{"id":"sgb:TR-26-1427","first_seen":"2026-10-30T08:36:56+03:00","updated":"2026-10-30T08:36:56+03:00","title":"SGB TR-26-1427: Red Hat Keycloak Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Red Hat Keycloak","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1427","cve":["CVE-2026-117688","CVE-2026-118030","CVE-2026-117859","CVE-2026-117627"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Red Hat Keycloak'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine Keycloak güncellemelerini ivedilikle yapmalarını önermektedir.","tags":["sgb","tr_official"],"entity":"Red Hat Keycloak","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1427","kev":false},{"id":"sgb:TR-26-1426","first_seen":"2026-10-30T08:34:21+03:00","updated":"2026-10-30T08:34:21+03:00","title":"SGB TR-26-1426: Juniper Networks Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Juniper Networks","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1426","cve":["CVE-2026-106079","CVE-2026-103411","CVE-2026-103410","CVE-2026-103409","CVE-2026-103408","CVE-2026-103407","CVE-2026-103406","CVE-2026-103405","CVE-2026-103404","CVE-2026-103403","CVE-2026-103402","CVE-2026-103401","CVE-2026-103400","CVE-2026-103394","CVE-2026-103393","CVE-2026-103392","CVE-2026-103391","CVE-2026-103390"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Juniper Networks ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güvenlik önerilerini inceleyerek gerekli önlemleri almalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Juniper Networks","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1426","kev":false},{"id":"sgb:TR-26-1425","first_seen":"2026-10-30T08:15:38+03:00","updated":"2026-10-30T08:15:38+03:00","title":"SGB TR-26-1425: WordPress Eklenti Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"WordPress Eklenti","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1425","cve":["CVE-2026-118194","CVE-2026-109975","CVE-2026-76005","CVE-2026-118169","CVE-2026-104743","CVE-2026-76780","CVE-2026-110185","CVE-2026-116750","CVE-2026-109218","CVE-2026-109370","CVE-2026-77871","CVE-2026-107710","CVE-2026-109988","CVE-2026-2839","CVE-2026-116761","CVE-2026-108366","CVE-2026-110071","CVE-2026-111111","CVE-2026-111213","CVE-2026-116610","CVE-2026-116749","CVE-2026-92098","CVE-2026-109980","CVE-2026-104729","CVE-2026-118164","CVE-2026-100175","CVE-2026-109384","CVE-2026-77188","CVE-2026-110020","CVE-2026-109979","CVE-2026-111120","CVE-2026-104740","CVE-2026-111372","CVE-2026-109978","CVE-2026-76058","CVE-2026-109972","CVE-2026-111068","CVE-2026-109590","CVE-2026-109385","CVE-2026-103996","CVE-2026-110662","CVE-2026-109381","CVE-2026-103370","CVE-2026-116609","CVE-2026-67187","CVE-2026-118804","CVE-2026-113409","CVE-2026-114173","CVE-2026-113387","CVE-2026-93757"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Bazı WordPress eklentilerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"WordPress Eklenti","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1425","kev":false},{"id":"sgb:TR-26-1424","first_seen":"2026-10-30T08:14:39+03:00","updated":"2026-10-30T08:14:39+03:00","title":"SGB TR-26-1424: Drupal Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1424","cve":["CVE-2026-118568","CVE-2026-107249","CVE-2026-107250","CVE-2026-107251","CVE-2026-107252","CVE-2026-107253","CVE-2026-107254","CVE-2026-107257","CVE-2026-107258","CVE-2026-107259","CVE-2026-107261","CVE-2026-107263","CVE-2026-107264","CVE-2026-107265","CVE-2026-107266","CVE-2026-96389","CVE-2026-107268","CVE-2026-107267","CVE-2026-107306","CVE-2026-107307","CVE-2026-107308","CVE-2026-107309","CVE-2026-107310","CVE-2026-107311","CVE-2026-107312","CVE-2026-107255","CVE-2026-107262","CVE-2026-108097","CVE-2026-110738","CVE-2026-108515","CVE-2026-108514","CVE-2026-108099","CVE-2026-114523","CVE-2026-114527","CVE-2026-114528","CVE-2026-114526","CVE-2026-114525","CVE-2026-114524","CVE-2026-114529","CVE-2026-114530","CVE-2026-114531","CVE-2026-107260","CVE-2026-114532","CVE-2026-114533","CVE-2026-114534","CVE-2026-114535","CVE-2026-114536","CVE-2026-114537","CVE-2026-114538","CVE-2026-114539"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Drupal bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanları incelemelerini ve gerken önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1424","kev":false},{"id":"sgb:TR-26-1423","first_seen":"2026-10-30T08:13:42+03:00","updated":"2026-10-30T08:13:42+03:00","title":"SGB TR-26-1423: Linux Kernel Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Linux Kernel","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1423","cve":["CVE-2026-99101","CVE-2026-99216","CVE-2026-99215","CVE-2026-99214","CVE-2026-99213","CVE-2026-99212","CVE-2026-99211","CVE-2026-99210","CVE-2026-99209","CVE-2026-99208","CVE-2026-99207","CVE-2026-99206","CVE-2026-99205","CVE-2026-99204","CVE-2026-99203","CVE-2026-99202","CVE-2026-99201","CVE-2026-99200","CVE-2026-99199","CVE-2026-99198","CVE-2026-99197","CVE-2026-99196","CVE-2026-99195","CVE-2026-99194","CVE-2026-99193","CVE-2026-99192","CVE-2026-99191","CVE-2026-99190","CVE-2026-99189","CVE-2026-99188","CVE-2026-99187","CVE-2026-99186","CVE-2026-99185","CVE-2026-99184","CVE-2026-99183","CVE-2026-99182","CVE-2026-99181","CVE-2026-99180","CVE-2026-99179","CVE-2026-99178","CVE-2026-99177","CVE-2026-99176","CVE-2026-99175","CVE-2026-99174","CVE-2026-99173","CVE-2026-99172","CVE-2026-99171","CVE-2026-99170","CVE-2026-99169","CVE-2026-99168"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Linux Kernel seviyesindeki zafiyetler için güvenlik güncellemesi yayınlanmıştır. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güncellemeleri incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Linux Kernel","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1423","kev":false},{"id":"uk-biobank-erisim-yeniden-aciliyor-2026-10-30","first_seen":"2026-10-30T07:58:00+03:00","updated":"2026-10-30T07:58:00+03:00","title":"UK Biobank büyük veri sızıntısından aylar sonra erişimi yeniden açıyor (The Scientist)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1422","first_seen":"2026-10-30T07:39:07+03:00","updated":"2026-10-30T07:39:07+03:00","title":"SGB TR-26-1422: CVE-2026-98432","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1422","cve":["CVE-2026-98432"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Linux, dünyanın farklı yerlerindeki geliştiricilerin katkısıyla geliştirilen açık kaynaklı bir işletim sistemidir. Bu sistemin en temel parçası olan Linux çekirdeği , bilgisayarın donanımını, çalışan programları ve ağ bağlantılarını yöneten yazılımdır. İnternetten gelen bir bağlantının kabul edilmesi gibi işlemler doğrudan çekirdek tarafından yürütülmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":"available","exploited":false,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1422","kev":false},{"id":"binance-hack-devops-dizustu-6-3-milyar-2026-10-30","first_seen":"2026-10-30T07:06:59+03:00","updated":"2026-10-30T07:17:00+03:00","title":"Binance'te 6,3 Milyar Dolarlık Hack Bir Dizüstüyle Başlamış Olabilir","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.binance.com/en/support/announcement/detail/c5a8729a97ac486d963784d96c5642d7","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/binance-hack-devops-dizustu-bilgisayar-6-3-milyar-dolar-2026.html","summary":"Binance tahmini 6,3 milyar dolarlık güvenlik olayının ele geçirilmiş bir DevOps mühendisi dizüstü bilgisayarıyla başlamış olabileceğini duyurdu.","tags":["origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"Binance","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"belarus-devlet-hackerlari-veri-silici-wiper-2026-10-30","first_seen":"2026-10-30T05:58:00+03:00","updated":"2026-10-30T05:58:00+03:00","title":"Belarus devlet destekli hackerların veri silici (wiper) kullanmaya başladığı bildirildi","category":"apt","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"radware-github-issues-61-repo-ci-cd-tedarik-zinciri-2026-10-29","first_seen":"2026-10-30T05:10:00+03:00","updated":"2026-10-30T05:10:00+03:00","title":"Radware: gizli HTML yorumlu GitHub issue/PR'larla 61 açık kaynak depoya 43 dakikada 83 saldırı (Trivy, Brave, MLflow, Google LangExtract) — CI/CD'de komut çalıştırıp token çalma amaçlı tedarik zinciri","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.theregister.com/security/2026/10/29/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour/5306153","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":"Radware","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"wagyu-xyz-kripto-takas-ihlal-iddiasi-monero-38k-kayit-2026-10-29","first_seen":"2026-10-30T05:10:00+03:00","updated":"2026-10-30T05:10:00+03:00","title":"Wagyu.xyz kripto takas platformu ihlal iddiası: 38.628 sipariş kaydı, 10.139 IP; Monero işlemleri ile açık blokzincir ödemeleri eşleşiyor (18 Tem–26 Eki 2026)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"ai-gelistirici-araclari-5-arac-acik-openai-microsoft-yamasiz-2026-10-29","first_seen":"2026-10-30T03:55:00+03:00","updated":"2026-10-30T03:55:00+03:00","title":"The Register: 5 yapay zekâ geliştirici aracında açık; OpenAI ve Microsoft açıkları hâlâ yamasız","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"google-gemini-4-carbon-siber-savunma-2026-10-28","first_seen":"2026-10-30T02:08:00+03:00","updated":"2026-10-30T11:06:26+03:00","title":"Gemini 4 Carbon Açık Bulma Testinde %88,2: İlk Erişim Savunmacılarda","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://blog.google/innovation-and-ai/models-and-research/gemini-models/introducing-gemini-4-carbon/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/google-gemini-4-carbon-siber-savunma-acik-bulma-2026.html","summary":"Google'a göre açık bulma testinde %88,2 alan Gemini 4 Carbon, kötüye kullanım riskine karşı önce seçilmiş siber savunmacılara açılıyor.","tags":["country:US","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"chrome-uzantilari-319-13-4m-kurulum-arama-yonlendirme-socket-2026-10-29","first_seen":"2026-10-30T02:08:00+03:00","updated":"2026-10-30T02:08:00+03:00","title":"Socket: 13,4 milyon kurulumlu Chrome uzantıları arama sorgularını ele geçiriyor (BleepingComputer)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.bleepingcomputer.com/news/security/chrome-extensions-with-134-million-installs-caught-hijacking-searches/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":"Socket","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"hugging-face-zararli-kampanya-gpu-kripto-madencilik-2026-10-30","first_seen":"2026-10-30T02:08:00+03:00","updated":"2026-10-30T02:08:00+03:00","title":"Hugging Face üzerindeki zararlı yazılım kampanyası GPU'ları kripto madenciliği için ele geçirmeye geri döndü (BleepingComputer)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.bleepingcomputer.com/news/security/hugging-face-malware-campaign-returns-to-hijack-gpus-for-crypto-mining/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","malware"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"apple-app-store-sahte-kripto-uygulama-23k-cuzdan-2026-10-29","first_seen":"2026-10-30T02:08:00+03:00","updated":"2026-10-30T02:08:00+03:00","title":"Apple App Store'daki sahte kripto uygulaması 23 bin dolarlık cüzdan hırsızlığıyla ilişkilendirildi (BleepingComputer)","category":"fraud","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.bleepingcomputer.com/news/security/fake-crypto-app-on-apple-app-store-linked-to-23k-wallet-theft/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"anthropic-temali-oltalama-guvenlik-araclari-atlatma-dark-reading-2026-10-30","first_seen":"2026-10-30T02:08:00+03:00","updated":"2026-10-30T02:08:00+03:00","title":"Dark Reading: Anthropic temalı oltalama e-postaları önde gelen güvenlik araçlarını atlatıyor","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"mccarthy-tetrault-davies-hukuk-burolari-veri-ihlali-2026-10-29","first_seen":"2026-10-30T02:08:00+03:00","updated":"2026-10-30T02:08:00+03:00","title":"Kanada'nın büyük hukuk büroları McCarthy Tétrault ve Davies veri ihlallerine uğradı (The Globe and Mail)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CA"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"legal","country":"CA","sgb_id":null,"kev":false},{"id":"claimtek-systems-veri-ihlali-iddiasi-2026-10-29","first_seen":"2026-10-30T02:08:00+03:00","updated":"2026-10-30T02:08:00+03:00","title":"ClaimTek Systems veri ihlali iddiası — avukatlar hackerların iddialarını inceliyor (ClassAction.org)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"legal","country":"US","sgb_id":null,"kev":false},{"id":"cisco-quarry-ai-ajan-saldiri-acik-kaynak-2026-10-29","first_seen":"2026-10-30T02:08:00+03:00","updated":"2026-10-30T02:08:00+03:00","title":"Cisco, zararsız adımlara gizlenmiş AI ajan saldırılarını yakalayan Quarry'yi açık kaynak yaptı (SecurityWeek)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":"Cisco","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"irlanda-calisma-izni-cevrimici-sistem-ihlal-suphesi-2026-10-29","first_seen":"2026-10-30T01:05:00+03:00","updated":"2026-10-30T01:05:00+03:00","title":"İrlanda: çalışma izni (employment permit) çevrimiçi sistemde şüpheli veri ihlali (RTÉ)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:IE"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"IE","sgb_id":null,"kev":false},{"id":"uca-community-care-clinic-veri-ihlali-2026-10-29","first_seen":"2026-10-30T01:05:00+03:00","updated":"2026-10-30T01:05:00+03:00","title":"ABD/Arkansas: University of Central Arkansas Community Care Clinic müşterilerine olası veri ihlali bildirimi","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":"ABD/Arkansas","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"US","sgb_id":null,"kev":false},{"id":"deepseek-moonshot-gpt6-astra-damitma-the-information-2026-10-29","first_seen":"2026-10-30T01:05:00+03:00","updated":"2026-10-30T01:05:00+03:00","title":"The Information: DeepSeek ve Moonshot AI son modellerini yoğun biçimde OpenAI GPT-6 Astra çıktılarıyla eğitti; OpenAI temmuz damıtma kampanyasının çekirdeğini Moonshot bağlantılı kişilere bağladı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CN","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"CN","sgb_id":null,"kev":false},{"id":"binance-sicak-cuzdan-supheli-hack-2026-10-29","first_seen":"2026-10-30T00:15:00+03:00","updated":"2026-10-30T05:10:00+03:00","title":"Binance Cüzdanından Tek İşlemde 2,5 Milyar Dolar Çıktı: Hack Şüphesi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://etherscan.io/address/0x28C6c06298d514Db089934071355E5743bf21d60","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/binance-sicak-cuzdan-milyar-dolar-supheli-hack-tether-circle-2026.html","summary":"Binance sıcak cüzdanından tek işlemde yaklaşık 2,5 milyar dolarlık kripto çıktı. Tether ve Circle fon dondururken Binance hack iddialarını doğrulamadı.","tags":["country:GLOBAL","origin_x_tip","partially_confirmed","sgh_published","sgh_shared_on_x"],"entity":"Binance Cüzdanından Tek İşlemde 2","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cisa-kev-gitlab-cve-2026-97229-onigmo-istismar-2026-10-29","first_seen":"2026-10-29T22:50:24+03:00","updated":"2026-10-30T09:07:41+03:00","title":"GitLab'ı Güncellemek Yetmeyebilir: 10 Puanlık Açık Alpine'i Hedef Aldı","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","cve":["CVE-2026-97229"],"cvss":10,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/gitlab-cve-2026-97229-cisa-kev-alpine-istismar-girisimi-2026.html","summary":"CISA, GitLab'daki CVSS 10 puanlık CVE-2026-97229 açığını istismar listesine aldı; Alpine Linux'un sunucusu hedef oldu, bazı kurulumlarda Ruby de güncellenmeli.","tags":["cisa_kev","sgh_published","sgh_shared_on_x"],"entity":"GitLab","affected_products":[],"patch_status":"available","exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"polymarket-debugbear-betik-ele-gecirme-2-6m-2026-10-29","first_seen":"2026-10-29T22:50:24+03:00","updated":"2026-10-30T05:15:00+03:00","title":"Polymarket'e Gömülü Betik Ele Geçirildi, Hesaplardan Milyonlar Çekildi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.bleepingcomputer.com/news/security/polymarket-halts-trading-after-crypto-draining-script-breach-25m-traced/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/polymarket-debugbear-izleme-betigi-2-6-milyon-dolar-2026.html","summary":"Polymarket'in sitesine gömülü üçüncü taraf hız ölçüm betiği ele geçirildi. Kaynaklara göre 710 cüzdandan 2,5–2,7 milyon dolar çekildi; borsa tam tazmin sözü verdi.","tags":["origin_x_tip","partially_confirmed","sgh_published"],"entity":"Polymarket","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"retail","country":null,"sgb_id":null,"kev":false},{"id":"progress-ws-ftp-cve-2026-84295-90868-2026-10-29","first_seen":"2026-10-29T21:58:00+03:00","updated":"2026-10-29T21:58:00+03:00","title":"Progress WS_FTP Server: kimlik doğrulamasız bilgi erişimi CVE-2026-84295 (CVSS 10) ve komut enjeksiyonu CVE-2026-90868 (CVSS 9.9); 2024.0.7 / 2025.0.4 ile düzeltildi","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-84295","CVE-2026-90868"],"cvss":10,"actor":[],"sgh_url":null,"summary":null,"tags":["GLOBAL_VENDOR_CVE"],"entity":"Progress WS_FTP Server","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"amadeus-siber-saldiri-dort-havayolu-yolcu-verisi-2026-10-29","first_seen":"2026-10-29T21:58:00+03:00","updated":"2026-10-29T21:58:00+03:00","title":"Amadeus siber saldırısı: dört havayolunun yolcu verisi risk altında (tek kaynak, birincil teyit yok)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Amadeus","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"transport","country":null,"sgb_id":null,"kev":false},{"id":"sahte-chatgpt-claude-uygulamalari-imzali-exe-kripto-madenci-2026-10-29","first_seen":"2026-10-29T21:58:00+03:00","updated":"2026-10-29T21:58:00+03:00","title":"Sahte ChatGPT ve Claude uygulamaları imzalı çalıştırılabilirlerle kripto madencisi dağıtıyor","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"netgear-wpsplinter-broadcom-wifi-exploit-talebi-2026-10-29","first_seen":"2026-10-29T21:58:00+03:00","updated":"2026-10-29T21:58:00+03:00","title":"WPSplinter: 16 yıllık Broadcom Wi-Fi açığı; NETGEAR araştırmacıdan PoC istedi","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"WPSplinter","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"claude-linux-cekirdek-exploit-tarayicilar-2026-10-29","first_seen":"2026-10-29T21:58:00+03:00","updated":"2026-10-29T21:58:00+03:00","title":"Claude modelinin Linux çekirdeği ve tarayıcılarda exploit üretmesi (Dark Reading/CyberSecurityNews)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"florida-egitim-bakanligi-ogrenci-yardimi-veri-ihlali-4-9m-2026-10-29","first_seen":"2026-10-29T21:00:00+03:00","updated":"2026-10-29T21:00:00+03:00","title":"Florida Eğitim Bakanlığı mali yardım sitesi veri ihlali — 4,9 milyon kişinin SSN'si etkilenmiş olabilir (yerel basın; birincil bakanlık açıklaması teyit edilecek)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"4,9 milyon kişinin","sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"ibm-langflow-oss-coklu-kritik-rce-cve-2026-104339-2026-10-29","first_seen":"2026-10-29T19:55:00+03:00","updated":"2026-10-30T17:11:51+03:00","title":"IBM Langflow OSS çoklu kritik/yüksek açık (CVE-2026-104339, 110186, 93680 vd.; uzaktan kod çalıştırma) — IBM bülteni teyit edilmeli","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-104339"],"cvss":3.1,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"zitadel-login-v2-kimlik-dogrulama-atlatma-cve-2026-119128-2026-10-29","first_seen":"2026-10-29T19:55:00+03:00","updated":"2026-10-29T19:55:00+03:00","title":"ZITADEL Login V2 kimlik doğrulama atlatma ve host header enjeksiyonu (CVE-2026-119127/119128/119129, 4.19.5 düzeltir)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-119127","CVE-2026-119128"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ice-ajanlari-veri-ihlali-beyaz-saray-tepkisi-2026-10-29","first_seen":"2026-10-29T19:55:00+03:00","updated":"2026-10-29T19:55:00+03:00","title":"ICE ajanlarına ait veri ihlali, Beyaz Saray yetkilisi kınadı (Washington Post) — kapsam ve kaynak teyidi gerekli","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ozbekistan-olasi-veri-sizintisi-raporlari-2026-10-29","first_seen":"2026-10-29T19:55:00+03:00","updated":"2026-10-29T19:55:00+03:00","title":"Özbekistan'da olası veri sızıntısı raporları (Caspian Post) — yerel, teyit yok","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"crowdstrike-warp-panda-vmware-esxi-zero-day-hukuk-burolari-2026-10-29","first_seen":"2026-10-29T18:58:00+03:00","updated":"2026-10-30T17:11:51+03:00","title":"CrowdStrike: Çin bağlantılı WARP PANDA ABD hukuk bürolarına karşı VMware ESXi sıfır günü ve vCenter zararlısı kullandı (hukuk sektörü tehdit değerlendirmesi)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"CrowdStrike","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"legal","country":null,"sgb_id":null,"kev":false},{"id":"florida-egitim-bakanligi-burs-sitesi-ihlali-ssn-2026-10-29","first_seen":"2026-10-29T18:58:00+03:00","updated":"2026-10-29T18:58:00+03:00","title":"Florida Eğitim Bakanlığı mali yardım sitesi ihlali, SSN açığa çıktı (CBS/WFTV; yetkililer doğruladı)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"microsoft-abd-hukumet-bulutu-log-yetkisiz-erisim-iddiasi-2026-10-29","first_seen":"2026-10-29T18:58:00+03:00","updated":"2026-10-29T18:58:00+03:00","title":"Microsoft'a ABD hükümet bulutu günlüklerine yetkisiz erişim iddiası (Cybersecurity Insiders) — birincil kaynak teyidi gerekli","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Microsoft","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"bitcoin-core-tcp-urgent-data-dos-block-ai-29-5-2026-10-29","first_seen":"2026-10-29T17:58:00+03:00","updated":"2026-10-29T17:58:00+03:00","title":"Bitcoin Core: TCP urgent data ile bellek sınırı aşımı, Windows/macOS/BSD düğümlerini çökertme (Block yapay zekâ ile buldu; 29.5'te yamalı; Linux etkilenmiyor) — kaynak , birincil Bitcoin Core/Block ya","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"github-npm-firewall-tedarik-zinciri-2026-10-28","first_seen":"2026-10-29T17:58:00+03:00","updated":"2026-10-29T17:58:00+03:00","title":"GitHub npm paket güvenlik duvarı: kötü amaçlı/yeni sürümleri kurulumdan önce engelleme (GitHub, 28 Eki) — savunma/tedarik zinciri, birincil GitHub blog teyit edilecek","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"telegram-android-sesli-arama-kod-calistirma-2026-10-29","first_seen":"2026-10-29T14:58:00+03:00","updated":"2026-10-30T17:11:51+03:00","title":"Telegram Android: sesli arama yanıtlanınca kod çalıştırma açığı (NebuSec; 8.6.2–12.10.3, 12.10.4'te düzeltildi — ikincil)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/telegram-android-flaw-lets-attackers.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"talos-nik-c2-ai-destekli-c2-cercevesi-2026-10-29","first_seen":"2026-10-29T14:00:00+03:00","updated":"2026-10-29T14:00:00+03:00","title":"Cisco Talos: NIK C2 — yeni yapay zekâ destekli komuta-kontrol çerçevesi (29 Eki 2026 13:00 TSİ)","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://blog.talosintelligence.com/nik-c2-new-ai-enabled-framework/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"jin-air-1454-uye-veri-ihlali-hanjin-api-2026-10-29","first_seen":"2026-10-29T14:00:00+03:00","updated":"2026-10-29T14:00:00+03:00","title":"Güney Kore Jin Air: 1.454 üyeyi etkileyen veri ihlali; API saldırısı Hanjin iştiraklerini de etkiledi (BigGo Finance 29 Eki 13:06)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:KR"],"entity":"Güney Kore Jin Air","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1.454 üyeyi","sector":null,"country":"KR","sgb_id":null,"kev":false},{"id":"mapster-wp-maps-cve-2026-107743-stored-xss-2026-10-29","first_seen":"2026-10-29T14:00:00+03:00","updated":"2026-10-29T14:00:00+03:00","title":"Mapster WP Maps WordPress eklentisi CVE-2026-107743 kayıtlı XSS (NVD 24s)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107743","cve":["CVE-2026-107743"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"hasta-kayitlari-ai-platformuna-paylasilan-tablo-3bin-2026-10-29","first_seen":"2026-10-29T14:00:00+03:00","updated":"2026-10-29T14:00:00+03:00","title":"3 binden fazla hastanın kayıtları yapay zekâ platformuna yüklenen tablo yüzünden açığa çıktı (HealthExec 29 Eki 01:11)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"US","sgb_id":null,"kev":false},{"id":"edge-devcore-orange-tsai-mantik-hatasi-tam-zincir-cve-2026-45495-2026-10-29","first_seen":"2026-10-29T12:55:00+03:00","updated":"2026-10-29T16:55:50+03:00","title":"Edge'de 175 Bin Dolarlık Zincir: Tek Bellek Hatası Yok, Yalnız Mantık","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0274","cve":["CVE-2026-45495","CVE-2026-45494"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/microsoft-edge-mantik-hatasi-tam-zincir-devcore-cve-2026-45495-2026.html","summary":"DEVCORE, Edge'de yalnız mantık hatalarıyla kod çalıştıran Pwn2Own zincirini anlattı. CVE-2026-45495 dahil açıklar 148.0.3967.70 ile kapatıldı.","tags":["origin_x_tip","sgh_published"],"entity":"Edge","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"renault-fransa-uretim-durdurma-gnews-2026-10-29","first_seen":"2026-10-29T12:55:00+03:00","updated":"2026-10-29T12:55:00+03:00","title":"Renault grubu Fransa'daki üretimi durdurdu (Haber 7, 'siber saldırı' sorgusunda çıktı)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"manufacturing","country":null,"sgb_id":null,"kev":false},{"id":"ninja-forms-cve-2026-67187-sunucu-dogrulama-2026-10-29","first_seen":"2026-10-29T11:58:00+03:00","updated":"2026-10-29T11:58:00+03:00","title":"Ninja Forms (WordPress) 3.15.4 öncesi: kimliksiz kullanıcı seçim alanlarına keyfi değer gönderebiliyor (CVE-2026-67187, CVSS 7.1)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67187","cve":["CVE-2026-67187"],"cvss":7.1,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"wp-wild-apricot-login-cve-2026-93757-sso-kimlik-atlatma-2026-10-29","first_seen":"2026-10-29T11:58:00+03:00","updated":"2026-10-29T11:58:00+03:00","title":"Wild Apricot Login (WordPress) ≤1.0.18: SSO e-posta çakışmasıyla kimlik doğrulama atlatma (CVE-2026-93757, CVSS 7.5)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93757","cve":["CVE-2026-93757"],"cvss":7.5,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"wp-ssl-wireless-sms-cve-2026-96228-kimlik-atlatma-2026-10-29","first_seen":"2026-10-29T11:58:00+03:00","updated":"2026-10-29T11:58:00+03:00","title":"SSL Wireless SMS Notification (WordPress) ≤3.8.1: kimliksiz oturum açma atlatması (CVE-2026-96228, CVSS 8.1)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96228","cve":["CVE-2026-96228"],"cvss":8.1,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"SSL Wireless SMS Notification","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"monai-cve-2026-118683-bundle-rce-2026-10-29","first_seen":"2026-10-29T11:58:00+03:00","updated":"2026-10-29T11:58:00+03:00","title":"MONAI (tıbbi görüntüleme yapay zekâ çatısı) 1.2.0–1.6.0: bundle logging.conf ile kod çalıştırma (CVE-2026-118683, CVSS 8.8), düzeltme 1.6.1","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118683","cve":["CVE-2026-118683"],"cvss":8.8,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"MONAI","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"samba-vfs-ceph-rgw-cve-2026-109411-erisim-atlatma-2026-10-29","first_seen":"2026-10-29T11:58:00+03:00","updated":"2026-10-29T11:58:00+03:00","title":"Samba vfs_ceph_rgw (deneysel modül): kimliği doğrulanmış kullanıcı erişim denetimini atlatıp dosya okuyup yazabiliyor (CVE-2026-109411, CVSS 8.1)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109411","cve":["CVE-2026-109411"],"cvss":8.1,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"securelist-netamloader-asya-hukumet-win10-apt-2026-10-29","first_seen":"2026-10-29T11:58:00+03:00","updated":"2026-10-29T11:58:00+03:00","title":"Kaspersky Securelist: bilinmeyen APT, Asya'da hükümetler için özelleştirilmiş Windows 10'u NetamLoader ile hedefliyor","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"irhythm-hhs-8-2-milyon-veri-ihlali-2026-10-29","first_seen":"2026-10-29T11:58:00+03:00","updated":"2026-10-29T11:58:00+03:00","title":"HHS kaydı: iRhythm veri ihlalinden etkilenen kişi sayısı 8,2 milyon","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.securityweek.com/hhs-filing-puts-irhythm-data-breach-toll-at-8-2-million/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"intelbras-kamera-dos-acigi-securelist-2026-10-29","first_seen":"2026-10-29T11:08:00+03:00","updated":"2026-10-29T11:08:00+03:00","title":"Kaspersky Securelist: Intelbras güvenlik kameralarında DoS açığı, milyonlarca cihaz risk altında (28 Eki)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cisco-asa-ftd-cve-2026-76418-ssl-vpn-dos-istismar-2026-10-29","first_seen":"2026-10-29T11:05:00+03:00","updated":"2026-10-29T12:02:26+03:00","title":"Giriş Gerekmeden Cisco ASA'yı Çökerten VPN Açığı Saldırıda Kullanıldı","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75","cve":["CVE-2026-76418"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/cisco-asa-ftd-ssl-vpn-dos-cve-2026-76418-istismar-yama-2026.html","summary":"VPN'e giriş bile gerekmiyor: Cisco ASA ve FTD'yi yeniden başlatan CVE-2026-76418 Ekim'de saldırılarda kullanıldı. Geçici çözüm yok, düzeltilmiş sürümler çıktı.","tags":["cisa_kev","sgh_published","sgh_shared_on_x"],"entity":"Giriş Gerekmeden Cisco ASA","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"fuxa-cve-2026-42922-nodered-yetki-atlatma-rce-2026-10-29","first_seen":"2026-10-29T11:05:00+03:00","updated":"2026-10-29T11:05:00+03:00","title":"FUXA (SCADA/HMI web) /nodered yetki atlatma → kimlik doğrulamasız kod çalıştırma (CVE-2026-42922, NVD 9.8; 1.3.2-2809)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42922","cve":["CVE-2026-42922"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"FUXA","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"signal-k-server-cve-2026-118690-ziplogs-jwt-yonetici-2026-10-29","first_seen":"2026-10-29T11:05:00+03:00","updated":"2026-10-29T11:05:00+03:00","title":"Signal K Server <2.33.0: /skServer/ziplogs kimlik doğrulamasız log arşivi → JWT secretKey → yönetici token (CVE-2026-118690, NVD 9.8)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118690","cve":["CVE-2026-118690"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"woocommerce-telegram-bot-eklentisi-cve-2026-109516-hesap-ele-gecirme-2026-10-29","first_seen":"2026-10-29T11:05:00+03:00","updated":"2026-10-29T11:05:00+03:00","title":"WordPress «Bot for Telegram on WooCommerce» ≤1.3.0: REST uç noktası kimlik doğrulama atlatma → hesap ele geçirme (CVE-2026-109516, NVD 9.8)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109516","cve":["CVE-2026-109516"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"gfi-kerio-outlook-connector-koff-cve-2026-112357-lpe-2026-10-29","first_seen":"2026-10-29T11:05:00+03:00","updated":"2026-10-29T11:05:00+03:00","title":"GFI Kerio Connect Outlook Connector (Offline Edition) <10.0.9 Patch 2: zayıf kurulum izinleri → yerel yetki yükseltme (CVE-2026-112357, NVD 7.8)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112357","cve":["CVE-2026-112357"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"GFI Kerio Connect Outlook Connector","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"bricks-builder-cve-2026-118803-118804-wordpress-2026-10-29","first_seen":"2026-10-29T11:05:00+03:00","updated":"2026-10-30T01:05:00+03:00","title":"Bricks Builder (WordPress tema) ≤2.4.3: kimlik doğrulamasız dinamik veri etiketi enjeksiyonu (CVE-2026-118803) ve erişim kontrolü atlatma (CVE-2026-118804), NVD 7.5","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118803","cve":["CVE-2026-118803","CVE-2026-118804"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"inj3ctor3-freepbx-kimlik-bilgisi-calan-zararli-2026-10-29","first_seen":"2026-10-29T11:05:00+03:00","updated":"2026-10-29T11:05:00+03:00","title":"INJ3CTOR3 zararlısı FreePBX kimlik bilgilerini çalıp sunucu temizliğinden sonra da sahte arama dolandırıcılığı sağlıyor (gbhackers)","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/inj3ctor3-malware/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sahte-cloudflare-dogrulama-tuzaklari-windows-mac-2026-10-29","first_seen":"2026-10-29T11:05:00+03:00","updated":"2026-10-29T11:05:00+03:00","title":"Sahte Cloudflare doğrulama sayfaları (ClickFix tipi) Windows ve macOS kullanıcılarını zararlıya yönlendiriyor (gbhackers)","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/fake-cloudflare-verification-traps/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"cyberdakait-hindistan-banka-android-17960-cihaz-2026-10-29","first_seen":"2026-10-29T11:05:00+03:00","updated":"2026-10-29T11:05:00+03:00","title":"CyberDakait: Hindistan banka müşterilerini hedefleyen Android zararlısı, 17.960 cihaz, 7,6 milyon SMS (gbhackers)","category":"malware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/indian-banking-users-targeted/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"CyberDakait","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"wildfly-iiop-kimlik-dogrulama-atlatma-cve-2026-114488-15564-2026-10-29","first_seen":"2026-10-29T09:55:29+03:00","updated":"2026-10-29T09:55:29+03:00","title":"WildFly IIOP: kimlik doğrulama öncesi seri durumdan çıkarma (CVE-2026-15564) ve CSIv2 ITTPrincipal ile kimlik doğrulama atlatma (CVE-2026-114488), NVD HIGH","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114488","cve":["CVE-2026-15564","CVE-2026-114488"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"WildFly IIOP","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"monero-swap-sitesi-3-ay-veri-sizintisi-5m-santaj-2026-10-29","first_seen":"2026-10-29T07:57:52+03:00","updated":"2026-10-29T07:57:52+03:00","title":"Bir Monero takas sitesi 5 milyon $ şantaj talebinden sonra 3 aylık verisinin sızdığını doğruladı; Hudson Rock 4.580 siparişte kripto adres-IP eşleşmesi buldu (aktarım)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:INT","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"navigate360-okul-ihbar-hatti-kayitlari-ifsa-2026-10-29","first_seen":"2026-10-29T06:46:08+03:00","updated":"2026-10-29T06:46:08+03:00","title":"Navigate360 (ABD okul güvenliği yazılımı): milyonlarca okul ihbar hattı kaydının açığa çıktığı iddiası, toplu dava soruşturması","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":"Navigate360","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":"US","sgb_id":null,"kev":false},{"id":"allium-blokzincir-veri-saglayici-yetkisiz-erisim-api-anahtari-iptal-2026-10-29","first_seen":"2026-10-29T05:55:00+03:00","updated":"2026-10-29T05:55:00+03:00","title":"Blokzincir veri sağlayıcısı Allium'da yetkisiz erişim: API anahtarları iptal, parola sıfırlama ve MFA önerisi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":"Blokzincir","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"san-antonio-isd-tedarikci-veri-ihlali-2026-10-29","first_seen":"2026-10-29T05:55:00+03:00","updated":"2026-10-29T05:55:00+03:00","title":"San Antonio ISD (ABD) personeline tedarikçi kaynaklı veri ihlali uyarısı","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":"San Antonio ISD","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"dhs-41-bin-calisan-kisisel-veri-sizintisi-2026-10-28","first_seen":"2026-10-29T04:58:00+03:00","updated":"2026-10-30T11:06:26+03:00","title":"ABD İç Güvenlik Bakanlığı (DHS) ~40-41 bin çalışanın kişisel verisi sızıntı sitesinde yayımlandı (CBP/ICE dahil)","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":"US","sgb_id":null,"kev":false},{"id":"firefox-159-167-acik-chrome-guncelleme-2026-10-28","first_seen":"2026-10-29T04:58:00+03:00","updated":"2026-10-29T04:58:00+03:00","title":"Firefox 159: 167 açık yamandı (41'i Codex); Chrome güncellemesiyle 200+ açık","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.securityweek.com/chrome-and-firefox-updates-patch-over-200-vulnerabilities/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Firefox 159","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"signal-android-cve-2026-113380-2026-10-28","first_seen":"2026-10-29T04:58:00+03:00","updated":"2026-10-29T04:58:00+03:00","title":"Signal Android CVE-2026-113380","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-113380"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"microsoft-teams-harici-sohbet-ilk-erisim-2026-10-26","first_seen":"2026-10-29T04:58:00+03:00","updated":"2026-10-29T04:58:00+03:00","title":"Microsoft Teams harici sohbet / sahte BT desteği ile zararlı ve fidye yazılımı","category":"ransomware","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/attackers-use-microsoft-teams-it.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"sahte-kripto-cuzdan-firefox-eklentileri-2026-10-28","first_seen":"2026-10-29T04:58:00+03:00","updated":"2026-10-29T04:58:00+03:00","title":"Sahte kripto cüzdan Firefox eklentileri","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"coinbase-amplitude-tedarikci-olayi-musteri-iletisim-verileri-2026-10-29-db917d","first_seen":"2026-10-29T03:00:00+03:00","updated":"2026-10-29T03:16:45+03:00","title":"Coinbase: Amplitude Olayında Müşteri İletişim Verisi Etkilendi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://unchainedcrypto.com/coinbase-ties-customer-contact-data-exposure-to-vendor-amplitude-says-it-was-not-breached/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/coinbase-amplitude-tedarikci-olayi-musteri-iletisim-verileri-2026.html","summary":"Coinbase, tedarikçisi Amplitude'daki olayda müşteri iletişim verilerinin bir kısmının etkilendiğini, fonların etkilenmediğini ve yetkisiz erişim kanıtı bulmadığını bildirdi.","tags":["country:US","origin_x_tip","sgh_published"],"entity":"Coinbase","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"guney-kore-daishin-bithumb-mirae-asset-global-veri-olayi-2026-10-29-d35eba","first_seen":"2026-10-29T03:00:00+03:00","updated":"2026-10-29T03:37:41+03:00","title":"Güney Kore'de Daishin, Bithumb ve Mirae Asset Veri Olayı Bildirdi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.fsc.go.kr/no010101/88010","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/guney-kore-daishin-bithumb-mirae-asset-global-veri-olayi-2026.html","summary":"Güney Kore'de Daishin Securities 38.490 müşterinin verisinin sızdığını açıkladı. Bithumb ve Mirae Asset Global Investments da ayrı veri olayları bildirdi.","tags":["country:KR","origin_x_tip","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"38.490 müşterinin","sector":null,"country":"KR","sgb_id":null,"kev":false},{"id":"grand-orient-de-france-fidye-iddiasi-2026-10-29","first_seen":"2026-10-29T02:59:08+03:00","updated":"2026-10-29T03:07:35+03:00","title":"Grand Orient de France'a 33 Bin Dolarlık Fidye Talebi İddiası","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/grand-orient-de-france-fidye-iddiasi-6-72-gb-72-saat-2026.html","summary":"Fransa'daki mason örgütü Grand Orient de France için 6,72 GB veri ve 33.333 dolarlık fidye talebi iddiası aktarıldı. İddia doğrulanmadı; kuruluşun açıklaması bulunamadı.","tags":["country:FR","origin_x_tip","sgh_published"],"entity":"Grand Orient de France","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"6,72 GB","sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"csx-calisan-veri-ihlali-2026-10-29","first_seen":"2026-10-29T00:00:00+03:00","updated":null,"title":"CSX teknoloji kesintisi; şirket siber saldırıyı dışladı, ayrı haberde çalışan verisi ihlali","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"US","sgb_id":null,"kev":false},{"id":"cisa-kev-vmware-esx-cve-2026-41709-linux-kernel-cve-2026-46300-2026-10-28","first_seen":"2026-10-28T22:58:00+03:00","updated":"2026-10-28T22:58:00+03:00","title":"CISA KEV'e iki yeni kayıt: VMware ESX günlükleme açığı (CVE-2026-41709) ve Linux çekirdeği CVE-2026-46300 (webshell zinciri)","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-41709","CVE-2026-46300"],"cvss":2.7,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev"],"entity":"CISA KEV","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"n8n-coklu-cve-2026-118641-118648-2026-10-28","first_seen":"2026-10-28T22:58:00+03:00","updated":"2026-10-30T15:49:23+03:00","title":"n8n'de çoklu açık: yetki atlatma, OData filtre enjeksiyonu, kimlik bilgisi sızması (CVE-2026-118641…118648)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-118641"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"bandai-namco-ucuncu-taraf-sizinti-300k-2026-10-28","first_seen":"2026-10-28T21:53:43+03:00","updated":"2026-10-28T21:53:43+03:00","title":"Bandai Namco: üçüncü taraf kaynaklı sızıntı, 300 binden fazla kullanıcı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"skyw4lker-device-code-phishing-abd-2026-10-28","first_seen":"2026-10-28T21:53:43+03:00","updated":"2026-10-28T21:53:43+03:00","title":"Skyw4lker cihaz kodu (device code) oltalama kampanyası, ABD kurumları","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ingiltere-yazilim-sorumlulugu-siber-ihlal-istisare-2026-10-28","first_seen":"2026-10-28T21:53:43+03:00","updated":"2026-10-28T21:53:43+03:00","title":"İngiltere bütçesi: siber ihlallerde yazılım şirketlerinin sorumluluğu için 2027 istişaresi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"good-smile-company-online-magaza-ihlali-2026-10-28","first_seen":"2026-10-28T21:53:43+03:00","updated":"2026-10-28T21:53:43+03:00","title":"Good Smile Company çevrimiçi mağaza veri ihlali","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"retail","country":null,"sgb_id":null,"kev":false},{"id":"colmobil-settra-fidye-israil-2026-10-28","first_seen":"2026-10-28T21:53:43+03:00","updated":"2026-10-28T21:53:43+03:00","title":"SETTRA fidye yazılımı Colmobil (İsrail) saldırısı","category":"ransomware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"SETTRA","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"apple-ios-27-2-163-acik-guncelleme-2026-10-28","first_seen":"2026-10-28T20:51:00+03:00","updated":"2026-10-28T21:11:05+03:00","title":"iOS 27.2 Belgesinde 163 CVE; iPhone XS ve XR İçin 18.7.11 Geldi","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://support.apple.com/en-us/149230","cve":["CVE-2026-86950"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/apple-ios-27-2-163-guvenlik-acigi-iphone-ipad-guncelleme-rehberi-2026.html","summary":"Apple'ın iOS 27.2 ve iPadOS 27.2 belgesinde 163 CVE kaydı var. iPhone XS, XS Max, XR ve iPad 7. nesil için iOS 18.7.11 çıktı; cihaz listesi ve güncelleme adımları haberde.","tags":["cisa_kev","country:US","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":true},{"id":"volt-typhoon-silent-train-zero-day-framework-2026-10-28","first_seen":"2026-10-28T19:55:00+03:00","updated":"2026-10-30T11:06:26+03:00","title":"Volt Typhoon, Cisco SD-WAN Açığını Yama Çıktıktan Sonra da Kullandı","category":"apt","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk","cve":[],"cvss":null,"actor":["Volt Typhoon"],"sgh_url":"https://siberguvenlikhaber.com/haber/cisco-sd-wan-cve-2026-20127-volt-typhoon-silent-train-keydrift-2026.html","summary":"Lumen'e göre Volt Typhoon, CVSS 10,0'lık Cisco Catalyst SD-WAN açığı CVE-2026-20127'yi Cisco'nun Şubat duyurusundan çok sonra da kullandı. Geçici çözüm yok.","tags":["country:GLOBAL","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"telegram-sticker-zero-click-ios-saifeldeen-aziz-2026-10-28","first_seen":"2026-10-28T19:55:00+03:00","updated":"2026-10-29T05:55:00+03:00","title":"Araştırmacı Saifeldeen Aziz: Telegram çıkartmalarında yeni sıfır tık hatalar, iOS'ta kod çalıştırma zinciri (iddia; 28 Eki)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"rocket-new-veri-ihlali-sifreli-api-anahtarlari-2026-10-28","first_seen":"2026-10-28T19:55:00+03:00","updated":"2026-10-28T19:55:00+03:00","title":"Rocket.new veri ihlali: şifreli API anahtarları açığa çıktı (Cyber Kendra 28 Eki)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":"Rocket.new","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"dream-research-php2shell-fragnesia-25-guvenlik-duvari-abd-kamu-2026-10-28","first_seen":"2026-10-28T19:12:00+03:00","updated":"2026-10-28T19:12:00+03:00","title":"Dream Research: Çin bağlantılı, YZ destekli saldırganlar PHP2Shell + Fragnesia zinciriyle 25 güvenlik duvarı sunucusunda root aldı; 3'ü ABD kamu bağlantılı","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://dreamgroup.com/blog/chained-php2shell-exploit-roots-25-servers","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":"US","sgb_id":null,"kev":false},{"id":"azul-openjdk-53-acik-yama-2026-10-28","first_seen":"2026-10-28T19:12:00+03:00","updated":"2026-10-28T19:12:00+03:00","title":"Azul, OpenJDK dağıtımlarında 53 güvenlik açığını yamaladı (SD Times 28 Eki)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":"Azul","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"blueberry-pediatrics-tedarikci-olayi-341bin-hasta-2026-10-28","first_seen":"2026-10-28T19:12:00+03:00","updated":"2026-10-28T19:12:00+03:00","title":"Blueberry Pediatrics: tedarikçi kaynaklı olay 341.000 hastayı etkiledi (HIPAA Journal 28 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"jfrog-42-github-repo-ai-kodlama-araci-zararli-2026-10-28","first_seen":"2026-10-28T17:58:00+03:00","updated":"2026-10-28T19:12:00+03:00","title":"JFrog: 42 gerçek GitHub deposu, Claude Code/Gemini CLI/Cursor/VS Code ile açılınca zararlı çalıştıracak şekilde değiştirildi (~13 MB yük, 11 sahip)","category":"malware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://research.jfrog.com/post/beyond-testmetest-42-hijacked-github-repos/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":"JFrog","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"belcika-vergi-portali-siber-saldiri-kapatildi-2026-10-28","first_seen":"2026-10-28T17:58:00+03:00","updated":"2026-10-28T17:58:00+03:00","title":"Belçika vergi portalı siber saldırı sonrası kapatıldı","category":"leak","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:BE"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"BE","sgb_id":null,"kev":false},{"id":"afd-345bin-eposta-siber-saldiri-2026-10-28","first_seen":"2026-10-28T17:58:00+03:00","updated":"2026-10-28T17:58:00+03:00","title":"Almanya AfD partisine siber saldırı: 345.000 e-posta adresi çalındı (Help Net Security 28 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:DE"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"DE","sgb_id":null,"kev":false},{"id":"shinkansen-cevrimici-bilet-musteri-veri-sizintisi-2026-10-28","first_seen":"2026-10-28T17:58:00+03:00","updated":"2026-10-28T17:58:00+03:00","title":"Shinkansen çevrimiçi bilet hizmeti müşteri veri sızıntısı bildirdi (SoraNews24 28 Eki)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:JP","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"nhs-tayside-bilim-insani-veri-ihlali-ozur-2026-10-28","first_seen":"2026-10-28T16:58:00+03:00","updated":"2026-10-28T16:58:00+03:00","title":"NHS Tayside, bir bilim insanını içeren veri ihlali için hastalardan özür diledi (BBC 28 Eki 16:23)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GB","desk_skipped"],"entity":"NHS Tayside","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"GB","sgb_id":null,"kev":false},{"id":"tr-kritik-altyapi-430-panel-zayif-parola-itsmelsec-2026-10-28","first_seen":"2026-10-28T16:07:32+03:00","updated":"2026-10-28T16:18:25+03:00","title":"Türkiye'de 430 kritik altyapı paneli zayıf parolayla açık","category":"vulnerability","severity":"critical","turkey_signal":true,"tr_entity":null,"status":"claim_only","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/turkiye-kritik-altyapi-430-kontrol-paneli-zayif-parola-iddiasi-2026.html","summary":"Bir araştırmacı, 1071 ve 1453 gibi tahmin edilebilir parolalarla Türkiye'de kritik altyapıya ait 430 kontrol paneli bulduğunu öne sürdü; iddia doğrulanmadı.","tags":["country:TR","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"jal-japan-airlines-92-bin-musteri-veri-ihlali-2026-10-28","first_seen":"2026-10-28T16:07:32+03:00","updated":"2026-10-28T16:07:32+03:00","title":"Japan Airlines (JAL): 92 bin müşteriyi etkileyen veri ihlali","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:JP"],"entity":"Japan Airlines","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"92 bin müşteriyi","sector":"transport","country":"JP","sgb_id":null,"kev":false},{"id":"123-reg-yz-siber-saldiri-musteri-verisi-cin-baglantisi-2026-10-28","first_seen":"2026-10-28T16:07:32+03:00","updated":"2026-10-28T16:07:32+03:00","title":"123 Reg (İngiltere alan adı/barındırma) müşteri verisini etkileyen «yapay zekâ destekli siber saldırı» açıkladı; Çin bağlantısından şüpheleniyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GB"],"entity":"123 Reg","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"GB","sgb_id":null,"kev":false},{"id":"ontario-crime-stoppers-veri-ihlali-2026-10-28","first_seen":"2026-10-28T16:07:32+03:00","updated":"2026-10-30T01:05:00+03:00","title":"Kanada/Ontario: Crime Stoppers veri ihlali — gizlilik komiserliği inceleme başlattı, il genelinde ihbar hattı donduruldu","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CA","desk_skipped"],"entity":"Kanada/Ontario","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"CA","sgb_id":null,"kev":false},{"id":"telegram-sticker-sifir-tik-ios-iddiasi-2026-10-28","first_seen":"2026-10-28T14:57:20+03:00","updated":"2026-10-28T14:57:20+03:00","title":"Araştırmacı iddiası: Telegram çıkartmalarında sıfır tık açıklar iOS üzerinde kod çalıştırmaya zincirlendi","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"oyun-devi-11-7m-kullanici-verisi-iddiasi-2026-10-28","first_seen":"2026-10-28T14:04:55+03:00","updated":"2026-10-28T14:04:55+03:00","title":"'Oyun devine siber saldırı: 11,7 milyon kullanıcının verisi sızdırıldı'","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"11,7 milyon kullanıcının","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cz-kripto-borsa-veri-sizintisi-uyarisi-2026-10-28","first_seen":"2026-10-28T14:04:55+03:00","updated":"2026-10-28T14:04:55+03:00","title":"CZ: kripto borsalarından sızan veriler kimlik avı, SIM kart ve fiziksel saldırılara zemin hazırlıyor (uyarı)","category":"fraud","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"oracle-ebs-cve-2026-101767-tarama-securityweek-2026-10-28","first_seen":"2026-10-28T13:06:00+03:00","updated":"2026-10-28T19:12:00+03:00","title":"Oracle E-Business Suite CVE-2026-101767 (kimlik doğrulamasız SQLi→RCE) için tarama/yoklama başladı (SecurityWeek)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.securityweek.com/hackers-start-probing-fresh-oracle-ebs-vulnerability/","cve":["CVE-2026-101767"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":"Oracle E-Business Suite","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"kamera-yonetim-yazilimi-cms-reverse-shell-huntress-2026-10-28","first_seen":"2026-10-28T13:06:00+03:00","updated":"2026-10-28T13:06:00+03:00","title":"Kamera yönetim yazılımı (CMS.exe) ele geçirilip ters kabuk ve gizli Windows zararlısı dağıtıldı (gbhackers; Huntress kaynaklı)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/camera-software-hijacking/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"uk-polis-bt-tedarikcileri-ihlal-2021-2025-2026-10-28","first_seen":"2026-10-28T13:06:00+03:00","updated":"2026-10-28T13:06:00+03:00","title":"İngiltere: polis teşkilatlarının BT tedarikçilerinde 2021–2025 arasında ihlaller","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:UK"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"UK","sgb_id":null,"kev":false},{"id":"irak-ihec-24m-kayit-iddiasi-2026-10-28","first_seen":"2026-10-28T13:06:00+03:00","updated":"2026-10-28T13:06:00+03:00","title":"Irak Bağımsız Yüksek Seçim Komisyonu (IHEC) 24 milyon kayıt iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:IQ"],"entity":"Irak Bağımsız Yüksek Seçim Komisyonu","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"24 milyon kayıt","sector":null,"country":"IQ","sgb_id":null,"kev":false},{"id":"ryder-whitearmor-sizinti-sitesi-iddiasi-2026-10-28","first_seen":"2026-10-28T13:06:00+03:00","updated":"2026-10-28T13:06:00+03:00","title":"WhiteArmor sızıntı sitesi Ryder'ı listeledi","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":"WhiteArmor","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"alcon-219k-kayit-iddiasi-2026-10-28","first_seen":"2026-10-28T13:06:00+03:00","updated":"2026-10-28T13:06:00+03:00","title":"Alcon 219 bin kayıt iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"219 bin kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"anthropic-frontier-red-team-yayimlanmamis-model-exploit-zinciri-2026-10-28","first_seen":"2026-10-28T11:55:00+03:00","updated":"2026-10-28T19:12:00+03:00","title":"Anthropic: yayımlanmamış iç araştırma modeli Chrome, Safari, Android, Windows ve Linux'ta açıkları zincirleyip çalışan PoC'ler üretti (Frontier Red Team, 27 Eki; tüm açıklar yamalı)","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.anthropic.com/research/discovering-vulnerabilities-with-claude","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/anthropic-claude-chrome-safari-android-windows-linux-aciklari-frontier-red-team-2026.html","summary":null,"tags":["country:US","sgh_related"],"entity":"Anthropic","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"memberpress-csrf-cve-2026-92797-2026-10-28","first_seen":"2026-10-28T11:55:00+03:00","updated":"2026-10-28T11:55:00+03:00","title":"MemberPress (WordPress) CSRF CVE-2026-92797, CVSS 8,8 (NVD 28 Eki 08:16 UTC = 11:16 TSİ)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92797","cve":["CVE-2026-92797"],"cvss":8.8,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":"MemberPress","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"m365-79-kurum-calinti-token-hesap-ele-gecirme-2026-10-28","first_seen":"2026-10-28T11:55:00+03:00","updated":"2026-10-28T11:55:00+03:00","title":"Çalıntı oturum token'larıyla 79 kurumda Microsoft 365 hesabı ele geçirildi (CyberSecurityNews başlığı, Google News)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"kaspersky-blackx-bootkit-orta-asya-diplomatik-2026-10-28","first_seen":"2026-10-28T11:55:00+03:00","updated":"2026-10-28T11:55:00+03:00","title":"Kaspersky: «BlackX» bootkit Orta Asya diplomatik kurumlarını hedefledi","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"wordpress-contact-manager-cve-2026-109218-2026-10-28","first_seen":"2026-10-28T10:51:17+03:00","updated":"2026-10-28T10:51:17+03:00","title":"WordPress Contact Manager eklentisi ≤9.1.2 kimlik doğrulamasız dosya yükleme CVE-2026-109218 (Wordfence, CRITICAL)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-109218"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"don-quijote-saat-tamir-yuklenici-fidye-2026-10-28","first_seen":"2026-10-28T10:51:17+03:00","updated":"2026-10-28T10:51:17+03:00","title":"Japonya: Don Quijote ve 3 şirket, saat tamir yüklenicisine fidye saldırısı sonrası olası müşteri verisi sızıntısı","category":"ransomware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"vietnam-ocean-edu-ekvador-virgen-del-cisne-iddialari-2026-10-28-2ad91e","first_seen":"2026-10-28T10:51:17+03:00","updated":"2026-10-28T10:51:17+03:00","title":"iddiaları: Vietnam Ocean Edu 2M+ öğrenci kaydı; Ekvador Cooperativa Virgen del Cisne 1,5M kayıt","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1,5M kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"asyaport-kvkk-veri-ihlali-bildirimi-2026-10-27","first_seen":"2026-10-28T09:59:54+03:00","updated":"2026-10-28T10:04:39+03:00","title":"KVKK: Asyaport'ta Tedarikçi Kaynaklı Veri İhlali Bildirimi","category":"leak","severity":"critical","turkey_signal":true,"tr_entity":"Asyaport","status":"confirmed","source_type":"official","primary_source_url":"https://www.kvkk.gov.tr/Icerik/9075/kamuoyu-duyurusu-veri-ihlali-bildirimi-asyaport-liman-as","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/asyaport-kvkk-veri-ihlali-bildirimi-tedarikci-servis-destek-2026.html","summary":"KVKK duyurusuna göre Asyaport veri ihlali bildiriminde bulundu. Tedarikçi uygulaması kaynaklı olayda ilk aşamada 855 kişinin bilgisi etkilendi.","tags":["sgh_published","sgh_shared_on_x"],"entity":"Asyaport","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"transport","country":null,"sgb_id":null,"kev":false},{"id":"anadolu-planet-elevti-kvkk-veri-ihlali-2026-10-27","first_seen":"2026-10-28T09:59:54+03:00","updated":"2026-10-28T11:08:54+03:00","title":"KVKK: elevti.com Sahibi Anadolu Planet'te Veri İhlali Bildirimi","category":"leak","severity":"critical","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.kvkk.gov.tr/Icerik/9076/kamuoyu-duyurusu-veri-ihlali-bildirimi-anadolu-planet-elektronik-tic-a-s-https-www-elevti-com","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/anadolu-planet-elevti-kvkk-veri-ihlali-bildirimi-2026.html","summary":"KVKK, elevti.com sahibi Anadolu Planet Elektronik bildirimini duyurdu. Altyapı sağlayıcısı kaynaklı ihlalde 592 müşteri ve 4 panel kullanıcısı etkilendi.","tags":["sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"google-chrome-52-duzeltme-4-kritik-claude-exploit-zinciri-2026-10-28","first_seen":"2026-10-28T09:59:54+03:00","updated":"2026-10-28T14:17:03+03:00","title":"Anthropic'in İç Modeli Chrome, Safari ve Linux'ta Açıklar Buldu","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.anthropic.com/research/discovering-vulnerabilities-with-claude","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/anthropic-claude-chrome-safari-android-windows-linux-aciklari-frontier-red-team-2026.html","summary":"Anthropic, yayımlanmamış iç modelinin Chrome, Safari, Android, Windows ve Linux'ta beş açık zinciri kurduğunu açıkladı; açıklar Chrome 156 ve diğer güncellemelerle yamalı.","tags":["sgh_published"],"entity":"Anthropic","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"veeam-backup-replication-cve-2026-108142-2026-10-28","first_seen":"2026-10-28T09:59:54+03:00","updated":"2026-10-28T15:12:46+03:00","title":"Veeam Backup & Replication 13'te Yetki Atlatma Açığı Giderildi","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1411","cve":["CVE-2026-108142"],"cvss":9.1,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/veeam-backup-replication-cve-2026-108142-kimliksiz-yetki-atlatma-acigi-2026.html","summary":"Veeam, Backup & Replication 13'te kimlik doğrulaması gerektirmeyen yetki atlatma açığı CVE-2026-108142'yi 13.1.2.57 ve 13.0.3.63 yapılarıyla giderdi; güncelleme öneriliyor.","tags":["origin_x_tip","sgh_published"],"entity":"Veeam Backup & Replication 13","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"oracle-peoplesoft-cve-2026-35273-uc-zincir-thn-2026-10-28","first_seen":"2026-10-28T09:59:54+03:00","updated":"2026-10-28T09:59:54+03:00","title":"Oracle PeopleSoft CVE-2026-35273: üç açığın zincirlenmesi (THN)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-35273"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev"],"entity":"Oracle PeopleSoft","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"jupiter-core-cve-2026-106013-2026-10-28-4bf23b","first_seen":"2026-10-28T09:59:54+03:00","updated":"2026-10-28T09:59:54+03:00","title":"WordPress Jupiter X Core eklentisi CVE-2026-106013 (CVSS 9.8)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-106013"],"cvss":9.8,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"llama-cpp-cve-2026-118375-2026-10-28","first_seen":"2026-10-28T09:59:54+03:00","updated":"2026-10-28T09:59:54+03:00","title":"llama.cpp CVE-2026-118375 (CVSS 8.1)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-118375"],"cvss":8.1,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"redaxo-pie-register-cve-2026-10-28","first_seen":"2026-10-28T09:59:54+03:00","updated":"2026-10-28T09:59:54+03:00","title":"REDAXO CVE-2026-117532 ve Pie Register CVE-2026-84999","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-117532","CVE-2026-84999"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"bloomberg-130k-kayit-iddiasi-2026-10-28","first_seen":"2026-10-28T09:59:54+03:00","updated":"2026-10-28T09:59:54+03:00","title":"Bloomberg'e ait 130 bin kayıt iddiası (forum)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"130 bin kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"coinbase-amplitude-tedarikci-olayi-iletisim-bilgisi-2026-10-28","first_seen":"2026-10-28T08:57:59+03:00","updated":"2026-10-28T14:57:20+03:00","title":"Coinbase: analiz tedarikçisi Amplitude'daki güvenlik olayında bazı müşterilerin iletişim bilgileri açığa çıktı; fonlar ve Coinbase sistemleri etkilenmedi (şirket açıklaması)","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"moldova-e-devlet-siber-saldiri-750-bin-kisi-verisi-80-hizmet-kapatildi-2026-10-27","first_seen":"2026-10-28T08:57:59+03:00","updated":"2026-10-28T08:57:59+03:00","title":"Moldova: dijital kamu hizmetlerine siber saldırı — STISC/Elektronik Yönetişim Ajansı ~750 bin kişinin kişisel verisinin çekilmiş olabileceğini açıkladı; 80+ kamu hizmeti kapatıldı","category":"leak","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"750 bin kişinin","sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"kopenhag-universitesi-veri-ihlali-500-bin-kisi-2026-10-28","first_seen":"2026-10-28T08:57:59+03:00","updated":"2026-10-28T08:57:59+03:00","title":"Kopenhag Üniversitesi 500 binden fazla kişiyi etkileyen veri ihlali bildirdi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"warp-terminal-ihlal-ai-ajan-kayitlari-telemetri-2026-10-27","first_seen":"2026-10-28T08:57:59+03:00","updated":"2026-10-28T08:57:59+03:00","title":"Warp (AI terminal) ihlali: yapay zekâ ajan kayıtları ve kullanıcı telemetrisi açığa çıktı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Warp","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1420","first_seen":"2026-10-28T08:03:43+03:00","updated":"2026-10-28T08:03:43+03:00","title":"SGB TR-26-1420: Fazile BACAK - DefterAsist Mali Müşavir Platformu Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Fazile BACAK","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1420","cve":["CVE-2026-16020"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Fazile BACAK tarafından geliştirilen DefterAsist Mali Müşavir Platformu ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 2026.10.27 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Fazile BACAK","affected_products":["DefterAsist Mali Müşavir Platformu"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1420","kev":false},{"id":"rank-math-seo-cve-2026-1928-php-object-injection-2026-10-28","first_seen":"2026-10-28T07:58:00+03:00","updated":"2026-10-28T07:58:00+03:00","title":"Rank Math SEO (WordPress) 1.0.276 ve öncesinde CVE-2026-1928 PHP nesne enjeksiyonu (CVSS 8.8, katkıcı yetkisi gerekir)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-1928"],"cvss":8.8,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Rank Math SEO","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"autodesk-fusion-post-processor-cve-2026-107672-2026-10-28","first_seen":"2026-10-28T07:58:00+03:00","updated":"2026-10-28T07:58:00+03:00","title":"Autodesk Fusion Post Processor Utility eklentisinde CVE-2026-107672 (8.8) ve Fusion HTML enjeksiyon açıkları","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-107672"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"energy","country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1419","first_seen":"2026-10-28T07:42:01+03:00","updated":"2026-10-28T07:42:01+03:00","title":"SGB TR-26-1419: Fortinet FortiOS Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Fortinet FortiOS","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1419","cve":["CVE-2026-106174"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Fortinet FortiOS ürününde güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güncellemelerin incelenmesini ve gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Fortinet FortiOS","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1419","kev":false},{"id":"sgb:TR-26-1418","first_seen":"2026-10-28T07:39:53+03:00","updated":"2026-10-28T07:39:53+03:00","title":"SGB TR-26-1418: Dell PowerProtect Data Domain Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Dell PowerProtect Data Domain","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1418","cve":["CVE-2026-90730","CVE-2026-90731","CVE-2026-90732","CVE-2026-56084"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Dell PowerProtect Data Domain bileşeninde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemeleri ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Dell PowerProtect Data Domain","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1418","kev":false},{"id":"sgb:TR-26-1417","first_seen":"2026-10-28T07:38:31+03:00","updated":"2026-10-28T07:38:31+03:00","title":"SGB TR-26-1417: TeamViewer Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"TeamViewer","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1417","cve":["CVE-2026-111585","CVE-2026-111584","CVE-2026-111583"],"cvss":null,"actor":[],"sgh_url":null,"summary":"TeamViewer'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine dokümanları gözden geçirmelerini ve gerekli önlemleri almalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"TeamViewer","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1417","kev":false},{"id":"sgb:TR-26-1416","first_seen":"2026-10-28T07:37:18+03:00","updated":"2026-10-28T07:37:18+03:00","title":"SGB TR-26-1416: Vaultwarden Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Vaultwarden","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1416","cve":["CVE-2026-116678"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Vaultwarden yazılımında güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, yayınlanan güvenlik önerilerinin incelenmesi ve gerekli güncellemelerin yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Vaultwarden","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1416","kev":false},{"id":"sgb:TR-26-1415","first_seen":"2026-10-28T07:29:04+03:00","updated":"2026-10-28T07:29:04+03:00","title":"SGB TR-26-1415: Mozilla Thunderbird Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Mozilla Thunderbird","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1415","cve":["CVE-2026-118180","CVE-2026-118179","CVE-2026-118178","CVE-2026-118177","CVE-2026-118176","CVE-2026-118175","CVE-2026-118174"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Mozilla Thunderbird ürününde güvenlik zafiyetleri tespit edilmiştir. Yayınlanan güvenlik önerilerinin incelenmesi ve gerekli güncellemelerin yapılması tavsiye edilmektedir.","tags":["sgb","tr_official"],"entity":"Mozilla Thunderbird","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1415","kev":false},{"id":"sgb:TR-26-1414","first_seen":"2026-10-28T07:24:00+03:00","updated":"2026-10-28T07:24:00+03:00","title":"SGB TR-26-1414: Moxa Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Moxa Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1414","cve":["CVE-2026-111548","CVE-2026-111459"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Moxa'nın bazı ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bültenini incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Moxa Çoklu Ürün","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1414","kev":false},{"id":"sgb:TR-26-1413","first_seen":"2026-10-28T07:21:12+03:00","updated":"2026-10-28T07:21:12+03:00","title":"SGB TR-26-1413: Python SDK Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Python SDK","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1413","cve":["CVE-2026-116686","CVE-2026-116685"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Python SDK'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanları gözden geçirmelerini ve gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Python SDK","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1413","kev":false},{"id":"sgb:TR-26-1412","first_seen":"2026-10-28T07:19:14+03:00","updated":"2026-10-28T07:19:14+03:00","title":"SGB TR-26-1412: Google ADK (google-adk","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Google ADK (google-adk)","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1412","cve":["CVE-2026-115522"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Google ADK'da (google-adk) tespit edilen güvenlik zafiyeti için güncelleme yayınlanmıştır. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemeleri ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Google ADK (google-adk)","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1412","kev":false},{"id":"sgb:TR-26-1411","first_seen":"2026-10-28T07:16:09+03:00","updated":"2026-10-30T08:38:35+03:00","title":"SGB TR-26-1411: Veeam Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Veeam","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1411","cve":["CVE-2026-105477","CVE-2025-64394","CVE-2026-106078","CVE-2026-106077","CVE-2026-106076","CVE-2023-22793","CVE-2026-107238","CVE-2026-107239"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Veeam bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı kullanıcı ve sistem yöneticilerine ilgili dokümanları gözden geçirmelerini ve gerekli tedbirlerin alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Veeam","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1411","kev":false},{"id":"sgb:TR-26-1410","first_seen":"2026-10-28T07:13:33+03:00","updated":"2026-10-28T07:13:33+03:00","title":"SGB TR-26-1410: NVIDIA Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"NVIDIA Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1410","cve":["CVE-2026-47486","CVE-2026-65145","CVE-2026-65151","CVE-2026-65120","CVE-2026-24269","CVE-2026-65119"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Bazı NVIDIA ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine zafiyetin çözümü için yayınlanan güvenlik önerisini inceleyerek gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"NVIDIA Çoklu Ürün","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1410","kev":false},{"id":"mews-pos-cve-2026-118377-sanal-pos-odeme-sahteleme-2026-10-28","first_seen":"2026-10-28T07:02:14+03:00","updated":"2026-10-28T07:19:00+03:00","title":"Sanal POS Kütüphanesi mews/pos'ta Ödeme Sonucu Sahteleme Açığı","category":"vulnerability","severity":"critical","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.vulncheck.com/advisories/mews-pos-through-2.0.0-missing-hash-verification-in-3d-pay-and-3d-host-callbacks","cve":["CVE-2026-118377"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/mews-pos-sanal-pos-kutuphanesi-acigi-cve-2026-118377.html","summary":"Türk bankalarının sanal POS altyapıları için geliştirilen mews/pos kütüphanesindeki açık, e-ticaret sitelerinde ödeme onaylarının sahtelenmesine yol açabiliyor.","tags":["sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"gfi-kerio-connect-cve-2026-112353-svg-xss-istismar-2026-10-27","first_seen":"2026-10-28T07:02:14+03:00","updated":"2026-10-28T07:02:14+03:00","title":"GFI Kerio Connect Webmail'de SVG ekiyle depolanmış XSS (CVE-2026-112353); Proofpoint gerçek ortamda kimlik/posta kutusu çalmak için istismar gözlemledi; düzeltme 10.0.8 Patch 2","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-112353"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"GFI Kerio Connect Webmail","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"umbraco-cms-cve-2026-117553-oauth-host-header-hesap-ele-gecirme-2026-10-27","first_seen":"2026-10-28T07:02:14+03:00","updated":"2026-10-28T07:02:14+03:00","title":"Umbraco CMS'te Host başlığı zehirlemesiyle back-office oturum ele geçirme (CVE-2026-117553; düzeltme 17.7.2 / 18.2.2)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-117553"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Umbraco CMS","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"epics-base-cve-2026-114595-yz-ajani-hizlandirici-yazilimi-2026-10-28","first_seen":"2026-10-28T07:02:14+03:00","updated":"2026-10-28T14:04:55+03:00","title":"YZ ajanı 4 saatte parçacık hızlandırıcı/füzyon deneylerinde kullanılan EPICS base'de 4 ciddi açık buldu (CVE-2026-114595, 9.8)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-114595"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ohio-sayistay-ofisi-yurt-disi-kaynakli-siber-saldiri-2026-10-27","first_seen":"2026-10-28T07:02:14+03:00","updated":"2026-10-28T07:02:14+03:00","title":"ABD Ohio Eyalet Sayıştay (Auditor of State) Ofisi yurt dışı kaynaklı siber saldırıyı inceliyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"ABD Ohio Eyalet Sayıştay","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"adobe-campaign-classic-apsb26-162-connect-apsb26-182-kritik-2026-10-27","first_seen":"2026-10-28T05:58:00+03:00","updated":"2026-10-28T14:57:20+03:00","title":"Adobe Campaign Classic kritik açıklar (APSB26-162; CVE-2026-105781 CVSS 10.0, CVE-2026-104351/104353/105489/105780 9.9) + Adobe Connect kod enjeksiyonu (APSB26-182; CVE-2026-48360 CVSS 9.6)","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-105781","CVE-2026-104351","CVE-2026-48360"],"cvss":10,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"guney-kore-bithumb-daishin-mirae-asset-veri-ihlali-2026-10-28","first_seen":"2026-10-28T05:58:00+03:00","updated":"2026-10-28T14:04:55+03:00","title":"Güney Kore finans dalgası sürüyor: Daishin Securities (38.490 müşteri), Bithumb (şirket içi mobil groupware) ve Mirae Asset Global Investments ihlal bildirdi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"38.490 müşteri","sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"merttug-otomotiv-ghostleakers-iddiasi-2026-10-28","first_seen":"2026-10-28T05:58:00+03:00","updated":"2026-10-28T05:58:00+03:00","title":"GhostLeakers, Merttuğ Otomotiv veritabanı ve kimlik bilgilerini sızdırdığını öne sürüyor (doğrulanmamış)","category":"leak","severity":"low","turkey_signal":true,"tr_entity":"Merttuğ Otomotiv","status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Merttuğ Otomotiv","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"manufacturing","country":null,"sgb_id":null,"kev":false},{"id":"teamviewer-linux-macos-cve-2026-92372-rce-2026-10-28","first_seen":"2026-10-28T03:54:12+03:00","updated":"2026-10-28T10:51:17+03:00","title":"TeamViewer Full Client (Linux/macOS) <15.83 ekran görüntüsü kod çözücüde sınır dışı yazma, uzaktan kod çalıştırma (CVE-2026-92372)","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-92372"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"TeamViewer Full Client","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"warhorse-studios-siber-saldiri-sirket-verisi-2026-10-27","first_seen":"2026-10-28T01:58:00+03:00","updated":"2026-10-28T14:04:55+03:00","title":"Kingdom Come: Deliverance stüdyosu Warhorse siber saldırıya uğradı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"dodo-payments-github-ozel-repo-silindi-2026-10-27","first_seen":"2026-10-28T01:58:00+03:00","updated":"2026-10-28T01:58:00+03:00","title":"Dodo Payments'ın özel GitHub deposu yetkisiz kullanıcı tarafından silindi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"uefi-firmware-kod-calistirma-acigi-sunucular-2026-10-27","first_seen":"2026-10-28T01:55:00+03:00","updated":"2026-10-28T01:55:00+03:00","title":"UEFI bellenimindeki kod çalıştırma açığı sunucuların çoğunu tehdit ediyor","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"belcika-esignflow-vanden-broele-tc-kimlik-sizintisi-2026-10-27","first_seen":"2026-10-28T00:55:00+03:00","updated":"2026-10-28T00:55:00+03:00","title":"Belçika: 120+ belediyenin kullandığı e-imza aracı eSignFlow'da imzacıların ulusal kimlik numaraları sızdı (Vanden Broele)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"jfrog-artifactory-kritik-acik-istismar-admin-erisim-2026-10-27","first_seen":"2026-10-28T00:55:00+03:00","updated":"2026-10-28T00:55:00+03:00","title":"JFrog Artifactory kritik açığının yönetici erişimi için istismar edildiği bildirildi","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":"manufacturing","country":null,"sgb_id":null,"kev":false},{"id":"supermicro-bmc-ipmi-cve-2026-18450-2026-10-28","first_seen":"2026-10-28T00:00:00+03:00","updated":null,"title":"Supermicro BMC/IPMI bellenim açıkları (CVE-2026-18450, kritik olarak raporlandı)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-18450"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cloudflare-gorsel-ozelligi-zincir-csp-atlatma-2026-10-28","first_seen":"2026-10-28T00:00:00+03:00","updated":null,"title":"Araştırmacılar Cloudflare görsel özelliğindeki küçük açıkları zincirleyerek CSP atlatıp kötü amaçlı JavaScript çalıştırdı (Kevin Gervot, Adam Kues; 28 Eki 2026)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"US","sgb_id":null,"kev":false},{"id":"edge-pwn2own-mantik-hatalari-175bin-2026-10-28","first_seen":"2026-10-28T00:00:00+03:00","updated":null,"title":"Araştırmacı Microsoft Edge’i yalnızca mantık hatalarıyla kırdığı 175 bin dolarlık Pwn2Own zincirini açıkladı","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"cisa-kev-brotli-111497-adobe-48356-2026-10-27","first_seen":"2026-10-27T22:59:27+03:00","updated":"2026-10-28T11:55:00+03:00","title":"CISA, Brotli ve Adobe Commerce Açıklarını KEV Listesine Aldı","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.cisa.gov/news-events/alerts/2026/10/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","cve":["CVE-2026-111497","CVE-2026-48356"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/cisa-kev-brotli-cve-2026-111497-adobe-commerce-magento.html","summary":"CISA, Brotli ve Adobe Commerce açıklarını KEV kataloğuna ekledi. Güvenlik güncellemesi gerektiren sürümler ve savunma önlemleri açıklandı.","tags":["cisa_kev","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"engie-fransa-musteri-verisi-ortak-pazarlama-araci-2026-10-27","first_seen":"2026-10-27T20:58:00+03:00","updated":"2026-10-27T20:58:00+03:00","title":"ENGIE: ortakların kullandığı pazarlama aracına sızma, Fransa'da müşteri verisine erişim (ad, e-posta, telefon, sayaç/sözleşme no; banka yok)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"norvec-basarili-siber-saldiri-6-ayda-uce-katlandi-2026-10-27","first_seen":"2026-10-27T20:58:00+03:00","updated":"2026-10-27T20:58:00+03:00","title":"Norveç: başarılı siber saldırı sayısı son 6 ayda üçe katlandı (Euronews)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"hpe-ag-urunleri-8-maks-ciddiyet-acik-2026-10-27","first_seen":"2026-10-27T17:02:07+03:00","updated":"2026-10-27T17:02:07+03:00","title":"HPE ağ ürünlerinde onlarca açık için yama; sekizi en yüksek ciddiyette (uzaktan kod çalıştırma, kimlik doğrulama atlatma)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.securityweek.com/hpe-patches-dozens-of-critical-flaws-in-networking-products/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"hashicorp-consul-kubernetes-yetki-atlatma-2026-10-27","first_seen":"2026-10-27T17:02:07+03:00","updated":"2026-10-27T17:02:07+03:00","title":"HashiCorp Consul (Kubernetes) yetki atlatma ve ayrıcalık yükseltme açığı","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://cybersecuritynews.com/hashicorp-consul-kubernetes-vulnerability/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"HashiCorp Consul","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"check-point-imzali-chatgpt-claude-ikilileri-2026-10-27","first_seen":"2026-10-27T17:02:07+03:00","updated":"2026-10-27T17:02:07+03:00","title":"Check Point Research: imzalı ChatGPT ve Claude masaüstü ikilileri üzerinden eski tekniklerle zararlı yükleme","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"denver-health-plan-tedarikci-anahtar-sizintisi-238bin-2026-10-27","first_seen":"2026-10-27T17:02:07+03:00","updated":"2026-10-27T17:02:07+03:00","title":"Denver Health planı: tedarikçi anahtar sızıntısı 238.000 üyenin verisini riske attı","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"238.000 üyenin","sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"afd-345bin-eposta-hesabi-ifsa-2026-10-27","first_seen":"2026-10-27T17:02:07+03:00","updated":"2026-10-27T17:02:07+03:00","title":"Almanya: AfD'ye siber saldırı 345 bin e-posta hesabını ifşa etti iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sirius-backdoor-windows-surec-gizleme-2026-10-27","first_seen":"2026-10-27T17:02:07+03:00","updated":"2026-10-27T17:02:07+03:00","title":"Sirius arka kapısının yeni varyantı Windows süreçlerinde gizlenip parola çalıyor","category":"malware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/sirius-backdoor-variant/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["malware"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"azure-ai-foundry-cvss10-auth-sunucu-tarafi-2026-10-27","first_seen":"2026-10-27T15:55:00+03:00","updated":"2026-10-27T15:55:00+03:00","title":"Azure AI Foundry CVSS 10 kimlik doğrulama açığı sunucu tarafında giderildi","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":10,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"keystone-donanim-cuzdan-dogrulama-anahtari-18835-2026-10-27","first_seen":"2026-10-27T15:55:00+03:00","updated":"2026-10-27T15:55:00+03:00","title":"Keystone, cihaz doğrulama anahtarı çalınınca 18.835 donanım cüzdanı imha edecek","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/keystone-to-destroy-18835-hardware.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"lazarus-guney-kore-guvenlik-yazilimi-pq-sifreleme-2026-10-27","first_seen":"2026-10-27T15:55:00+03:00","updated":"2026-10-27T15:55:00+03:00","title":"Lazarus, Güney Kore güvenlik yazılımını kötüye kullanarak kuantum sonrası şifreli zararlı dağıtıyor","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/lazarus-abuses-south-korean-security.html","cve":[],"cvss":null,"actor":["Lazarus"],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"ai-pentest-panelleri-17-ele-gecirildi-2026-10-27","first_seen":"2026-10-27T15:55:00+03:00","updated":"2026-10-27T15:55:00+03:00","title":"İnternete açık 17 YZ sızma testi paneli ele geçirildi","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/ai-pentesting-panels/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"openai-api-gizli-akil-yurutme-izleri-sizinti-2026-10-27","first_seen":"2026-10-27T15:55:00+03:00","updated":"2026-10-27T15:55:00+03:00","title":"OpenAI API açığı gizli akıl yürütme izlerini sızdırıyordu","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/researchers-discover-openai-api-vulnerability/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"ghost-cve-2026-103288-auth-bypass-escape-2026-10-27","first_seen":"2026-10-27T15:55:00+03:00","updated":"2026-10-27T15:55:00+03:00","title":"Ghost CMS kimlik doğrulama atlatma CVE-2026-103288 (Escape)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-103288"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"isvec-hukumeti-chatgpt-kullanimini-durdurdu-2026-10-27","first_seen":"2026-10-27T15:55:00+03:00","updated":"2026-10-27T15:55:00+03:00","title":"İsveç hükümeti veri sızıntısı endişesiyle ChatGPT kullanımını durdurdu","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"psn-aile-hesabi-cocuk-hesap-ekleme-acigi-2026-10-27","first_seen":"2026-10-27T14:56:00+03:00","updated":"2026-10-27T14:56:00+03:00","title":"PlayStation Network aile özelliğinde yabancı hesaplara çocuk hesabı ekleme açığı; destek üzerinden ana hesap devri iddiası","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sahte-claude-indirme-google-ads-claude-ai-alan-adi-2026-10-27","first_seen":"2026-10-27T14:56:00+03:00","updated":"2026-10-27T14:56:00+03:00","title":"Google Ads ile sahte Claude indirmeleri, gerçek claude.ai alan adında barındırılıyor","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"avustralya-amadey-backend-180bin-bilgisayar-2026-10-27","first_seen":"2026-10-27T13:55:00+03:00","updated":"2026-10-27T13:55:00+03:00","title":"Avustralya, Amadey zararlı yazılım altyapısına girip 180 bin bulaşık bilgisayarın erişimini kesti","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/australia-gets-into-amadey-malware.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["malware"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1409","first_seen":"2026-10-27T13:19:23+03:00","updated":"2026-10-27T13:19:23+03:00","title":"SGB TR-26-1409: Netiket Bilgi Teknolojileri​ - EdoWEB Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Netiket Bilgi Teknolojileri","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1409","cve":["CVE-2026-16307"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Netiket Bilgi Teknolojileri tarafından geliştirilen EdoWEB ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 780-g7 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Netiket Bilgi Teknolojileri","affected_products":["EdoWEB"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":"TR-26-1409","kev":false},{"id":"popcorn-time-updater-sinkhole-cve-2026-30612-2026-10-27","first_seen":"2026-10-27T13:12:18+03:00","updated":"2026-10-27T13:12:18+03:00","title":"Terk edilmiş Popcorn Time (Time4Popcorn) güncelleyicisi: imzasız HTTP güncelleme, alan adları ele geçirilebilir durumdaydı — Eye Security sinkhole, CVE-2026-30612","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.securityweek.com/dead-popcorn-time-updater-put-millions-of-computers-at-risk-of-takeover/","cve":["CVE-2026-30612"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1408","first_seen":"2026-10-27T12:46:14+03:00","updated":"2026-10-27T12:46:14+03:00","title":"SGB TR-26-1408: Keepnet Labs - Agentic AI / Agentic Ally Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Keepnet Labs Siber Güvenlik A. Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1408","cve":["CVE-2026-92546"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Keepnet Labs Siber Güvenlik A. Ş. tarafından geliştirilen Agentic AI / Agentic Ally ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 0ef61f2e sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Keepnet Labs Siber Güvenlik A. Ş.","affected_products":["Agentic AI / Agentic Ally"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1408","kev":false},{"id":"sgb:TR-26-1407","first_seen":"2026-10-27T12:21:26+03:00","updated":"2026-10-27T12:21:26+03:00","title":"SGB TR-26-1407: İdvlabs Yazılım - Ontime Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"İdvlabs Yazılım ve Danışmanlık Hizmetleri A.Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1407","cve":["CVE-2026-15586"],"cvss":null,"actor":[],"sgh_url":null,"summary":"İdvlabs Yazılım ve Danışmanlık Hizmetleri A.Ş. tarafından geliştirilen Ontime ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, üretici tarafından ilgili zafiyetin giderilmemesinden dolayı Ontime ürününü kullananlara muadil başka bir ürün kullanmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"İdvlabs Yazılım ve Danışmanlık Hizmetleri A.Ş.","affected_products":["Ontime"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":"TR-26-1407","kev":false},{"id":"bitonic-hollanda-bitcoin-araci-hack-2026-10-27","first_seen":"2026-10-27T12:08:00+03:00","updated":"2026-10-27T12:08:00+03:00","title":"Hollandalı bitcoin aracısı Bitonic'te güvenlik olayı (3 müşteri etkilendi iddiası)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"skynet-yapay-zeka-ajani-modelleri-ele-geciriyor-2026-10-27","first_seen":"2026-10-27T12:08:00+03:00","updated":"2026-10-27T12:08:00+03:00","title":"«Skynet» yapay zekâ ajanının diğer modelleri ele geçirerek saldırı düzenlediği iddiası (Independent Türkçe)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"dell-csm-cvss-10-dsa-2026-448-eski-2026-10-27","first_seen":"2026-10-27T12:08:00+03:00","updated":"2026-10-27T12:08:00+03:00","title":"Dell CSM CVSS 10 açığı (DSA-2026-448) — eski bildirim, yeniden dolaşımda","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":10,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Dell CSM CVSS 10","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1406","first_seen":"2026-10-27T11:57:55+03:00","updated":"2026-10-27T11:57:55+03:00","title":"SGB TR-26-1406: Rolantis Bilgi Teknolojileri - Agentis Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Rolantis Bilgi Teknolojileri Turizm San. ve Tic. Ltd. Şti.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1406","cve":["CVE-2026-100164"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Rolantis Bilgi Teknolojileri Turizm San. ve Tic. Ltd. Şti. tarafından geliştirilen Agentis ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 4.8 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Rolantis Bilgi Teknolojileri Turizm San. ve Tic. Ltd. Şti.","affected_products":["Agentis"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"hospitality","country":null,"sgb_id":"TR-26-1406","kev":false},{"id":"sgb:TR-26-1405","first_seen":"2026-10-27T11:31:39+03:00","updated":"2026-10-27T14:56:00+03:00","title":"SGB TR-26-1405: Kulga Yazılım - Kulga Haber Yazılımı Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Kulga Yazılım ve Telekomünikasyon Limited Şirketi","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1405","cve":["CVE-2026-105323"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Kulga Yazılım ve Telekomünikasyon Limited Şirketi tarafından geliştirilen Kulga Haber Yazılımı ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az v26.10.0 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Kulga Yazılım ve Telekomünikasyon Limited Şirketi","affected_products":["Kulga Haber Yazılımı"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"telecom","country":null,"sgb_id":"TR-26-1405","kev":false},{"id":"dahua-ip-kamera-ukrayna-p2p-ele-gecirme-2026-10-27","first_seen":"2026-10-27T11:00:13+03:00","updated":"2026-10-27T11:00:13+03:00","title":"Ukrayna'da Dahua IP kameraları P2P erişimi ve kimlik doğrulama zayıflıklarıyla ele geçirildi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/attackers-hijack-dahua-ip-cameras-in.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"genai-hacker-90-sirket-8-2-milyon-kayit-2026-10-27","first_seen":"2026-10-27T11:00:13+03:00","updated":"2026-10-27T11:00:13+03:00","title":"Üretken yapay zekâ kullanan saldırgan 90 şirkete sızıp 8,2 milyon kayıt çaldı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/hacker-uses-generative-ai-to-breach-90-companies-and-steal-8-2-million-records/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"8,2 milyon kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sansec-brezilya-magecart-convertr-plausible-script-2026-10-27","first_seen":"2026-10-27T11:00:13+03:00","updated":"2026-10-27T11:00:13+03:00","title":"Sansec: Brezilya odaklı Magecart, Convertr/Plausible analitik betiği kılığında kart verisi çalıyor","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://sansec.io/research","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"kirki-wordpress-cve-2026-75891-yetki-yukseltme-2026-10-27","first_seen":"2026-10-27T11:00:13+03:00","updated":"2026-10-27T11:00:13+03:00","title":"Kirki WordPress eklentisinde PHP nesne enjeksiyonuyla yetki yükseltme (CVE-2026-75891, ≤6.2.5)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75891","cve":["CVE-2026-75891"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"llama-cpp-cve-2026-116816-cve-2024-58400-2026-10-27","first_seen":"2026-10-27T11:00:13+03:00","updated":"2026-10-27T11:00:13+03:00","title":"llama.cpp'de iki bellek açığı: CVE-2026-116816 (GGUF heap yazma) ve CVE-2024-58400 (token ID okuma)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116816","cve":["CVE-2026-116816","CVE-2024-58400"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"paloalto-brotli-cve-2026-111497-kritik-2026-10-27","first_seen":"2026-10-27T09:55:00+03:00","updated":"2026-10-27T11:06:09+03:00","title":"Palo Alto PAN-OS'ta Brotli Açığı: Yamalar ve Geçici Çözüm","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://security.paloaltonetworks.com/CVE-2026-111497","cve":["CVE-2026-111497"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/palo-alto-pan-os-brotli-acigi-cve-2026-111497-gecici-cozum.html","summary":"Palo Alto Networks, PAN-OS sistemlerindeki Brotli açığı için güncelleme takvimini açıkladı. Yamaya kadar geçici çözüm Brotli denetimini kapatmak.","tags":["cisa_kev","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"Palo Alto PAN-OS","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"instagram-reklam-coruna-darksword-iphone-casus-2026-10-27","first_seen":"2026-10-27T09:55:00+03:00","updated":"2026-10-30T13:57:45+03:00","title":"Instagram reklamlarıyla iPhone'lara Coruna ve DarkSword casus yazılımı","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"openhands-sdk-cve-2026-112346-kimliksiz-rce-2026-10-26","first_seen":"2026-10-27T08:52:10+03:00","updated":"2026-10-27T08:52:10+03:00","title":"OpenHands Software Agent SDK: varsayılan ayarda kimlik doğrulamasız uzaktan kod çalıştırma (CVE-2026-112346, CVSS 9,8) — 1.52.0 ile düzeltildi","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112346","cve":["CVE-2026-112346"],"cvss":9.8,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"OpenHands Software Agent SDK","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"mistral-vibe-cve-2026-116843-git-filter-rce-2026-10-27","first_seen":"2026-10-27T08:52:10+03:00","updated":"2026-10-27T08:52:10+03:00","title":"Mistral Vibe: güvenilmeyen depoda --worktree ile komut çalıştırma (CVE-2026-116843, CVSS 8,8) — 3.0.3 ile düzeltildi","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116843","cve":["CVE-2026-116843"],"cvss":8.8,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"magento-953-magaza-tarayici-atlatan-skimmer-2026-10-26","first_seen":"2026-10-27T08:52:10+03:00","updated":"2026-10-27T08:52:10+03:00","title":"953 çevrim içi mağazaya (çoğu Magento) tarayıcıdan gizlenen ödeme sayfası zararlı kodu bulaştırıldı","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/hackers-infect-953-online-stores-with.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"teams-it-destek-dolandiriciligi-zararli-fidye-2026-10-26","first_seen":"2026-10-27T08:52:10+03:00","updated":"2026-10-27T08:52:10+03:00","title":"Saldırganlar Microsoft Teams üzerinden sahte BT destek aramalarıyla zararlı yazılım ve fidye yazılımı yayıyor","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/attackers-use-microsoft-teams-it.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["malware"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"icmacos-mac-parola-hirsizi-rat-2026-10-26","first_seen":"2026-10-27T08:52:10+03:00","updated":"2026-10-27T08:52:10+03:00","title":"ICMacOS Mac parola hırsızı yeniden başlatmaya dayanıklı uzaktan erişim truvasına dönüştü","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://gbhackers.com/hackers-turn-mac-password-stealer-into-rat-that-survives-reboots-and-executes-remote-commands/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"github-solucan-42-depo-13mb-yuk-2026-10-26","first_seen":"2026-10-27T08:52:10+03:00","updated":"2026-10-28T10:51:17+03:00","title":"Bir solucan 42 GitHub deposuna aramadan kaçmak için 13 MB yük gizledi","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"macos-autofs-cve-2026-84568-turk-arastirmaci-poc-2026-10-27","first_seen":"2026-10-27T07:58:00+03:00","updated":"2026-10-27T09:07:00+03:00","title":"macOS autofs Açığı İçin PoC Yayımlandı: Apple Eylül'de Kapatmıştı","category":"vulnerability","severity":"critical","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://support.apple.com/en-us/149042","cve":["CVE-2026-84568"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/macos-autofs-cve-2026-84568-turk-arastirmaci-ayrintilari-yayimladi.html","summary":"Apple'ın 14 Eylül'de macOS Sequoia 15.8, Tahoe 26.7 ve Golden Gate 27 ile kapattığı autofs açıkları için teknik ayrıntı ve PoC yayımlandı.","tags":["sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1404","first_seen":"2026-10-27T07:55:56+03:00","updated":"2026-10-27T07:55:56+03:00","title":"SGB TR-26-1404: Mattermost Uygulama Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Mattermost","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1404","cve":["CVE-2026-116516","CVE-2026-93846"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Mattermost uygulamasında güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine zafiyetin çözümü için Mattermost tarafından yayınlanan güvenlik önerisini inceleyerek gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Mattermost","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1404","kev":false},{"id":"sgb:TR-26-1403","first_seen":"2026-10-27T07:54:42+03:00","updated":"2026-10-27T07:54:42+03:00","title":"SGB TR-26-1403: Tornado Framework Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1403","cve":["CVE-2026-116577","CVE-2026-115927","CVE-2026-116578"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Tornado Framework'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine dokümanları gözden geçirmelerini ve gerekli güncellemeleri yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1403","kev":false},{"id":"sgb:TR-26-1402","first_seen":"2026-10-27T07:52:36+03:00","updated":"2026-10-27T07:52:36+03:00","title":"SGB TR-26-1402: Open Neural Network Exchange (ONNX","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Open Neural Network Exchange","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1402","cve":["CVE-2026-115919","CVE-2026-115922","CVE-2026-115921","CVE-2026-115920"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Open Neural Network Exchange'de (ONNX) güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine ilgili dokümanların incelenmesini ve gerekli önlemlerin alınmasını önermektedir.","tags":["sgb","tr_official"],"entity":"Open Neural Network Exchange","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":"TR-26-1402","kev":false},{"id":"sgb:TR-26-1401","first_seen":"2026-10-27T07:50:16+03:00","updated":"2026-10-27T07:50:16+03:00","title":"SGB TR-26-1401: vLLM Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1401","cve":["CVE-2026-115915","CVE-2024-29510","CVE-2026-59203","CVE-2026-115918","CVE-2026-115917","CVE-2026-115916"],"cvss":null,"actor":[],"sgh_url":null,"summary":"vLLM'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine ilgili dokümanların incelenmesini ve gerekli önlemlerin alınmasını önermektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1401","kev":false},{"id":"sgb:TR-26-1400","first_seen":"2026-10-27T07:45:30+03:00","updated":"2026-10-27T07:45:30+03:00","title":"SGB TR-26-1400: Ubiquiti Çoklu Ürün Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1400","cve":["CVE-2026-116837"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Bazı Ubiquiti ürünlerinde güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1400","kev":false},{"id":"sgb:TR-26-1399","first_seen":"2026-10-27T07:42:20+03:00","updated":"2026-10-27T07:42:20+03:00","title":"SGB TR-26-1399: Mozilla Firefox Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Mozilla Firefox","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1399","cve":["CVE-2026-116632","CVE-2026-116631"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Mozilla Firefox bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Mozilla Firefox","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1399","kev":false},{"id":"sgb:TR-26-1398","first_seen":"2026-10-27T07:40:57+03:00","updated":"2026-10-27T07:40:57+03:00","title":"SGB TR-26-1398: Apple Çoklu Ürün Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1398","cve":["CVE-2026-113897","CVE-2026-86916","CVE-2026-112625","CVE-2026-112449","CVE-2026-113896","CVE-2026-112507","CVE-2026-112696","CVE-2026-112679","CVE-2026-112415","CVE-2026-112680","CVE-2026-112546","CVE-2026-112638","CVE-2026-112454","CVE-2026-112706","CVE-2026-112614","CVE-2026-113906","CVE-2026-86989","CVE-2026-86966","CVE-2026-113910","CVE-2026-86970","CVE-2026-112655","CVE-2026-84594","CVE-2026-112622","CVE-2026-84605","CVE-2026-112634","CVE-2026-112423","CVE-2026-112566","CVE-2026-112474","CVE-2026-86985","CVE-2026-112618","CVE-2026-112659","CVE-2026-112658","CVE-2026-112571","CVE-2026-86880","CVE-2026-86992","CVE-2026-112619","CVE-2026-112567","CVE-2026-112459","CVE-2026-112623","CVE-2026-84595","CVE-2026-64759","CVE-2026-112654","CVE-2026-86971","CVE-2026-86988","CVE-2026-112479","CVE-2026-112615","CVE-2026-113907","CVE-2026-112642","CVE-2026-113950","CVE-2026-112707"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Bazı Apple ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güvenlik önerilerini inceleyerek gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1398","kev":false},{"id":"kopenhag-universitesi-veri-ihlali-525bin-2026-10-26","first_seen":"2026-10-27T02:55:00+03:00","updated":"2026-10-27T11:00:13+03:00","title":"Kopenhag Üniversitesi veri ihlali 525 bin kişiyi etkiledi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.bleepingcomputer.com/news/security/university-of-copenhagen-data-breach-exposes-data-of-525-000-people/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Kopenhag Üniversitesi","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"525 bin kişiyi","sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"php2shell-cisa-kev-2026-10-26","first_seen":"2026-10-27T01:50:00+03:00","updated":"2026-10-30T01:05:00+03:00","title":"CISA, PHP2Shell Açıklarını Aktif İstismar Kataloğu KEV'e Ekledi","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","cve":["CVE-2026-109618","CVE-2026-109619"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/php2shell-cisa-kev-aktif-istismar-listesi-cve-2026-109618.html","summary":"CISA, PHP2Shell açıklarını 26 Ekim'de istismar kanıtı bulunan açıklar kataloğu KEV'e ekledi. PHP 8.5.12, 8.4.27, 8.3.36 ya da 8.2.35'e geçilmeli.","tags":["cisa_kev","country:US","sgh_published","sgh_shared_on_x"],"entity":"PHP2Shell Açıklarını Aktif İstismar Kataloğu KEV","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":true},{"id":"softwareone-tr-gentlemen-iddia-2026-10-26","first_seen":"2026-10-26T19:23:45+03:00","updated":"2026-10-26T19:37:50+03:00","title":"The Gentlemen, SoftwareOne Türkiye'yi Listeye Yazdı; Teyit Yok","category":"ransomware","severity":"critical","turkey_signal":true,"tr_entity":"SoftwareOne Türkiye","status":"claim_only","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":["The Gentlemen"],"sgh_url":"https://siberguvenlikhaber.com/haber/softwareone-turkiye-the-gentlemen-iddiasi-2026.html","summary":"The Gentlemen grubu SoftwareOne adını sızıntı sitesine ekledi. İzleme kayıtları Türkiye koluna işaret ederken iddia bağımsız kaynaklarca doğrulanmadı.","tags":["country:TR","origin_leak_tracker","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"SoftwareOne Türkiye","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":null,"kev":false},{"id":"ttlock-android-cve-2026-112345-sabit-aes-anahtari-2026-10-26","first_seen":"2026-10-26T19:05:00+03:00","updated":"2026-10-26T19:05:00+03:00","title":"TTLock Android uygulaması / akıllı kilit: sabit kodlanmış statik AES anahtarı (CVE-2026-112345, CVSS 8.6; NVD 26 Eki 18:16 TSİ)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112345","cve":["CVE-2026-112345"],"cvss":8.6,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"ucreator-android-casus-yazilim-telegram-2fa-wechat-2026-10-26","first_seen":"2026-10-26T19:05:00+03:00","updated":"2026-10-26T19:05:00+03:00","title":"uCreator Android casus yazılımı Telegram iki adımlı doğrulama parolalarını çalabiliyor, WeChat hesaplarını klonlayabiliyor","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/ucreator-android-spyware-can-steal.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"US","sgb_id":null,"kev":false},{"id":"keepassxc-2-8-0-guvenlik-duzeltmeleri-2026-10-26","first_seen":"2026-10-26T19:05:00+03:00","updated":"2026-10-26T19:05:00+03:00","title":"KeePassXC 2.8.0 birden çok güvenlik açığını düzeltiyor","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://gbhackers.com/keepassxc-2-8-0-released/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"arctic-wolf-teams-harici-sohbet-ilk-erisim-2026-10-26","first_seen":"2026-10-26T19:05:00+03:00","updated":"2026-10-26T19:05:00+03:00","title":"Arctic Wolf: saldırganlar Microsoft Teams harici sohbetini sahte BT destek olarak ilk erişim için kullanıyor (26 Eki)","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"samsung-galaxy-s26-ekim-2026-guvenlik-guncellemesi-2026-10-26","first_seen":"2026-10-26T19:05:00+03:00","updated":"2026-10-26T19:05:00+03:00","title":"Samsung Galaxy S26 Ekim 2026 güvenlik güncellemesi (Gadget Hacks 26 Eki; Samsung SMR bülteni kontrol edilmeli)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":"Samsung Galaxy S26 Ekim 2026","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"php2shell-ilk-dogrulanmis-rce-honeypot-35-shell-2026-10-26","first_seen":"2026-10-26T18:05:00+03:00","updated":"2026-10-27T02:05:32+03:00","title":"PHP2Shell (CVE-2026-109618 NVD 9.8 / CVE-2026-109619 8.1) sahada ilk doğrulanmış RCE: 24 Eki'de 3 honeypot'ta (PHP 8.4.26, Apache mod_php) 35 kabuk; CISA KEV'de henüz yok","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109618","cve":["CVE-2026-109618","CVE-2026-109619"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev","country:US"],"entity":"PHP2Shell","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":true},{"id":"hirudo-android-banka-truvani-sahte-uygulama-threatfabric-2026-10-26","first_seen":"2026-10-26T18:05:00+03:00","updated":"2026-10-26T18:05:00+03:00","title":"Hirudo: Android banka RAT'ı gerçek banka uygulamasını kaldırıp yamalı kopyasını kuruyor (8 Endonezya bankacılık uygulaması; hedef ülkeler Endonezya, Çin, Hindistan, Meksika, Fas, Tayland)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.threatfabric.com/blogs/hirudo-from-fake-updates-to-patched-banking-apps","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:NL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"NL","sgb_id":null,"kev":false},{"id":"genesys-ihlal-dogrulandi-lms-crm-scarlettgroup-2026-10-26","first_seen":"2026-10-26T18:05:00+03:00","updated":"2026-10-26T18:05:00+03:00","title":"Genesys iç sistem (LMS, CRM) ihlalini doğruladı; müşteri iletişim verisi erişildi, Genesys Cloud/Engage platformları etkilenmedi; 23 Eki'de kontrol altına alındı; ScarlettGroup üstlendi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.securityweek.com/genesys-hack-exposes-customer-data-from-internal-systems/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"US","sgb_id":null,"kev":false},{"id":"brotli-http2shell-jfrog-dotnet-ffmpeg-clickhouse-arrow-2026-10-26","first_seen":"2026-10-26T18:05:00+03:00","updated":"2026-10-28T14:57:20+03:00","title":"CVE-2026-111497 (Brotli) Node.js/HTTP dışına taşıyor: JFrog .NET, FFmpeg (libjxl/JPEG XL), ClickHouse, Apache Arrow yollarını gösterdi; ClickHouse ve Arrow sürümü henüz yamasız","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://research.jfrog.com/post/brotli2shell-beyond-node2shell-and-http2shell/","cve":["CVE-2026-111497"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev","country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":true},{"id":"dotnet-aspnet-brotli-cve-2026-111497-114148-msrc-2026-10-25","first_seen":"2026-10-26T17:10:00+03:00","updated":"2026-10-28T16:07:32+03:00","title":".NET İçin Plan Dışı Brotli Güncellemesi: Sürümler Çıktı","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://github.com/dotnet/announcements/issues/494","cve":["CVE-2026-111497","CVE-2026-114148"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/microsoft-net-brotli-acigi-cve-2026-111497-acil-guncelleme.html","summary":"Microsoft, .NET ve ASP.NET Core'daki Brotli açığı CVE-2026-111497 için plan dışı güncelleme yayımladı. Düzeltilmiş sürümler 8.0.33, 9.0.22 ve 10.0.14.","tags":["cisa_kev","country:US","sgh_published"],"entity":null,"affected_products":[],"patch_status":"available","exploited":true,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":true},{"id":"wasmtime-cranelift-cve-2026-115889-115893-2026-10-26","first_seen":"2026-10-26T17:10:00+03:00","updated":"2026-10-26T17:10:00+03:00","title":"Wasmtime/Cranelift CVE-2026-115889 ve CVE-2026-115893 (GHSA critical) — sandbox kaçışı riski; düzeltme 36.0.19 / 43.0.0 / 48.0.7 / 49.0.4","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115889","cve":["CVE-2026-115889","CVE-2026-115893"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":"Wasmtime/Cranelift","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"cisa-kev-velocloud-cve-2026-114625-collabora-cve-2026-110447-2026-10-23","first_seen":"2026-10-26T17:10:00+03:00","updated":"2026-10-26T17:10:00+03:00","title":"CISA KEV 23 Eki: Arista VeloCloud Orchestrator CVE-2026-114625 (SQLi) ve Collabora Online CODE CVE-2026-110447 (OS komut enjeksiyonu) aktif sömürü listesinde","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","cve":["CVE-2026-114625","CVE-2026-110447"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev","country:US"],"entity":"CISA KEV 23 Eki","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":"technology","country":"US","sgb_id":null,"kev":true},{"id":"msrc-azure-bulut-critical-6-cve-2026-10-22","first_seen":"2026-10-26T17:10:00+03:00","updated":"2026-10-26T17:10:00+03:00","title":"MSRC 22 Eki: 6 Critical bulut CVE'si (Azure Pipelines 105014, AI Foundry 108456, VM Inspector 110063, AKS Config 83938, Exchange Online 96185, AAD App Proxy 97785) — sömürü yok","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-97785","CVE-2026-110063","CVE-2026-83938"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":"MSRC 22 Eki","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"US","sgb_id":null,"kev":false},{"id":"tailscale-ssh-yamasiz-aciklar-2026-10-25","first_seen":"2026-10-26T17:10:00+03:00","updated":"2026-10-28T14:57:20+03:00","title":"Tailscale SSH yamasız açıklar — ele geçirilen tek cihazdan diğer sunucularda root","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"linux-ksmbd-zdi-can-33367-root-exploit-2026-10-26","first_seen":"2026-10-26T17:10:00+03:00","updated":"2026-10-26T17:10:00+03:00","title":"Linux KSMBD ZDI-CAN-33367: herkese açık root istismarı, CVE ve birleştirilmiş yama yok (THN)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":"Linux KSMBD ZDI-CAN-33367","affected_products":[],"patch_status":"not_available","exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"m365-token-replay-97-hesap-79-kurum-2026-10-26","first_seen":"2026-10-26T17:10:00+03:00","updated":"2026-10-27T11:00:13+03:00","title":"Microsoft 365 token-replay saldırıları: 79 kurumda 97 hesap","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/microsoft-365-token-replay-attacks.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"wiz-gheist-github-token-actions-log-2026-10-25","first_seen":"2026-10-26T17:10:00+03:00","updated":"2026-10-26T17:10:00+03:00","title":"Wiz: Gheist çalıntı GitHub tokenlarıyla Actions loglarından özel depo sırlarını çalmaya çalıştı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.wiz.io/blog/gheist-attempted-scaled-abuse-of-stolen-github-tokens-stumbles","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":"Wiz","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"apache-camel-coklu-acik-2026-10-26","first_seen":"2026-10-26T17:10:00+03:00","updated":"2026-10-26T17:10:00+03:00","title":"Apache Camel çoklu açık (RCE, kimlik doğrulama atlatma)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://gbhackers.com/apache-camel-vulnerabilities/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"imagemagick-cve-2026-116149-2026-10-26","first_seen":"2026-10-26T17:10:00+03:00","updated":"2026-10-26T17:10:00+03:00","title":"ImageMagick CVE-2026-116149 (8.1) yığın taşması — 6.9.13-58 / 7.1.2-33 öncesi","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116149","cve":["CVE-2026-116149"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":"ImageMagick","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"ms-authenticator-android-cve-2026-80097-authmask-2026-10-26","first_seen":"2026-10-26T16:31:00+03:00","updated":"2026-10-26T17:12:36+03:00","title":"Microsoft Authenticator'da Android Açığı: Jeton Riski","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://enclave.ai/blog/authmask-we-made-microsoft-authenticator-hand-over-tokens","cve":["CVE-2026-80097"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/microsoft-authenticator-android-cve-2026-80097-authmask-acigi.html","summary":"Microsoft Authenticator Android uygulamasında iş hesabı jetonlarını riske atan açık kapatıldı. Kullanıcıların 6.2606.4246 sürümüne geçmesi gerekiyor.","tags":["country:US","origin_x_tip","sgh_published"],"entity":null,"affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1397","first_seen":"2026-10-26T11:35:03+03:00","updated":"2026-10-26T15:06:43+03:00","title":"SGB TR-26-1397: Innotim Yazılım - Logsign SIEM Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Innotim Yazılım Telekomünikasyon ve Danışmanlık Tic. Ltd. Şti.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1397","cve":["CVE-2026-105947","CVE-2026-94380"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/logsign-siem-havelsan-liman-mys-guvenlik-bildirimi-tr-26-1397-tr-26-1396-sgb.html","summary":"Innotim Yazılım Telekomünikasyon ve Danışmanlık Tic. Ltd. Şti. tarafından geliştirilen Logsign SIEM ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 6.4.122 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Innotim Yazılım Telekomünikasyon ve Danışmanlık Tic. Ltd. Şti.","affected_products":["Logsign SIEM"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"telecom","country":null,"sgb_id":"TR-26-1397","kev":false},{"id":"sgb:TR-26-1396","first_seen":"2026-10-26T11:07:40+03:00","updated":"2026-10-28T13:19:25+03:00","title":"SGB TR-26-1396: HAVELSAN - Liman MYS Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"HAVELSAN A.Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1396","cve":["CVE-2026-94380","CVE-2026-105457"],"cvss":3.1,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/havelsan-liman-mys-dosya-okuma-acigi-tr-26-1421-sgb.html","summary":"HAVELSAN A.Ş. tarafından geliştirilen Liman MYS ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 2.3.5-1131 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"HAVELSAN A.Ş.","affected_products":["Liman MYS"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"transport","country":"TR","sgb_id":"TR-26-1396","kev":false},{"id":"sgb:TR-26-1395","first_seen":"2026-10-26T07:54:17+03:00","updated":"2026-10-26T12:10:45+03:00","title":"SGB TR-26-1395: Amazon AWS Multi Model Server Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Amazon AWS Multi Model Server","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1395","cve":["CVE-2026-115812","CVE-2026-115813"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/aws-multi-model-server-yama-yok-cve-2026-115812-tr-26-1395-sgb.html","summary":"Amazon AWS Multi Model Server'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Amazon AWS Multi Model Server","affected_products":[],"patch_status":"not_available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1395","kev":false},{"id":"sgb:TR-26-1393","first_seen":"2026-10-26T07:49:48+03:00","updated":"2026-10-26T07:49:48+03:00","title":"SGB TR-26-1393: DJI Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"DJI","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1393","cve":["CVE-2026-114355","CVE-2026-114354","CVE-2026-114353"],"cvss":null,"actor":[],"sgh_url":null,"summary":"DJI ürünlerinde tespit edilen güvenlik zafiyetleri için güncelleme yayınladı. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"DJI","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1393","kev":false},{"id":"sgb:TR-26-1392","first_seen":"2026-10-26T07:47:01+03:00","updated":"2026-10-26T07:47:01+03:00","title":"SGB TR-26-1392: PraisonAI Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1392","cve":["CVE-2026-57117","CVE-2026-57146","CVE-2026-57144","CVE-2026-57142","CVE-2026-57121","CVE-2026-57116","CVE-2026-40151","CVE-2026-57114","CVE-2026-57113","CVE-2026-56840","CVE-2026-56838","CVE-2026-56837","CVE-2026-56836","CVE-2026-56835","CVE-2026-56834","CVE-2026-56833","CVE-2026-56832"],"cvss":null,"actor":[],"sgh_url":null,"summary":"PraisonAI'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1392","kev":false},{"id":"sgb:TR-26-1391","first_seen":"2026-10-26T07:45:54+03:00","updated":"2026-10-26T07:45:54+03:00","title":"SGB TR-26-1391: Zimbra Collaboration Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Zimbra Collaboration","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1391","cve":["CVE-2026-93640","CVE-2026-50057","CVE-2026-50056","CVE-2026-93639","CVE-2026-93638","CVE-2026-93636","CVE-2026-93634","CVE-2026-93633","CVE-2026-93631","CVE-2026-93630","CVE-2026-93629","CVE-2026-93628","CVE-2026-93627","CVE-2026-50053","CVE-2026-10632"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Zimbra Collaboration ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümandaki güvenlik önerilerini inceleyerek gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Zimbra Collaboration","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1391","kev":false},{"id":"sgb:TR-26-1390","first_seen":"2026-10-26T07:43:38+03:00","updated":"2026-10-26T07:43:38+03:00","title":"SGB TR-26-1390: Linux Kernel Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Linux Kernel","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1390","cve":["CVE-2026-98870","CVE-2026-99081","CVE-2026-99080","CVE-2026-99079","CVE-2026-99078","CVE-2026-99077","CVE-2026-99076","CVE-2026-99075","CVE-2026-99074","CVE-2026-99073","CVE-2026-99072","CVE-2026-99071","CVE-2026-99070","CVE-2026-99069","CVE-2026-99068","CVE-2026-99067","CVE-2026-99066","CVE-2026-99065","CVE-2026-99064","CVE-2026-99063","CVE-2026-99062","CVE-2024-50169","CVE-2026-99061","CVE-2026-99060","CVE-2026-99059","CVE-2026-99058","CVE-2026-99057","CVE-2026-99056","CVE-2026-99055","CVE-2026-99054","CVE-2026-99053","CVE-2026-99052","CVE-2026-99051","CVE-2026-99050","CVE-2026-99049","CVE-2026-99048","CVE-2026-99047","CVE-2026-99046","CVE-2026-99045","CVE-2026-99044","CVE-2026-99043","CVE-2026-99042","CVE-2026-99041","CVE-2026-99040","CVE-2026-99039","CVE-2026-99038","CVE-2026-99037","CVE-2026-99036","CVE-2026-99035","CVE-2026-99034"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Linux Kernel seviyesindeki zafiyetler için güvenlik güncellemesi yayınlanmıştır. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güncellemeleri incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Linux Kernel","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1390","kev":false},{"id":"terminal-kadikoy-reklam-ekrani-hack-kent-sucu-2026-10-24","first_seen":"2026-10-24T19:52:00+03:00","updated":"2026-10-25T18:58:00+03:00","title":"Terminal Kadıköy (Söğütlüçeşme) reklam ekranı 'hacklendi' iddiası: ekrana 'Bu bina kent suçudur' yazısı yansıtıldı","category":"leak","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.sozcu.com.tr/her-gun-yuz-binlerce-kisinin-gectigi-terminal-kadikoy-de-tabelalar-hacklendi-p372448","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:TR","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"buyuk-aile-platformu-site-deface-2026-10-19","first_seen":"2026-10-24T14:06:31+03:00","updated":"2026-10-25T20:55:00+03:00","title":"Büyük Aile Platformu sitesine siber saldırı (deface), 19 Eki 2026; platform 23 Eki açıklamasıyla suç duyurusu ve SGB koordinasyonu","category":"leak","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.aa.com.tr/tr/gundem/buyuk-aile-platformundan-internet-sitesi-ve-iletisim-kanallarina-yonelik-siber-saldiriya-iliskin-aciklama/4093991","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:TR","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"remax-turkiye-danisman-veritabani-iddiasi-radicalbandit-2026-10-23","first_seen":"2026-10-24T00:53:00+03:00","updated":"2026-10-24T00:53:00+03:00","title":"RE/MAX Türkiye: 5.000+ gayrimenkul danışmanının verilerini içeren veritabanı forumda paylaşıldı iddiası (RadicalBandit)","category":"leak","severity":"medium","turkey_signal":true,"tr_entity":"RE/MAX Türkiye","status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:TR","origin_x_tip"],"entity":"RE/MAX Türkiye","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"hensel-elektrik-tr-deadlock-iddiasi-2026-10-23","first_seen":"2026-10-24T00:53:00+03:00","updated":"2026-10-24T00:53:00+03:00","title":"Hensel Elektrik (Gustav Hensel Türkiye iştiraki) DeadLock fidye yazılımı kurban listesinde iddiası","category":"ransomware","severity":"medium","turkey_signal":true,"tr_entity":"Hensel Elektrik","status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:TR","origin_x_tip"],"entity":"Hensel Elektrik","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":null,"kev":false},{"id":"sogutlucesme-terminal-ekran-hack-iddiasi-2026-10-24","first_seen":"2026-10-24T00:00:00+03:00","updated":"2026-10-24T12:55:00+03:00","title":"Söğütlüçeşme terminalinde bilgi ekranının hacklendiği iddiası","category":"leak","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:TR","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"cimer-sikayetci-bilgisi-isletmeyle-paylasildi-iddiasi-2026-10-24","first_seen":"2026-10-24T00:00:00+03:00","updated":"2026-10-25T20:55:00+03:00","title":"CİMER şikâyetçisinin kimliğinin şikâyet edilen işletmeye ulaştığı iddiası","category":"leak","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:TR","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"arista-velocloud-cve-2026-114625-kev-2026-10-23","first_seen":"2026-10-23T20:50:00+03:00","updated":"2026-10-23T20:50:00+03:00","title":"CISA KEV: Arista VeloCloud Orchestrator SQL enjeksiyonu (CVE-2026-114625) aktif istismar listesinde","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","cve":["CVE-2026-114625"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev","country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":true},{"id":"k0t-fortigate-paloalto-edge-kampanyasi-70bin-kimlik-2026-10-23","first_seen":"2026-10-23T17:00:00+03:00","updated":"2026-10-23T17:00:00+03:00","title":"Group-IB/NyxLab: k0t adlı aktör FortiGate/FortiWeb ve Palo Alto GlobalProtect cihazlarını hedefledi, 70.000+ kimlik bilgisi; Qilin/The Gentlemen bağlantısı","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.group-ib.com/blog/stray-cat-network-edge/","cve":[],"cvss":null,"actor":["Qilin","The Gentlemen"],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":"Group-IB/NyxLab","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"php-cve-2026-115560-session-upload-progress-bilgi-2026-10-23","first_seen":"2026-10-23T14:58:00+03:00","updated":"2026-10-23T14:58:00+03:00","title":"PHP bilgilendirme duyurusu: CVE-2026-115560 (session upload progress, yamasız, olası olmayan RCE yolu; geçici önlem session.upload_progress.enabled=0; tam duyuru bir sonraki sürümde)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-115560"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1389","first_seen":"2026-10-23T12:30:15+03:00","updated":"2026-10-23T16:07:21+03:00","title":"SGB TR-26-1389: Python certifi Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Python certifi","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1389","cve":[],"cvss":4,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sgb-python-certifi-emudhra-sertifika-guncellemesi-tr-26-1389.html","summary":"Açık kaynaklarda yer alan bilgilere göre, Python ekosisteminde yaygın olarak kullanılan certifi kök sertifika paketini hakkında kritik seviyede bir güvenlik bildirimi yayımlamıştır. Bildirim, eMudhra’ya ait sekiz ara sertifika otoritesinin özel anahtarlarının ele geçirilmesiyle ilgilidir ve söz konusu anahtarlar hatalı üretildiği için sertifikalardan hesaplanabilir durumda olduğu değerlendirilmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Python certifi","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1389","kev":false},{"id":"tr-sampa-ayd-otomotiv-isci-verisi-sendika-iddiasi-2026-10-23","first_seen":"2026-10-23T10:52:40+03:00","updated":"2026-10-23T11:58:00+03:00","title":"Samsun Sampa Otomotiv ve Konya AYD Otomotiv çalışanlarının kimlik ve sendika üyelik verilerinin rızasız paylaşıldığı/sızdırıldığı iddiası","category":"leak","severity":"low","turkey_signal":true,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:TR","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"manufacturing","country":"TR","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1388","first_seen":"2026-10-23T08:27:55+03:00","updated":"2026-10-23T13:25:18+03:00","title":"SGB TR-26-1388: Node.js Projesi Güvenlik Bildirimi","category":"vulnerability","severity":"high","turkey_signal":true,"tr_entity":"Node.js Projesi","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1388","cve":["CVE-2026-111497","CVE-2026-105482","CVE-2026-105483","CVE-2026-106069","CVE-2026-105481","CVE-2026-106072","CVE-2026-106074","CVE-2026-106070","CVE-2026-106071","CVE-2026-106073"],"cvss":4,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sgb-nodejs-brotli-cve-2026-111497-guvenlik-guncellemesi-tr-26-1388.html","summary":"Açık kaynaklarda yer alan bilgilere göre, Node.js projesi, 21 Ekim 2026 tarihinde 26.x, 24.x ve 22.x sürüm hatları için toplam 10 güvenlik açığını gideren güncellemeler yayımlamıştır. Güncellemeler ayrıca OpenSSL, c-ares, Undici ve SQLite bağımlılık yamalarını içermekte ve ele geçirilmiş eMudhra ara sertifika otoritesini güvenilir CA listesinden çıkarmaktadır.","tags":["cisa_kev","sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Node.js Projesi","affected_products":[],"patch_status":"available","exploited":true,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1388","kev":true},{"id":"sgb:TR-26-1387","first_seen":"2026-10-23T07:59:02+03:00","updated":"2026-10-23T07:59:02+03:00","title":"SGB TR-26-1387: React Next.js Framework Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1387","cve":["CVE-2026-94482"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Next.js Framework'de güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanı gözden geçirmelerini ve gerekli güncellemeleri yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1387","kev":false},{"id":"sgb:TR-26-1386","first_seen":"2026-10-23T07:53:59+03:00","updated":"2026-10-23T07:53:59+03:00","title":"SGB TR-26-1386: KNIME Business Hub Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"KNIME Business Hub","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1386","cve":["CVE-2026-115519","CVE-2026-115454","CVE-2026-115502"],"cvss":null,"actor":[],"sgh_url":null,"summary":"KNIME Business Hub'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanı gözden geçirmelerini ve gerekli güncellemeleri yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"KNIME Business Hub","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1386","kev":false},{"id":"sgb:TR-26-1385","first_seen":"2026-10-23T07:35:10+03:00","updated":"2026-10-23T07:35:10+03:00","title":"SGB TR-26-1385: OpenStack Ironic Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"OpenStack Ironic","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1385","cve":["CVE-2026-115638"],"cvss":null,"actor":[],"sgh_url":null,"summary":"OpenStack Ironic'de güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanı gözden geçirmelerini ve gerekli güncellemeleri yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"OpenStack Ironic","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1385","kev":false},{"id":"sgb:TR-26-1384","first_seen":"2026-10-23T07:23:54+03:00","updated":"2026-10-26T07:51:07+03:00","title":"SGB TR-26-1384: WordPress Eklenti Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"WordPress Eklenti","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1384","cve":["CVE-2026-109933","CVE-2026-114696","CVE-2026-104068","CVE-2026-109198","CVE-2026-115497","CVE-2026-94268","CVE-2026-94267","CVE-2026-94264","CVE-2023-5292","CVE-2026-94262","CVE-2026-113501","CVE-2026-113500","CVE-2026-113499","CVE-2026-113472","CVE-2026-112230","CVE-2026-112219","CVE-2026-111982","CVE-2026-111966","CVE-2026-111738","CVE-2026-111737","CVE-2026-110537","CVE-2026-110510","CVE-2026-109936","CVE-2026-109935","CVE-2026-109934","CVE-2026-94295","CVE-2026-94263","CVE-2026-111965","CVE-2026-55826","CVE-2026-115806","CVE-2026-115807","CVE-2026-114429","CVE-2026-113674","CVE-2026-113673","CVE-2026-113493","CVE-2026-113492","CVE-2026-113491","CVE-2026-113490","CVE-2026-113489","CVE-2026-112207","CVE-2026-110956","CVE-2026-105199","CVE-2026-97353","CVE-2026-97352","CVE-2026-107907","CVE-2026-87835","CVE-2026-107887","CVE-2026-110018","CVE-2026-115251","CVE-2026-115214","CVE-2026-115183","CVE-2026-114743","CVE-2026-114742","CVE-2026-114741","CVE-2026-114740","CVE-2026-111981","CVE-2026-111980","CVE-2026-111979","CVE-2026-111978","CVE-2026-111976","CVE-2026-110285","CVE-2025-15705"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Bazı WordPress eklentilerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"WordPress Eklenti","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1384","kev":false},{"id":"tr-internete-acik-vnc-scada-ekranlari-shodan-2026-10-22","first_seen":"2026-10-23T01:56:00+03:00","updated":"2026-10-28T16:07:32+03:00","title":"Türkiye'de 161 kritik altyapı ekranı internete açık","category":"vulnerability","severity":"high","turkey_signal":true,"tr_entity":null,"status":"claim_only","source_type":"official","primary_source_url":"https://www.cisa.gov/resources-tools/resources/primary-mitigations-reduce-cyber-threats-operational-technology","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/turkiye-internete-acik-vnc-kritik-altyapi-161-sistem-iddiasi-2026.html","summary":"İsimsiz bir yazar, Türkiye'de su pompaları dahil 161 kritik altyapı VNC ekranının açık olduğunu öne sürdü. İddialar doğrulanmadı; resmi açıklama yok.","tags":["country:TR","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"yz-ajanli-hacker-grubu-400-finans-kurulusu-2026-10-22","first_seen":"2026-10-22T18:58:00+03:00","updated":"2026-10-22T18:58:00+03:00","title":"B (global): Yapay zekâ ajanlarıyla çalışan bir saldırı grubunun 400'den fazla finans kuruluşunu hedef aldığı bildiriliyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"capcom-id-11m-hesap-veri-ihlali-2026-10-22","first_seen":"2026-10-22T16:55:00+03:00","updated":"2026-10-26T14:03:40+03:00","title":"Capcom: CAPCOM ID'de 11,7 Milyon Kayıt Etkilendi, Sahte Mesaj Uyarısı","category":"fraud","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.capcom.co.jp/ir/english/news/html/e261022.html","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/capcom-id-11-7-milyon-hesap-veri-ihlali-2026.html","summary":"Capcom, CAPCOM ID'deki 11,7 milyon kayıtta e-posta ve hesap etkinlik verilerinin etkilendiğini açıkladı; kredi kartı bilgisi etkilenenler arasında yok.","tags":["country:JP","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"11,7 Milyon Kayıt","sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"ingiltere-32-kamu-hizmeti-siber-kesinti-2026-10-22","first_seen":"2026-10-22T16:55:00+03:00","updated":"2026-10-22T16:55:00+03:00","title":"B (global): İngiltere'de siber güvenlik olayı nedeniyle 32 kamu hizmeti durduruldu (Yeni Şafak, Dünya 13:26Z)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:UK"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":"UK","sgb_id":null,"kev":false},{"id":"axios-abd-bankalari-yetkisiz-yz-ajanlari-2026-10-22","first_seen":"2026-10-22T15:48:00+03:00","updated":"2026-10-22T21:28:14+03:00","title":"Axios: Yetkisiz Yapay Zekâ Ajanları ABD Banka Hesaplarına Giriyor","category":"leak","severity":"high","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"official","primary_source_url":"https://www.resmigazete.gov.tr/eskiler/2020/03/20200315-10.htm","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/abd-bankalari-yetkisiz-yapay-zeka-ajanlari-musteri-hesaplari-axios-2026.html","summary":"Axios'un isimsiz kaynaklara dayanan haberine göre ABD bankaları hesaplarda yetkisiz yapay zekâ ajanları tespit ediyor. Türkiye'de bildirilmiş bir olay yok.","tags":["country:US","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"US","sgb_id":null,"kev":false},{"id":"php2shell-amazon-ilk-istismar-17-ekim-2026-10-22","first_seen":"2026-10-22T10:52:00+03:00","updated":"2026-10-22T10:52:00+03:00","title":"Amazon tehdit ekibi: PHP2Shell açıklarına ilk istismar girişimi açıklamadan 4 gün önce, 17 Ekim'de görüldü","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1383","first_seen":"2026-10-22T10:14:18+03:00","updated":"2026-10-22T14:35:15+03:00","title":"SGB TR-26-1383: MikroTik RouterOS Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"MikroTik RouterOS","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1383","cve":["CVE-2026-89035"],"cvss":4,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sgb-guvenlik-bildirimleri-derlemesi-mikrotik-electron-wordpress-22-ekim-2026.html","summary":"MikroTik RouterOS'de güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine, yayınlanan güvenlik önerilerini incelemeleri ve gerekli önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"MikroTik RouterOS","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1383","kev":false},{"id":"sgb:TR-26-1382","first_seen":"2026-10-22T10:10:11+03:00","updated":"2026-10-22T14:35:15+03:00","title":"SGB TR-26-1382: GIMP (GNU Image Manipulation Program","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"GIMP (GNU Image Manipulation Program)","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1382","cve":["CVE-2026-92183"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sgb-guvenlik-bildirimleri-derlemesi-mikrotik-electron-wordpress-22-ekim-2026.html","summary":"GIMP (GNU Image Manipulation Program) yazılımında güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine, yayınlanan güvenlik önerilerini incelemeleri ve gerekli önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"GIMP (GNU Image Manipulation Program)","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1382","kev":false},{"id":"sgb:TR-26-1381","first_seen":"2026-10-22T10:08:10+03:00","updated":"2026-10-22T14:35:15+03:00","title":"SGB TR-26-1381: Airbyte Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"SGB TR-26-1381 Airbyte Güvenlik Zafiyeti","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1381","cve":["CVE-2026-92203","CVE-2026-92204"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sgb-guvenlik-bildirimleri-derlemesi-mikrotik-electron-wordpress-22-ekim-2026.html","summary":"Airbyte'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güvenlik önerilerini incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"SGB TR-26-1381 Airbyte Güvenlik Zafiyeti","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1381","kev":false},{"id":"sgb:TR-26-1380","first_seen":"2026-10-22T10:05:14+03:00","updated":"2026-10-22T14:35:15+03:00","title":"SGB TR-26-1380: Red Hat Keycloak Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Red Hat Keycloak","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1380","cve":["CVE-2026-114438"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sgb-guvenlik-bildirimleri-derlemesi-mikrotik-electron-wordpress-22-ekim-2026.html","summary":"Red Hat Keycloak'da güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine Keycloak güncellemelerini ivedilikle yapmalarını önermektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Red Hat Keycloak","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1380","kev":false},{"id":"sgb:TR-26-1379","first_seen":"2026-10-22T10:03:17+03:00","updated":"2026-10-22T14:35:15+03:00","title":"SGB TR-26-1379: NoMachine Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"SGB TR-26-1379 NoMachine Güvenlik Zafiyeti","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1379","cve":["CVE-2026-92210","CVE-2026-92209","CVE-2026-92208","CVE-2026-111184"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sgb-guvenlik-bildirimleri-derlemesi-mikrotik-electron-wordpress-22-ekim-2026.html","summary":"NoMachine bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine zafiyetin çözümü için yayınlanan güvenlik önerilerini inceleyerek gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"SGB TR-26-1379 NoMachine Güvenlik Zafiyeti","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1379","kev":false},{"id":"sgb:TR-26-1378","first_seen":"2026-10-22T09:58:07+03:00","updated":"2026-10-22T14:35:15+03:00","title":"SGB TR-26-1378: Electron Framework Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"SGB TR-26-1378 Electron Framework Güvenlik Zafiyeti","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1378","cve":["CVE-2026-114124","CVE-2026-114122","CVE-2026-114121","CVE-2026-113800","CVE-2026-113798","CVE-2026-113797","CVE-2026-113796"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sgb-guvenlik-bildirimleri-derlemesi-mikrotik-electron-wordpress-22-ekim-2026.html","summary":"Electron Framework bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine zafiyetin çözümü için yayınlanan güvenlik önerilerini inceleyerek gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"SGB TR-26-1378 Electron Framework Güvenlik Zafiyeti","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1378","kev":false},{"id":"railway-paas-env-vars-security-incident-2026-10-21","first_seen":"2026-10-22T09:55:00+03:00","updated":"2026-10-22T09:55:00+03:00","title":"Railway (bulut uygulama platformu) güvenlik olayı: müşteri ortam değişkenleri (API anahtarları, gizli bilgiler) açığa çıkmış olabilir; dağıtımlar durduruldu","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":"Railway","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"transport","country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1376","first_seen":"2026-10-22T09:53:28+03:00","updated":"2026-10-22T14:35:15+03:00","title":"SGB TR-26-1376: GitLab CE/EE Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"SGB TR-26-1376 GitLab CE/EE Güvenlik Bildirimi","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1376","cve":["CVE-2026-110264","CVE-2026-12664","CVE-2026-13319","CVE-2026-14288","CVE-2026-15723","CVE-2026-16255","CVE-2026-103515","CVE-2026-105711","CVE-2026-105777","CVE-2026-112378","CVE-2026-112212","CVE-2026-112326"],"cvss":10,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sgb-gitlab-cve-2026-110264-kimlik-dogrulamasiz-kod-calistirma-tr-26-1376.html","summary":"GitLab CE/EE'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bültenini incelemelerini ve gereken önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"SGB TR-26-1376 GitLab CE/EE Güvenlik Bildirimi","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1376","kev":false},{"id":"sgb:TR-26-1375","first_seen":"2026-10-22T09:51:10+03:00","updated":"2026-10-22T09:51:10+03:00","title":"SGB TR-26-1375: NTPsec Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1375","cve":["CVE-2026-102486","CVE-2026-102485","CVE-2026-102484","CVE-2026-102483"],"cvss":null,"actor":[],"sgh_url":null,"summary":"NTPsec bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanların gözden geçirilmesini ve gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1375","kev":false},{"id":"sgb:TR-26-1374","first_seen":"2026-10-22T09:45:57+03:00","updated":"2026-10-22T09:45:57+03:00","title":"SGB TR-26-1374: Cisco Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Cisco Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1374","cve":["CVE-2026-20011","CVE-2026-76497","CVE-2026-76505","CVE-2026-76496","CVE-2026-76495","CVE-2026-76494","CVE-2026-76493","CVE-2026-76490","CVE-2026-76489","CVE-2026-76492","CVE-2026-76491","CVE-2026-76481","CVE-2026-76487","CVE-2026-76479","CVE-2026-76478","CVE-2026-76476","CVE-2026-76477","CVE-2026-76475","CVE-2026-76474","CVE-2026-76445","CVE-2026-76473","CVE-2026-76435","CVE-2026-76466","CVE-2026-76462","CVE-2026-20356","CVE-2026-20236","CVE-2026-20221","CVE-2026-20291","CVE-2026-20197","CVE-2026-20218","CVE-2026-20179","CVE-2026-20043","CVE-2026-20019"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Bazı Cisco ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanların gözden geçirilmesini ve gerekli önlemlerin alınmasıni tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Cisco Çoklu Ürün","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1374","kev":false},{"id":"sgb:TR-26-1373","first_seen":"2026-10-22T09:34:33+03:00","updated":"2026-10-22T13:16:02+03:00","title":"SGB TR-26-1373: Drupal Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"SGB TR-26-1373 Drupal Güvenlik Bildirimi","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1373","cve":["CVE-2026-96372","CVE-2026-84910","CVE-2026-84911","CVE-2026-84912","CVE-2026-84913","CVE-2026-84914","CVE-2026-84915","CVE-2026-84923","CVE-2026-84924","CVE-2026-84916","CVE-2026-84917","CVE-2026-16648","CVE-2026-81163","CVE-2026-84918","CVE-2026-84919","CVE-2026-84920","CVE-2026-84921","CVE-2026-87936","CVE-2026-87937","CVE-2026-87938","CVE-2026-87939","CVE-2026-87940","CVE-2026-87941","CVE-2026-87942","CVE-2026-87943","CVE-2026-87944","CVE-2026-87945","CVE-2026-87946","CVE-2026-87947","CVE-2026-87948","CVE-2026-87949","CVE-2026-87950","CVE-2026-87951","CVE-2026-87952","CVE-2026-87953","CVE-2026-87954","CVE-2026-87955","CVE-2026-96360","CVE-2026-96361","CVE-2026-96358","CVE-2026-96359","CVE-2026-96362","CVE-2026-96363","CVE-2026-96367","CVE-2026-96368","CVE-2026-96370","CVE-2026-96369","CVE-2026-96371","CVE-2026-96373","CVE-2026-96366","CVE-2026-96355"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sgb-guvenlik-bildirimleri-derlemesi-cisco-drupal-22-ekim-2026.html","summary":"Drupal bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanları incelemelerini ve gerken önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"SGB TR-26-1373 Drupal Güvenlik Bildirimi","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1373","kev":false},{"id":"fbi-nsa-php2shell-uyari-dunyada-siteler-kapatildi-2026-10-22","first_seen":"2026-10-22T04:09:00+03:00","updated":"2026-10-22T04:30:48+03:00","title":"FBI ve NSA'dan PHP Uyarısı: Güncelleyemiyorsanız Kapatın","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4630238/nsa-advisory-critical-patches-recommended-for-php-vulnerabilities/","cve":["CVE-2026-109618"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/fbi-nsa-php2shell-uyarisi-dunyada-siteler-kapatildi-2026.html","summary":"FBI ve NSA, PHP'deki kritik açıkları kapatamayan kurumlara sistemleri çevrim dışı almalarını önerdi; dünyada kamu siteleri önlem amaçlı kapatıldı.","tags":["cisa_kev","country:GLOBAL","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"FBI ve NSA","affected_products":[],"patch_status":"available","exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"sgb-php2shell-ulusal-tarama-some-acil-duyuru-2026-10-21","first_seen":"2026-10-22T00:06:34+03:00","updated":"2026-10-22T13:06:36+03:00","title":"Siber Güvenlik Başkanlığı PHP Açıkları İçin Ulusal Tarama Başlattı","category":"vulnerability","severity":"critical","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1372","cve":["CVE-2026-109618"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sgb-php2shell-ulusal-guvenlik-taramasi-some-acil-duyuru-2026.html","summary":"Siber Güvenlik Başkanlığı, PHP açıklarına karşı Türkiye genelinde tarama başlattı ve kurumlara SOME üzerinden güvenlik duyurusu gönderdi.","tags":["cisa_kev","country:TR","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":"TR","sgb_id":null,"kev":true},{"id":"gitlab-cve-2026-110264-cvss10-onigmo-rce-2026-10-21","first_seen":"2026-10-22T00:06:34+03:00","updated":"2026-10-22T14:35:15+03:00","title":"SGB'den GitLab Uyarısı: Kod Çalıştırma Açığı İçin Güncelleme Çıktı","category":"vulnerability","severity":"critical","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1376","cve":["CVE-2026-110264"],"cvss":10,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sgb-gitlab-cve-2026-110264-kimlik-dogrulamasiz-kod-calistirma-tr-26-1376.html","summary":"SGB, GitLab için TR-26-1376 kodlu bildirim yayımladı. CVE-2026-110264 açığı nedeniyle kendi sunucusunu işletenlerin sürümlerini güncellemesi gerekiyor.","tags":["country:GLOBAL","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"kvkk-21-ekim-2026-omnibus","first_seen":"2026-10-21T22:45:00+03:00","updated":"2026-10-28T19:12:00+03:00","title":"KVKK 10 veri ihlali duyurdu: Mehmet Efendi ve Güllüoğlu listede","category":"leak","severity":"critical","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.kvkk.gov.tr/Icerik/9072/kamuoyu-duyurusu-veri-ihlali-bildirimi-gulluoglu-gida-san-ve-tic-as-https-www-karakoygulluoglu-com","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/kvkk-21-ekim-2026-veri-ihlali-duyurulari.html","summary":"KVKK 21 Ekim 2026'da 10 veri ihlali duyurusu yayımladı. Listede Kurukahveci Mehmet Efendi, Güllüoğlu, Dermojet, İzmir Büyükşehir Belediyesi ve Enka Vakfı var.","tags":["country:TR","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"litellm-pypi-supply-chain-1-107-0-2026-10-21","first_seen":"2026-10-21T21:50:00+03:00","updated":"2026-10-21T21:50:00+03:00","title":"LiteLLM 1.107.0 (PyPI wheel + Docker) tedarik zinciri saldırısı — kimlik bilgisi hırsızı + arka kapı; PyPI karantina","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["malware"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cin-turkiye-internet-savasi-hesap-hedefleme-2026-10-21-ab7bec","first_seen":"2026-10-21T15:55:57+03:00","updated":"2026-10-21T15:55:57+03:00","title":"B düşük: X'te 'Çin vs Türkiye internet savaşı' — Çinli kullanıcıların yüksek takipçili Türk hesaplarını hedeflediği iddiası (GlobaliteTR, 471k gösterim); doğrulanmış siber saldırı/ihlal yok","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"gmo-onamae-desktop-cloud-musteri-sunucu-ihlali-kapatma-2026-10-21","first_seen":"2026-10-21T14:52:00+03:00","updated":"2026-10-21T14:52:00+03:00","title":"GMO Onamae Desktop Cloud (Japonya) müşteri sunucularında zararlı program, 26.739 sunucu potansiyel etkilenen, hizmet kapatılıyor","category":"malware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","desk_skipped","origin_x_tip"],"entity":"GMO Onamae Desktop Cloud","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"tor-333-cikis-rolesi-ssh-parola-ele-gecirme-2026-10-21","first_seen":"2026-10-21T13:59:00+03:00","updated":"2026-10-21T14:52:00+03:00","title":"333 Tor çıkış rölesi SSH bağlantılarını 12 ele geçirme sunucusuna yönlendirip parola çaldı; Tor Project röleleri engelledi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"everest-haier-fidye-iddiasi-2026-10-21","first_seen":"2026-10-21T13:59:00+03:00","updated":"2026-10-21T13:59:00+03:00","title":"Everest fidye grubu Haier'i sızıntı sitesine ekledi — veri/dosya listesi yok","category":"ransomware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["Everest"],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"noname05716-la-poste-mobile-ddos-iddiasi-2026-10-21","first_seen":"2026-10-21T13:59:00+03:00","updated":"2026-10-21T13:59:00+03:00","title":"NoName057(16) La Poste Mobile (Fransa) DDoS iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","desk_skipped","origin_x_tip"],"entity":"NoName057(16) La Poste Mobile","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"iran-baglantili-grup-israil-ordusu-siber-saldiri-iddiasi-2026-10-21","first_seen":"2026-10-21T13:59:00+03:00","updated":"2026-10-21T13:59:00+03:00","title":"İran bağlantılı hacker grubundan İsrail ordusuna siber saldırı iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"machiaveli-darknet-kokain-saticisi-apple-kayit-2026-10-21","first_seen":"2026-10-21T13:59:00+03:00","updated":"2026-10-21T13:59:00+03:00","title":"'Machiaveli' darknet kokain satıcısı Apple kayıtlarıyla Spokane'li kişiye bağlandı","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1372","first_seen":"2026-10-21T13:44:13+03:00","updated":"2026-10-21T13:44:13+03:00","title":"SGB TR-26-1372: PHP Programlama Dili Güvenlik Bildirimi","category":"vulnerability","severity":"high","turkey_signal":true,"tr_entity":"PHP Programlama Dili","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1372","cve":["CVE-2026-109618","CVE-2026-109619"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Açık kaynaklarda yer alan bilgilere göre, PHP programlama dilini etkileyen iki kritik güvenlik zafiyetinin bulunduğu ve söz konusu zafiyetlerin uzaktan kod çalıştırılmasına (RCE) olanak tanıyabileceği bildirilmektedir. Güvenlik araştırmacıları tarafından “php2shell” olarak adlandırılan zafiyetlere ilişkin ayrıntılar, PHP güvenlik ekibinin yayımladığı resmî güvenlik duyurusuyla açıklanmıştır.","tags":["cisa_kev","sgb","tr_official"],"entity":"PHP Programlama Dili","affected_products":[],"patch_status":"available","exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1372","kev":true},{"id":"teamupdraft-updraftcentral-anahtar-ihlali-wordpress-arka-kapi-2026-10-21","first_seen":"2026-10-21T12:55:00+03:00","updated":"2026-10-21T12:55:00+03:00","title":"TeamUpdraft (UpdraftPlus, 4M+ aktif kurulum) sitesi 17–18 Eki ihlali — müşteri DB (ad, e-posta, fatura adresi, hash'li parola, 2FA ayarları) ve UpdraftCentral/UpdraftVault/UpdraftClone bağla","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/attackers-abuse-updraftcentral-keys-to.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":"Global B: TeamUpdraft","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"wiz-gcp-ihlalleri-yetkisiz-gemini-faturasi-2026-10-21","first_seen":"2026-10-21T12:55:00+03:00","updated":"2026-10-21T12:55:00+03:00","title":"Wiz — GCP hesap ihlallerinde arama reklamı oltalamasıyla yetkili kimlik + MFA kodu çalınıp 24–48 saatte on binlerce–yüz binlerce dolarlık yetkisiz Gemini kullanımı","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"black-spark-rusya-edutest-okul-sinav-hack-2026-10-21","first_seen":"2026-10-21T12:55:00+03:00","updated":"2026-10-21T12:55:00+03:00","title":"Black Spark — Rusya Edutest okul sınav platformu hack'i, sınavlar durduruldu","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"gamdom-3m-dolar-hack-2026-10-21","first_seen":"2026-10-21T12:55:00+03:00","updated":"2026-10-21T12:55:00+03:00","title":"Gamdom (kripto kumar) ~3M$ hack, site çevrimdışı","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":"Gamdom","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"hugging-face-ceo-netflix-belgesel-tepki-2026-10-21","first_seen":"2026-10-21T12:55:00+03:00","updated":"2026-10-21T12:55:00+03:00","title":"Hugging Face CEO'sundan siber güvenlik olayı belgeseli nedeniyle Netflix'e tepki","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cisa-fbi-safepay-aa26-293a-600-kritik-altyapi-2026-10-21","first_seen":"2026-10-21T11:58:29+03:00","updated":"2026-10-21T12:55:00+03:00","title":"CISA/FBI/USSS/LKA RLP/NCA ortak danışma AA26-293A — SafePay fidye yazılımı Ağustos 2024'ten beri 600+ kritik altyapı kurumu (Kuzey/Güney Amerika, Avrupa, Avustralya); ilk erişim: Cisco ASA C","category":"ransomware","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"official","primary_source_url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-293a","cve":["CVE-2020-3259","CVE-2023-20269","CVE-2023-27532","CVE-2024-40711","CVE-2024-40766"],"cvss":null,"actor":["SafePay"],"sgh_url":null,"summary":null,"tags":["cisa_kev","country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":true},{"id":"akira-pk-softech-isvicre-federal-emeklilik-2026-10-21","first_seen":"2026-10-21T11:58:29+03:00","updated":"2026-10-21T11:58:29+03:00","title":"Akira — İsviçre PK Softech / federal personel emeklilik fonu verileri (Tages-Anzeiger; )","category":"ransomware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["Akira"],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"notino-1-2m-musteri-kaydi-satis-iddiasi-2026-10-21","first_seen":"2026-10-21T11:58:29+03:00","updated":"2026-10-21T11:58:29+03:00","title":"Notino 1,2 milyon müşteri kaydı forum satış iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1,2 milyon müşteri","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"openemis-jamaika-57-egitim-veritabani-erisim-satisi-2026-10-21","first_seen":"2026-10-21T11:58:29+03:00","updated":"2026-10-21T11:58:29+03:00","title":"OpenEMIS — Jamaika eğitim bakanlığı instance'ı, 57 veritabanı erişim satışı iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":"OpenEMIS","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"sbi-state-bank-of-india-3897-kayit-dark-web-2026-10-21","first_seen":"2026-10-21T11:01:56+03:00","updated":"2026-10-21T11:01:56+03:00","title":"State Bank of India: dark web'de 3.897 müşteri kaydı, banka sızıntıyı doğruladı","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":"State Bank of India","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"3.897 müşteri","sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"vasilek-vmware-tools-backdoor-rus-saglik-2026-10-21","first_seen":"2026-10-21T11:01:56+03:00","updated":"2026-10-21T11:01:56+03:00","title":"Vasilek arka kapısı VMware Tools içinde: Rus sağlık kurumuna 2 yıllık sızma","category":"malware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","malware"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1371","first_seen":"2026-10-21T08:12:02+03:00","updated":"2026-10-21T12:28:00+03:00","title":"SGB TR-26-1371: CVE-2026-76504","category":"vulnerability","severity":"high","turkey_signal":true,"tr_entity":"SGB TR-26-1371 Cisco SD-WAN Manager","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1371","cve":["CVE-2026-76504","CVE-2026-20127","CVE-2026-20122","CVE-2026-20128","CVE-2026-20133","CVE-2026-20182","CVE-2026-20245","CVE-2026-20262"],"cvss":9.8,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/cisco-catalyst-sd-wan-manager-cve-2026-76504-aktif-istismar-tr-26-1371-sgb.html","summary":"Cisco, ağ cihazları ve ağ yönetim yazılımları geliştiren bir üreticidir. Cisco Catalyst SD-WAN Manager (eski adıyla vManage), kurumların geniş alan ağlarındaki yönlendiricileri, ağ ayarlarını ve güvenlik politikalarını tek bir yönetim panelinden kurmasını, izlemesini ve yönetmesini sağlayan bir yazılımdır. Panele web tarayıcısı üzerinden erişilmekte ve ağın merkezi yönetim noktası olarak kullanılmaktadır.","tags":["cisa_kev","sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"SGB TR-26-1371 Cisco SD-WAN Manager","affected_products":[],"patch_status":"available","exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1371","kev":true},{"id":"sgb:TR-26-1370","first_seen":"2026-10-21T07:33:57+03:00","updated":"2026-10-21T07:33:57+03:00","title":"SGB TR-26-1370: SolarWinds Observability Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"SolarWinds Observability","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1370","cve":["CVE-2026-28330","CVE-2026-28329","CVE-2026-28328"],"cvss":null,"actor":[],"sgh_url":null,"summary":"SolarWinds Observability ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine SolarWinds firmasının güvenlik bültenlerini takip etmelerini ve gerken önlemleri almalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"SolarWinds Observability","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1370","kev":false},{"id":"sgb:TR-26-1369","first_seen":"2026-10-21T07:31:45+03:00","updated":"2026-10-21T07:31:45+03:00","title":"SGB TR-26-1369: Mozilla Firefox Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Mozilla Firefox","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1369","cve":["CVE-2026-113400","CVE-2026-113470","CVE-2026-113401","CVE-2026-113399"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Mozilla Firefox bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Mozilla Firefox","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1369","kev":false},{"id":"sgb:TR-26-1368","first_seen":"2026-10-21T07:26:58+03:00","updated":"2026-10-21T07:26:58+03:00","title":"SGB TR-26-1368: Sharp Node.js Image Processing Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Sharp Node.js Image Processing","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1368","cve":["CVE-2026-114111","CVE-2026-114113","CVE-2026-114112"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Sharp Node.js Image Processing'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanı gözden geçirmelerini ve gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Sharp Node.js Image Processing","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1368","kev":false},{"id":"sgb:TR-26-1367","first_seen":"2026-10-21T07:20:27+03:00","updated":"2026-10-21T07:20:27+03:00","title":"SGB TR-26-1367: vLLM Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1367","cve":["CVE-2026-114054","CVE-2026-114055","CVE-2026-114053","CVE-2026-114052","CVE-2026-114051","CVE-2026-114050","CVE-2026-114049"],"cvss":null,"actor":[],"sgh_url":null,"summary":"vLLM'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine güncellemelerini ivedilikle yapmalarını önermektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1367","kev":false},{"id":"sgb:TR-26-1366","first_seen":"2026-10-21T07:14:16+03:00","updated":"2026-10-21T07:14:16+03:00","title":"SGB TR-26-1366: FreeRDP Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1366","cve":["CVE-2026-114047","CVE-2026-114046","CVE-2026-114045","CVE-2026-114044","CVE-2026-114043","CVE-2026-114042","CVE-2026-114041"],"cvss":null,"actor":[],"sgh_url":null,"summary":"FreeRDP yazılımında güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine güncellemelerini ivedilikle yapmalarını önermektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1366","kev":false},{"id":"sgb:TR-26-1365","first_seen":"2026-10-21T07:07:19+03:00","updated":"2026-10-21T11:14:21+03:00","title":"SGB TR-26-1365: Oracle Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Oracle Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1365","cve":["CVE-2026-101359","CVE-2026-91419","CVE-2026-91418","CVE-2026-91417","CVE-2026-91415","CVE-2026-91414","CVE-2026-91413","CVE-2026-91412","CVE-2026-91411","CVE-2026-91410","CVE-2026-91409","CVE-2026-91408","CVE-2026-91407","CVE-2026-91406","CVE-2026-91405","CVE-2026-91404","CVE-2026-91402","CVE-2026-91400","CVE-2026-91399","CVE-2026-91398","CVE-2026-91397","CVE-2026-91396","CVE-2026-91395","CVE-2026-91394","CVE-2026-91393","CVE-2026-91392","CVE-2026-91391","CVE-2026-91390","CVE-2026-91389","CVE-2026-91388","CVE-2026-91387","CVE-2026-91386","CVE-2026-91385","CVE-2026-91384","CVE-2026-91383","CVE-2026-91382","CVE-2026-91381","CVE-2026-91380","CVE-2026-91379","CVE-2026-91378","CVE-2026-91377","CVE-2026-91376","CVE-2026-91375","CVE-2026-91374","CVE-2026-91373","CVE-2026-91372","CVE-2026-91371","CVE-2026-91370","CVE-2026-91369","CVE-2026-91368","CVE-2026-87413","CVE-2026-101809"],"cvss":10,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/oracle-ekim-2026-guvenlik-guncellemesi-1295-yama-tr-26-1365-sgb.html","summary":"Bazı Oracle ürünlerinde güvenlik zafiyetleri tespit edilmiştir.","tags":["sgb","sgh_published","tr_official"],"entity":"Oracle Çoklu Ürün","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1365","kev":false},{"id":"a-masa0015-g111-emudhra-ara-sertifika-anahtarlari-ele-gecirildi-tarayicilar-2026","first_seen":"2026-10-21T00:44:27+03:00","updated":"2026-10-25T10:52:00+03:00","title":"eMudhra'nın 8 Ara Sertifikasının Anahtarları Ele Geçirildi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/emudhra-ara-sertifika-anahtarlari-ele-gecirildi-tarayicilar-2026.html","summary":"eMudhra'nın 8 ara sertifika anahtarı ele geçirildi; sahte HTTPS sertifikası üretimi riskine karşı Mozilla, Chrome ve Apple sertifikaları engelledi.","tags":["origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"php-cve-2026-109618-109619-kritik-rce-yama-2026-10-21","first_seen":"2026-10-21T00:44:27+03:00","updated":"2026-10-22T00:13:59+03:00","title":"SGB'den PHP Uyarısı: php2shell Açıkları İçin Yeni Sürümler Çıktı","category":"vulnerability","severity":"critical","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1372","cve":["CVE-2026-109618","CVE-2026-109619"],"cvss":4,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/php-php2shell-cve-2026-109618-109619-yama-tr-26-1372-sgb.html","summary":"Siber Güvenlik Başkanlığı, PHP'deki php2shell açıkları için TR-26-1372 bildirimini yayımladı. PHP aynı gün yeni sürümleri çıkararak açıkları kapattı.","tags":["cisa_kev","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"palo-alto-cve-2026-0257-qilin-inc-2026-10-20","first_seen":"2026-10-21T00:44:27+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Palo Alto CVE-2026-0257 Qilin/INC tarafından istismar","category":"ransomware","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-0257"],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":null,"tags":["cisa_kev"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"fbi-cisa-safepay-aa26-293a-2026-10-20","first_seen":"2026-10-21T00:44:27+03:00","updated":"2026-10-21T00:44:27+03:00","title":"FBI/CISA SafePay fidye yazılımı ortak danışması AA26-293A","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["SafePay"],"sgh_url":null,"summary":null,"tags":[],"entity":"FBI/CISA SafePay","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"ovhcloud-cli-ele-gecirme-2026-10-20","first_seen":"2026-10-21T00:44:27+03:00","updated":"2026-10-21T00:44:27+03:00","title":"OVHcloud CLI ele geçirme (tedarik zinciri)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"apt28-nato-tersane-saldirisi-2026-10-20","first_seen":"2026-10-21T00:44:27+03:00","updated":"2026-10-21T00:44:27+03:00","title":"APT28'in NATO tersanesine saldırısı","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["APT28"],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ai-ajanlar-1200-site-ihlal-2026-10-20","first_seen":"2026-10-21T00:44:27+03:00","updated":"2026-10-21T11:58:29+03:00","title":"AI ajanların 1.200 siteyi ihlal etmesi araştırması","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"fortisiem-poc-2026-10-20","first_seen":"2026-10-21T00:44:27+03:00","updated":"2026-10-25T20:55:00+03:00","title":"FortiSIEM PoC yayımlandı","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"morgan-stanley-892m-iddia-2026-10-20-ca6b4e","first_seen":"2026-10-21T00:44:27+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Morgan Stanley 892M kayıt iddiası — doğrulanmadı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Morgan Stanley 892M","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"892M kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"gpt-6-1-sol-benchmark-2026-10-20","first_seen":"2026-10-21T00:44:27+03:00","updated":"2026-10-21T00:44:27+03:00","title":"GPT-6.1 Sol benchmark yazısı (model 29 Eyl'de çıktı)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1364","first_seen":"2026-10-20T11:11:30+03:00","updated":"2026-10-21T01:24:24+03:00","title":"SGB TR-26-1364: Ticimax - E-Ticaret Platformu Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Ticimax","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1364","cve":["CVE-2026-18205"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ticimax-e-ticaret-platformu-guvenlik-bildirimi-tr-26-1364-sgb.html","summary":"Ticimax tarafından geliştirilen E-Ticaret Platformu ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 02.09.2026 tarihli sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Ticimax","affected_products":["E-Ticaret Platformu"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"retail","country":null,"sgb_id":"TR-26-1364","kev":false},{"id":"sgb:TR-26-1363","first_seen":"2026-10-20T06:57:35+03:00","updated":"2026-10-20T06:57:35+03:00","title":"SGB TR-26-1363: Mobatek MobaXterm Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Mobatek MobaXterm","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1363","cve":["CVE-2026-112161"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Mobatek MobaXterm ürününde güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Mobatek MobaXterm","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1363","kev":false},{"id":"sgb:TR-26-1362","first_seen":"2026-10-20T06:48:18+03:00","updated":"2026-10-21T01:24:24+03:00","title":"SGB TR-26-1362: Pillow (Python Kütüphanesi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Pillow","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1362","cve":["CVE-2026-112391","CVE-2026-112390","CVE-2026-112892","CVE-2026-112891","CVE-2026-112406","CVE-2026-112405","CVE-2026-112404","CVE-2026-112403","CVE-2026-112402","CVE-2026-112397","CVE-2026-112392","CVE-2026-112401"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/pillow-python-kutuphanesi-guvenlik-zafiyeti-tr-26-1362-sgb.html","summary":"Pillow (Python) kütüphanesinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Pillow","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1362","kev":false},{"id":"sgb:TR-26-1361","first_seen":"2026-10-20T06:38:29+03:00","updated":"2026-10-20T06:38:29+03:00","title":"SGB TR-26-1361: Apache Çoklu Proje Güvnelik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1361","cve":["CVE-2026-108771","CVE-2026-71563","CVE-2026-68482","CVE-2026-67249","CVE-2026-64945","CVE-2026-64944","CVE-2026-64943","CVE-2026-108837","CVE-2026-108833","CVE-2026-108823","CVE-2026-108780","CVE-2026-108776","CVE-2026-108766","CVE-2026-108764","CVE-2026-108762","CVE-2026-85246","CVE-2026-85245","CVE-2026-85243","CVE-2026-84181","CVE-2026-84180","CVE-2026-84178","CVE-2026-84176","CVE-2026-83531","CVE-2026-80344","CVE-2026-80343","CVE-2026-80312","CVE-2026-79986","CVE-2026-79985","CVE-2026-79984","CVE-2026-86467","CVE-2026-40948"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Bazı Apache projelerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1361","kev":false},{"id":"sgb:TR-26-1360","first_seen":"2026-10-20T06:36:06+03:00","updated":"2026-10-20T06:36:06+03:00","title":"SGB TR-26-1360: ASUS Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1360","cve":["CVE-2026-102438","CVE-2026-75753","CVE-2026-17518"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Bazı ASUS ürünlerinde güvenlik açıklıkları tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güncellemeleri incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1360","kev":false},{"id":"sgb:TR-26-1359","first_seen":"2026-10-20T06:33:21+03:00","updated":"2026-10-20T06:33:21+03:00","title":"SGB TR-26-1359: MISP Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1359","cve":["CVE-2026-112192","CVE-2026-112188","CVE-2026-112184","CVE-2026-112183","CVE-2026-112991"],"cvss":null,"actor":[],"sgh_url":null,"summary":"MISP'in bazı bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine dokümanları gözden geçirmelerini ve gerekli güncellemeleri yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"telecom","country":null,"sgb_id":"TR-26-1359","kev":false},{"id":"sgb:TR-26-1357","first_seen":"2026-10-20T06:27:28+03:00","updated":"2026-10-20T06:27:28+03:00","title":"SGB TR-26-1357: IBM Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"IBM Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1357","cve":["CVE-2026-8355","CVE-2026-10572","CVE-2026-10574","CVE-2026-10743","CVE-2026-11828","CVE-2026-11829","CVE-2026-11831","CVE-2026-12148","CVE-2026-12155","CVE-2026-12343","CVE-2026-12350","CVE-2026-12660","CVE-2026-12665","CVE-2026-12669","CVE-2026-12727","CVE-2026-12670","CVE-2023-38375","CVE-2026-3161","CVE-2026-3295","CVE-2026-4418","CVE-2026-1501","CVE-2026-1510","CVE-2026-3303","CVE-2026-3628","CVE-2026-4405","CVE-2026-4413","CVE-2026-6719","CVE-2026-105453","CVE-2026-107366","CVE-2026-107400","CVE-2026-109126"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Bazı IBM ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, IBM'in ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"IBM Çoklu Ürün","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1357","kev":false},{"id":"kev:CVE-2026-106931","first_seen":"2026-10-20T00:00:00+03:00","updated":"2026-10-20T00:00:00+03:00","title":"CISA KEV: EG Secure Solutions SiteGuard Server Edition (CVE-2026-106931)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106931","cve":["CVE-2026-106931"],"cvss":null,"actor":[],"sgh_url":null,"summary":"CISA, EG Secure Solutions SiteGuard Server Edition ürünündeki CVE-2026-106931 açığını 2026-10-20 tarihinde bilinen istismar edilen açıklar kataloğuna (KEV) ekledi; ABD federal kurumları için son tarih 2026-10-23.","tags":["cisa_kev","exploited_in_wild"],"entity":"EG Secure Solutions","affected_products":["SiteGuard Server Edition"],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"kev:CVE-2026-96656","first_seen":"2026-10-20T00:00:00+03:00","updated":"2026-10-20T00:00:00+03:00","title":"CISA KEV: Plex Media Server (CVE-2026-96656)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96656","cve":["CVE-2026-96656","CVE-2026-96655","CVE-2026-96654","CVE-2026-96652"],"cvss":null,"actor":[],"sgh_url":null,"summary":"CISA, Plex Media Server ürünündeki CVE-2026-96656 açığını 2026-10-20 tarihinde bilinen istismar edilen açıklar kataloğuna (KEV) ekledi; ABD federal kurumları için son tarih 2026-10-23.","tags":["cisa_kev","exploited_in_wild"],"entity":"Plex","affected_products":["Media Server"],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"kev:CVE-2026-110936","first_seen":"2026-10-20T00:00:00+03:00","updated":"2026-10-20T00:00:00+03:00","title":"CISA KEV: Siemens Software Center (CVE-2026-110936)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110936","cve":["CVE-2026-110936"],"cvss":null,"actor":[],"sgh_url":null,"summary":"CISA, Siemens Software Center ürünündeki CVE-2026-110936 açığını 2026-10-20 tarihinde bilinen istismar edilen açıklar kataloğuna (KEV) ekledi; ABD federal kurumları için son tarih 2026-11-03.","tags":["cisa_kev","exploited_in_wild"],"entity":"Siemens","affected_products":["Software Center"],"patch_status":null,"exploited":true,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":true},{"id":"canva-canny-salesforce-kurumsal-kayit-2026-10-19","first_seen":"2026-10-19T19:07:27+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Canva Üçüncü Taraf Araç Üzerinden Veri Olayını Doğruladı","category":"leak","severity":"critical","turkey_signal":true,"tr_entity":"Global+TR: Canva, Canny","status":"confirmed","source_type":"official","primary_source_url":"https://www.kvkk.gov.tr/Icerik/8961/kamuoyu-duyurusu-veri-ihlali-bildirimi-canva-pty-ltd","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/canva-canny-ucuncu-taraf-arac-salesforce-kayitlari-2026.html","summary":"Tasarım platformu Canva, ürün geri bildirimi toplamak için kullandığı üçüncü taraf araç Canny üzerinden kurumsal müşteri kayıtlarına erişildiğini doğruladı.","tags":["country:GLOBAL","sgh_published"],"entity":"Global+TR: Canva, Canny","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"nbcuniversal-veri-iddiasi-2026-10-19-c55623","first_seen":"2026-10-19T19:07:27+03:00","updated":"2026-10-21T00:44:27+03:00","title":"NBCUniversal veri ihlali iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":"NBCUniversal","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"cointracker-2-7m-veri-iddiasi-2026-10-19-39f903","first_seen":"2026-10-19T19:07:27+03:00","updated":"2026-10-21T00:44:27+03:00","title":"CoinTracker 2,7 milyon kullanıcı verisi iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":"CoinTracker 2","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"2,7 milyon kullanıcı","sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"npm-sahte-web3-hizlandirici-ai-ajan-trafigi-2026-10-19","first_seen":"2026-10-19T19:07:27+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Sahte Web3 hızlandırıcı npm paketleriyle zararlı yazılım ve AI ajan trafiği ele geçirme; ayrıca MALFEX 'imgdecode'","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/fake-web3-accelerator-uses-npm-packages.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","malware"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1356","first_seen":"2026-10-19T14:45:56+03:00","updated":"2026-10-21T00:44:27+03:00","title":"SGB TR-26-1356: CVE-2026-104935","category":"vulnerability","severity":"high","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1356","cve":["CVE-2026-104935"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ivanti-connect-secure-ayrintili-guvenlik-duyurusu-tr-26-1356-sgb.html","summary":"Ivanti, kurumların bilgi teknolojileri altyapısını yönetmeye ve korumaya yönelik yazılım ve cihazlar geliştiren bir firmadır. Firmanın Ivanti Connect Secure adlı ürünü, evden, seyahatten veya uzaktan çalışan kişilerin kurumun iç ağındaki uygulama ve kaynaklara güvenli biçimde bağlanmasını sağlayan bir uzaktan erişim çözümüdür.","tags":["cisa_kev","sgb","sgh_published","tr_official"],"entity":null,"affected_products":[],"patch_status":"available","exploited":true,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1356","kev":true},{"id":"turknet-2-8m-abone-kaydi-straz-yeniden-2026-10-18-6de7f1","first_seen":"2026-10-19T09:39:47+03:00","updated":"2026-10-21T00:44:27+03:00","title":"TurkNet'e Ait Olduğu İddia Edilen 2,8 Milyon Kayıt Yeniden Forumda","category":"leak","severity":"critical","turkey_signal":true,"tr_entity":"TurkNet","status":"claim_only","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/turknet-2-8-milyon-abone-kaydi-yeniden-forumda-iddiasi-2026.html","summary":"TurkNet abonelerine ait olduğu iddia edilen 2,8 milyondan fazla kayıt bir yeraltı forumunda yeniden paylaşıldı; satıcı ihlali 2025 yılına tarihlendiriyor.","tags":["country:TR","origin_x_tip","sgh_published"],"entity":"TurkNet","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"2,8 Milyon Kayıt","sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1355","first_seen":"2026-10-19T07:17:04+03:00","updated":"2026-10-21T00:44:27+03:00","title":"SGB TR-26-1355: Dell Alienware Command Center (AWCC","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Dell Alienware Command Center (AWCC)","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1355","cve":["CVE-2026-81452"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/dell-alienware-command-center-guvenlik-bildirimi-tr-26-1355-sgb.html","summary":"Dell Alienware Command Center (AWCC) bileşeninde güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemeleri ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Dell Alienware Command Center (AWCC)","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1355","kev":false},{"id":"sgb:TR-26-1354","first_seen":"2026-10-19T07:11:01+03:00","updated":"2026-10-22T14:35:15+03:00","title":"SGB TR-26-1354: WordPress Eklenti Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"WordPress Eklenti","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1354","cve":["CVE-2026-110253","CVE-2026-92115","CVE-2026-15222","CVE-2026-109401","CVE-2026-97640","CVE-2026-110252","CVE-2026-109193","CVE-2026-104730","CVE-2026-19798","CVE-2026-109382","CVE-2026-104755","CVE-2026-107768","CVE-2026-109388","CVE-2026-110290","CVE-2026-92553","CVE-2026-111069","CVE-2026-107770","CVE-2026-110664","CVE-2026-110701","CVE-2026-111178","CVE-2026-107646","CVE-2026-104003","CVE-2026-92766","CVE-2026-104726","CVE-2026-109224","CVE-2026-93681","CVE-2026-111311","CVE-2026-107649","CVE-2026-110703","CVE-2026-96768","CVE-2026-107648","CVE-2026-97470","CVE-2026-92798","CVE-2026-103899","CVE-2026-109989","CVE-2026-107744","CVE-2026-111726","CVE-2026-108123","CVE-2026-92978","CVE-2026-109369","CVE-2026-96660","CVE-2026-104736","CVE-2026-109368","CVE-2026-92715","CVE-2026-107752","CVE-2026-109985","CVE-2026-110268","CVE-2026-97314","CVE-2026-81344","CVE-2026-81343","CVE-2026-111862","CVE-2026-94294","CVE-2026-94272","CVE-2026-94231","CVE-2026-94230","CVE-2026-94229","CVE-2026-94228","CVE-2026-91831","CVE-2026-86791","CVE-2026-74922","CVE-2026-74921","CVE-2026-110034","CVE-2026-106010","CVE-2026-103311","CVE-2026-112826","CVE-2026-85683","CVE-2026-14556","CVE-2026-107447","CVE-2026-105256","CVE-2026-104642","CVE-2026-104641","CVE-2026-103301","CVE-2026-101138","CVE-2026-114570"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/wordpress-eklenti-guvenlik-bildirimi-tr-26-1354-sgb.html","summary":"Bazı WordPress eklentilerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"WordPress Eklenti","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"TR","sgb_id":"TR-26-1354","kev":false},{"id":"sgb:TR-26-1353","first_seen":"2026-10-19T07:07:43+03:00","updated":"2026-10-21T00:44:27+03:00","title":"SGB TR-26-1353: MariaDB Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"TR: SGB TR-26-1353 MariaDB","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1353","cve":["CVE-2026-85745","CVE-2026-85748","CVE-2026-85746","CVE-2026-92262","CVE-2026-97380","CVE-2026-85985"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/mariadb-guvenlik-zafiyeti-tr-26-1353-sgb.html","summary":"MariaDB'nin bazı versiyonlarında güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanı gözden geçirmelerini ve gerekli güncellemeleri yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"TR: SGB TR-26-1353 MariaDB","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1353","kev":false},{"id":"sgb:TR-26-1352","first_seen":"2026-10-19T07:06:19+03:00","updated":"2026-10-21T00:44:27+03:00","title":"SGB TR-26-1352: Mattermost Uygulama Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Mattermost","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1352","cve":["CVE-2026-19076","CVE-2026-18799","CVE-2026-16251","CVE-2026-18256","CVE-2026-18223","CVE-2026-18560","CVE-2026-16453","CVE-2026-19600","CVE-2026-19621","CVE-2026-19603","CVE-2026-18795","CVE-2026-19867","CVE-2026-19601","CVE-2026-18551","CVE-2026-19541"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/mattermost-guvenlik-bildirimi-tr-26-1352-sgb.html","summary":"Mattermost uygulamasında güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine zafiyetin çözümü için Mattermost tarafından yayınlanan güvenlik önerisini inceleyerek gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Mattermost","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1352","kev":false},{"id":"sgb:TR-26-1351","first_seen":"2026-10-19T07:03:30+03:00","updated":"2026-10-21T00:44:27+03:00","title":"SGB TR-26-1351: Linux Kernel Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Linux Kernel","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1351","cve":["CVE-2026-98453","CVE-2026-98434","CVE-2026-98433","CVE-2026-98654","CVE-2026-98653","CVE-2026-98652","CVE-2026-98651","CVE-2026-98650","CVE-2026-98649","CVE-2026-98648","CVE-2026-98647","CVE-2026-98646","CVE-2026-98645","CVE-2026-98644","CVE-2026-98643","CVE-2026-98642","CVE-2026-98641","CVE-2026-98640","CVE-2026-98639","CVE-2026-98638","CVE-2026-98637","CVE-2026-98636","CVE-2026-98635","CVE-2026-98634","CVE-2026-98633","CVE-2026-98632","CVE-2026-98631","CVE-2026-98630","CVE-2026-98629","CVE-2026-98628","CVE-2026-98627","CVE-2026-98626","CVE-2026-98625","CVE-2026-98624","CVE-2026-98623","CVE-2026-98622","CVE-2026-98621","CVE-2026-98620","CVE-2026-98619","CVE-2026-98618","CVE-2026-98617","CVE-2026-98616","CVE-2026-98615","CVE-2026-98614","CVE-2026-98613","CVE-2026-98612","CVE-2026-98611","CVE-2026-98610","CVE-2026-98609","CVE-2026-98608"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/linux-kernel-guvenlik-bildirimi-tr-26-1351-sgb.html","summary":"Linux Kernel seviyesindeki zafiyetler için güvenlik güncellemesi yayınlanmıştır. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güncellemeleri incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Linux Kernel","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1351","kev":false},{"id":"spk-sermaye-piyasasi-kurulu-veri-satis-iddiasi-2026-10-18","first_seen":"2026-10-18T18:33:53+03:00","updated":"2026-10-21T14:52:00+03:00","title":"SPK'ya Ait Olduğu İddia Edilen 47,4 GB Veri Satışa Çıkarıldı","category":"leak","severity":"critical","turkey_signal":true,"tr_entity":"SPK","status":"claim_only","source_type":"official","primary_source_url":"https://spk.gov.tr/hakkimizda/organizasyon/sermaye-piyasasi-kurulunun-olusumu","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/spk-sermaye-piyasasi-kurulu-veri-sizintisi-iddiasi-2026.html","summary":"Bir yeraltı forumunda SPK sunucularına ait olduğu iddia edilen 47,4 GB'lık veri 5 bin dolara satışa çıkarıldı; iddia henüz doğrulanmadı.","tags":["country:TR","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"SPK","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"47,4 GB","sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"hollys-uyelik-sistemi-kisisel-veri-sizintisi-2026-10-18","first_seen":"2026-10-18T15:12:00+03:00","updated":"2026-10-18T15:43:37+03:00","title":"Kahve Zinciri Hollys'te Üyelerin Parola ve Kişisel Verileri Sızdı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.mk.co.kr/news/it/12179081","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/hollys-coffee-uyelik-sistemi-kisisel-veri-sizintisi-2026.html","summary":"Güney Koreli kahve zinciri Hollys, üyelik sistemine yetkisiz erişimle kullanıcı adı, parola, adres ve iletişim bilgilerinin sızdığını üyelerine bildirdi.","tags":["country:KR","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"KR","sgb_id":null,"kev":false},{"id":"hsz-bw-siber-saldiri-baden-wurttemberg-yuksekokullar-2026-10-07","first_seen":"2026-10-18T15:12:00+03:00","updated":"2026-10-18T15:43:37+03:00","title":"HSZ-BW'ye Siber Saldırı: Yüksekokullarda Ödemeler ve Notlar Askıda","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://hsz-offline.de/faq","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/hsz-bw-siber-saldiri-baden-wurttemberg-yuksekokullar-2026.html","summary":"Almanya'da yüksekokullara BT hizmeti veren HSZ-BW, 7 Ekim'deki siber saldırıdan sonra sistemlerini kapattı; not, başvuru ve bazı ödeme sistemleri kapalı.","tags":["country:DE","sgh_published"],"entity":"HSZ-BW","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"DE","sgb_id":null,"kev":false},{"id":"mangopay-whenthen-627k-odeme-verisi-satis-iddiasi-2026-10-18","first_seen":"2026-10-18T12:20:00+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Lüksemburg: Mangopay / WhenThen ödeme platformunda kiracılar arası açıkla alındığı öne sürülen 627 bin kayıt satış iddiası — yeraltı forumu","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:LU","desk_skipped","origin_x_tip"],"entity":"Lüksemburg","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"627 bin kayıt","sector":"finance","country":"LU","sgb_id":null,"kev":false},{"id":"bolivya-segip-11-3m-kimlik-verisi-satis-iddiasi-2026-10-18","first_seen":"2026-10-18T09:20:00+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Bolivya ulusal kimlik kurumu SEGIP'e ait olduğu öne sürülen 11,3 milyon vatandaş verisi satış iddiası — yeraltı forumu","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:BO","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"BO","sgb_id":null,"kev":false},{"id":"more-rewards-pattison-musteri-verisi-ihlali-2026-10-18","first_seen":"2026-10-18T08:22:47+03:00","updated":"2026-10-18T08:33:42+03:00","title":"More Rewards Sadakat Programında Müşteri Verilerine Yetkisiz Erişim","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://globalnews.ca/news/12106695/more-rewards-customer-data-accessed-cybersecurity-breach-pattison/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/more-rewards-save-on-foods-musteri-verisi-ihlali-2026.html","summary":"Pattison Food Group, More Rewards veritabanına yetkisiz erişildiğini açıkladı. Üyelerin adı ve verdiyse adres, telefon, e-posta, doğum tarihi etkilendi.","tags":["country:CA","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"CA","sgb_id":null,"kev":false},{"id":"jamco-aerospace-154gb-sizinti-iddiasi-2026-10-18","first_seen":"2026-10-18T08:22:47+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Jamco Aerospace (NY, ABD Donanması tedarikçisi olarak tanıtılan) 154 GB 'full dump' sızıntı iddiası — yeraltı forumu","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"154 GB","sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"discover-tech-confiant-adfection-network-2026-10-18","first_seen":"2026-10-18T00:21:38+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Confiant: Discover-Tech Casus Yazılım Altyapısına Veri Taşıyor","category":"apt","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/discover-tech-confiant-adfection-intellexa-intelos-bindecy-2026.html","summary":"Confiant'a göre Discover-Tech günde yaklaşık 10 milyon reklamla cihaz verisi topluyor ve seçili hedefleri Candiru'ya bağlı altyapıya devrediyor.","tags":["country:IL","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"IL","sgb_id":null,"kev":false},{"id":"ulakcx-cagri-merkezi-sizinti-iddiasi-2026-10-18","first_seen":"2026-10-17T23:24:00+03:00","updated":"2026-10-21T00:44:27+03:00","title":"UlakCX için veri sızıntısı iddiası: THY ve bankaların adı geçiyor","category":"leak","severity":"critical","turkey_signal":true,"tr_entity":"UlakCX","status":"claim_only","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ulakcx-cagri-merkezi-sizinti-iddiasi-thy-bankalar-2026.html","summary":"Yeraltı forumunda Türk çağrı merkezi şirketi UlakCX'in sistemlerine girildiği öne sürüldü. İddiada THY ve bankaların adı geçiyor; iddia doğrulanmadı.","tags":["country:TR","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"UlakCX","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"TR","sgb_id":null,"kev":false},{"id":"opencode-console-ihlal-takip-2026-10-17","first_seen":"2026-10-17T22:31:00+03:00","updated":"2026-10-18T08:22:47+03:00","title":"OpenCode Console İhlali: API Anahtarları Açığa Çıkmış Olabilir","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://officechai.com/ai/opencode-discloses-security-breach-says-attackers-may-have-accessed-users-openai-anthropic-and-google-api-keys/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/opencode-console-guvenlik-ihlali-api-anahtarlari-2026.html","summary":"OpenCode, Console kullanıcılarının yüzde 1,4'ünü etkileyen bir güvenlik ihlali açıkladı; kayıtlı OpenAI ve Anthropic gibi sağlayıcı anahtarları açığa çıkmış olabilir.","tags":["origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"OpenCode Console İhlali","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"hindistan-ordu-4500-personel-veri-iddiasi-2026-10-17","first_seen":"2026-10-17T21:23:10+03:00","updated":"2026-10-17T21:23:10+03:00","title":"Yeni yeraltı forum hesabının 4.500+ Hindistan ordu personeline ait veriyi paylaştığı iddiası (, 17 Eki 2026)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:IN","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":"IN","sgb_id":null,"kev":false},{"id":"cambridge-one-cupa-ihlal-iddiasi-2026-10-17","first_seen":"2026-10-17T21:23:10+03:00","updated":"2026-10-17T21:23:10+03:00","title":"Cambridge University Press & Assessment 'Cambridge One' platformu ihlal iddiası (, 17 Eki 2026)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GB","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":"GB","sgb_id":null,"kev":false},{"id":"booz-allen-scada-ai-ajan-mock-fabrika-arastirma-2026-10-17","first_seen":"2026-10-17T21:23:10+03:00","updated":"2026-10-17T21:23:10+03:00","title":"Yapay zekâ ajanlarının Booz Allen'ın deneme (mock) fabrikasında SCADA sistemine sızdığı araştırma/lab çalışması (, 17 Eki 2026)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"manufacturing","country":null,"sgb_id":null,"kev":false},{"id":"broadcom-wps-wifi-router-hexacon-2026-10-17","first_seen":"2026-10-17T20:25:00+03:00","updated":"2026-10-17T20:25:00+03:00","title":"Broadcom tabanlı yönlendiricilerde WPS ayrıştırma açığı ile şifresiz Wi-Fi ele geçirme araştırması (Quentin Kaiser, Hexacon 16 Eki 2026)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sbi-375-bin-kayit-iddiasi-2026-10-17","first_seen":"2026-10-17T19:27:06+03:00","updated":"2026-10-17T19:27:06+03:00","title":"SBI Müşterilerine Ait 375 Bin Kayıt İçin Sızıntı İddiası","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sbi-375-bin-musteri-kaydi-sizinti-iddiasi-2026.html","summary":"Bir tehdit aktörü, State Bank of India'ya ait olduğunu öne sürdüğü 375 bin müşteri kaydı ve 2.722 belgeyi siber suç forumunda yayımladığını iddia etti.","tags":["country:IN","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"375 Bin Kayıt","sector":null,"country":"IN","sgb_id":null,"kev":false},{"id":"collabora-nextcloud-cve-oncesi-istismar-2026-10-17","first_seen":"2026-10-17T19:27:06+03:00","updated":"2026-10-23T22:47:00+03:00","title":"Collabora kritik açığı ile Nextcloud sunucularına CVE öncesi (10 Eyl) arka kapı/webshell","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","malware","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"britanico-peru-490bin-kayit-iddiasi-2026-10-17","first_seen":"2026-10-17T19:27:06+03:00","updated":"2026-10-17T19:27:06+03:00","title":"Británico (Asociación Cultural Peruano Británica / Británico Üniversitesi, Peru) ~490 bin kayıt ücretsiz dump iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:PE","origin_x_tip"],"entity":"Británico","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"490 bin kayıt","sector":"education","country":"PE","sgb_id":null,"kev":false},{"id":"sgh:yellow-hat-1-8-milyon-uye-verisi-sizintisi-2026","first_seen":"2026-10-17T18:29:20+03:00","updated":"2026-10-17T18:29:20+03:00","title":"Yellow Hat 1,8 Milyon Üyenin Verisinin Sızdığını Doğruladı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.nikkei.com/markets/ir/irftp/data/tdnr/tdnetg3/20261015/g6jlr0/140120261015551164.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/yellow-hat-1-8-milyon-uye-verisi-sizintisi-2026.html","summary":"Japon bakım zinciri Yellow Hat, web randevu sisteminden 1.797.124 üyenin kişisel verilerinin sızdığını açıkladı. Kredi kartı bilgileri etkilenmedi.","tags":["sgh_published"],"entity":"Yellow Hat 1","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1,8 Milyon Üyenin","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"uni-halle-51bin-basvuru-verisi-2026-10-16","first_seen":"2026-10-17T17:35:37+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Halle-Wittenberg Üniversitesine Siber Saldırı: 51 Bin Başvuru Etkilendi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.uni-halle.de/datenschutzvorfall/?lang=de","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/halle-wittenberg-universitesi-51-bin-basvuru-verisi-siber-saldiri-2026.html","summary":"Martin Luther Halle-Wittenberg Üniversitesi, BT sistemlerine yapılan saldırıda yaklaşık 51.000 öğrenci başvurusuna ait kişisel verinin çekildiğini varsayıyor.","tags":["sgh_published"],"entity":"Halle-Wittenberg Üniversitesine Siber Saldırı","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"rank-math-seo-pro-3-0-123-supply-chain-2026-10-17","first_seen":"2026-10-17T17:35:37+03:00","updated":"2026-10-17T17:35:37+03:00","title":"Rank Math SEO PRO 3.0.123 Sürümüne Zararlı Kod Yerleştirildi","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://patchstack.com/database/wordpress/plugin/seo-by-rank-math-pro/vulnerability/wordpress-rank-math-seo-pro-plugin-3-0-123-unauthenticated-embedded-malicious-code-vulnerability","cve":["CVE-2026-111862"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/rank-math-seo-pro-3-0-123-tedarik-zinciri-zararli-yazilim-2026.html","summary":"WordPress SEO eklentisi Rank Math SEO PRO 3.0.123 sürümünün bazı paketlerine zararlı kod yerleştirildi. Üretici, temiz 3.0.124 sürümünü yayımladı.","tags":["sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ekont-bg-3-2m-kurye-siparis-iddiasi-2026-10-17-ef44b5","first_seen":"2026-10-17T15:30:00+03:00","updated":"2026-10-17T15:30:00+03:00","title":"Bulgaristan kurye şirketi Ekont (ekont.bg) için ~3,2 milyon sipariş kaydı forum satış iddiası (, 17 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:BG","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"BG","sgb_id":null,"kev":false},{"id":"cellebrite-loki-apple-bootrom-hexacon-2026-10-17","first_seen":"2026-10-17T15:30:00+03:00","updated":"2026-10-18T08:22:47+03:00","title":"Cellebrite Hexacon'da LOKI adlı Apple boot ROM açığını tanıttı (iPod touch 2 – iPhone 11; , 17 Eki)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:INT","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"safe-data-storage-yedek-sunuculari-sifrelendi-2026-10-17","first_seen":"2026-10-17T11:23:10+03:00","updated":"2026-10-17T11:29:04+03:00","title":"Safe Data Storage'ın Yedek Sunucuları Siber Saldırıda Şifrelendi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://safedatastorage.co.uk/cyber-attack/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/safe-data-storage-yedek-sunuculari-sifrelendi-2026.html","summary":"İngiltere merkezli bulut yedekleme şirketi Safe Data Storage, siber saldırıda Londra ve replikasyon sunucularıyla müşteri yedeklerinin şifrelendiğini açıkladı.","tags":["country:GB","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"GB","sgb_id":null,"kev":false},{"id":"broadcom-wifi-router-acigi-belcika-proximus-orange-voo-2026-10-17","first_seen":"2026-10-17T10:35:33+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Broadcom Wi‑Fi yonga/sürücü açığı: Proximus, Orange Belgium, VOO yönlendiricileri; ~1,5 milyon Belçika cihazı açıkta, yamasız, CVE yok (araştırmacı Quentin Kaiser) — iddia/ikincil","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:BE","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"BE","sgb_id":null,"kev":false},{"id":"napoleon-perdis-retail-express-musteri-verisi-ihlali-2026-10-17","first_seen":"2026-10-17T09:28:15+03:00","updated":"2026-10-17T09:37:45+03:00","title":"Napoleon Perdis'in Kullandığı Retail Express'te 339 Bin Kayıt Etkilendi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.abc.net.au/news/2026-10-17/napoleon-perdis-cyber-attack-cosmetics-company-300000/107279426","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/napoleon-perdis-retail-express-musteri-verisi-ihlali-2026.html","summary":"Napoleon Perdis, müşteri kayıtlarını tutan Retail Express'e Kasım 2025–Haziran 2026 arasında yetkisiz erişildiğini, yaklaşık 339 bin kaydın etkilendiğini bildirdi.","tags":["country:AU","origin_x_tip","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"339 Bin Kayıt","sector":"retail","country":"AU","sgb_id":null,"kev":false},{"id":"ets-cde-kaliforniya-ogrenci-verisi-sftp-ihlali-2026-10-16","first_seen":"2026-10-17T08:23:03+03:00","updated":"2026-10-17T08:36:57+03:00","title":"ETS'nin SFTP Sunucusundan Kaliforniya Öğrenci Verileri Kopyalandı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.cde.ca.gov/nr/in/ets-notification.asp","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ets-kaliforniya-ogrenci-verisi-sftp-ihlali-2026.html","summary":"Kaliforniya'da eyalet sınavlarını yürüten ETS'nin SFTP sitesine yetkisiz erişildi; en az son üç öğretim yılında kayıtlı tüm öğrencilerin verileri kopyalandı.","tags":["country:US","sgh_published","sgh_shared_on_x"],"entity":"ETS","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"qilin-uyesi-bbc-almanya-synnovis-londra-hastane-sorusturmasi-2026-10-17","first_seen":"2026-10-17T08:23:03+03:00","updated":"2026-10-17T08:23:03+03:00","title":"BBC: Japonya'dan Almanya'ya iade edilen Qilin şüphelisi; Alman polisi 2024 Londra hastaneleri saldırısını (hasta ölümüyle bağlantılı) inceliyor, İngiliz polisi kasten olmayan öldürme davası değerlendi","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":null,"tags":["country:GB/DE","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"blockstrap-magento-cve-2026-103849-sansec-2026-10-15","first_seen":"2026-10-17T08:23:03+03:00","updated":"2026-10-17T08:23:03+03:00","title":"BlockStrap: Magento'da kimlik doğrulamasız kod çalıştırma (CVE-2026-103849, CVSS 10) — Sansec","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.bleepingcomputer.com/news/security/","cve":["CVE-2026-103849"],"cvss":10,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":"BlockStrap","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"keio-qilin-veri-yayimlama-iddiasi-2026-10-16","first_seen":"2026-10-17T01:50:00+03:00","updated":"2026-10-17T01:57:45+03:00","title":"Keio: Qilin'in Şirket Verilerini Yayımladığı İddiası İnceleniyor","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.keio.co.jp/news/update/news_release/news_release2026/pdf/nr20261016_newsrelease.pdf","cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":"https://siberguvenlikhaber.com/haber/keio-qilin-veri-yayimlama-iddiasi-2026.html","summary":"Tokyo demiryolu işletmecisi Keio, fidye yazılımı grubunun şirket verilerini yayımladığı iddiasını araştırıyor. Japon basını Qilin grubuna işaret ediyor.","tags":["country:JP","origin_leak_tracker","sgh_published","sgh_shared_on_x"],"entity":"Keio","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"openbsd-calif-37-yillik-paylasimli-bellek-root-istismari-2026-10-16","first_seen":"2026-10-17T01:50:00+03:00","updated":"2026-10-17T01:50:00+03:00","title":"OpenBSD 7.9: Calif araştırmacıları ~37 yıllık paylaşımlı bellek tamsayı taşması + ikinci çekirdek hatasıyla yerel root (KARL/SMAP/SMEP atlatma; tam PoC yayımlandı, OpenBSD yamayı çıkardı)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":"OpenBSD 7.9","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"guney-afrika-kahve-zinciri-vibe-coded-dashboard-ifsa-2026-10-16","first_seen":"2026-10-17T01:50:00+03:00","updated":"2026-10-17T01:50:00+03:00","title":"Güney Afrikalı kahve zincirinin CEO'su 132 mağaza için 'vibe coding' ile panel yaptı; tüm iç veriler giriş ekranının kaynak kodunda ( iddiası)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:ZA","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"retail","country":"ZA","sgb_id":null,"kev":false},{"id":"studio-design-tum-kullanicilar-bulut-yetkisiz-erisim-2026-10-16","first_seen":"2026-10-17T01:22:00+03:00","updated":"2026-10-17T01:30:15+03:00","title":"Studio'da Tüm Kullanıcı Verileri ve API Anahtarları Sızmış Olabilir","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://studio.design/ja/whats-new/unauthorized-access-2026-10","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/studio-tum-kullanicilar-veri-sizintisi-2026.html","summary":"Japon web platformu Studio'da bulut ortamına yetkisiz erişildi. Tüm kayıtlı kullanıcıların hesap bilgileri ve harici API anahtarları sızmış olabilir.","tags":["country:JP","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"Studio","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"unit42-cl-unk-1211-ai-destekli-casusluk-linux-kamu-2026-10-15","first_seen":"2026-10-17T01:22:00+03:00","updated":"2026-10-17T01:22:00+03:00","title":"Unit 42 CL-UNK-1211 — yapay zekâ ile yazılmış betiklerle kamu/devlet bağlantılı Linux sunucularına casusluk (Eki 2025–Nis 2026; sahte sudo istemi, Solarwinds.StatusLog.txt, SysGoRAT)","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://unit42.paloaltonetworks.com/ai-campaign-targets-linux-infrastructure/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"infinity-core-linux-kernel-6-hata-android-root-2026-10-16","first_seen":"2026-10-17T01:22:00+03:00","updated":"2026-10-17T01:22:00+03:00","title":"«Infinity Core» — araştırmacının açıkladığı 6 Linux çekirdek hatası (5'i çalışan root istismarı; konteyner kaçışı; Galaxy S26 Ultra sıradan uygulamadan root)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cardinal-health-67k-calisan-azure-iddiasi-2026-10-16","first_seen":"2026-10-17T00:48:48+03:00","updated":"2026-10-17T01:22:00+03:00","title":"Cardinal Health çalışan veri seti (~67 bin kayıt) Microsoft Azure'dan çalındığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"67 bin kayıt","sector":"healthcare","country":"US","sgb_id":null,"kev":false},{"id":"estore-shopserve-23-milyon-kisi-2026-10-16","first_seen":"2026-10-17T00:14:05+03:00","updated":"2026-10-17T00:21:23+03:00","title":"E-store Shopserve Sızıntısı: Yaklaşık 23,36 Milyon Kişi Etkilendi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://estore.jp/press/20261016","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/estore-shopserve-23-milyon-kisi-veri-sizintisi-2026.html","summary":"Japon e-ticaret altyapı şirketi E-store, Shopserve'den yaklaşık 23,36 milyon kişinin bilgisinin sızdığını açıkladı; 2,1 milyonunda kartın bir kısmı var.","tags":["country:JP","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"E-store Shopserve Sızıntısı","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"23,36 Milyon Kişi","sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"sgh:yamato-kuroneko-5-31-milyon-kayit-sizintisi-2026","first_seen":"2026-10-16T23:52:30+03:00","updated":"2026-10-16T23:52:30+03:00","title":"Yamato Transport: Kuroneko Hizmetinden 5,31 Milyon Kayıt Dışarı Çıkarıldı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.yamato-hd.co.jp/important/info_260929_1.html","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/yamato-kuroneko-5-31-milyon-kayit-sizintisi-2026.html","summary":"Yamato Transport, Kuroneko ertelenmiş ödeme hizmetinden yaklaşık 5,31 milyon kaydın dışarı çıkarıldığını açıkladı. Kredi kartı ve parola bilgisi yer almıyor.","tags":["sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"5,31 Milyon Kayıt","sector":"transport","country":null,"sgb_id":null,"kev":false},{"id":"via-credit-union-qilin-claim-2026-10-16-0a39e2","first_seen":"2026-10-16T22:49:06+03:00","updated":"2026-10-16T22:49:06+03:00","title":"Via Credit Union (Indiana, ABD) Qilin sızıntı sitesinde — kurum teyidi yok; ClassAction.org avukat incelemesi","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","origin_leak_tracker"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"legal","country":"US","sgb_id":null,"kev":false},{"id":"medical-data-rx-vypr-claim-law-firm-probe-2026-10-16","first_seen":"2026-10-16T22:49:06+03:00","updated":"2026-10-16T22:49:06+03:00","title":"Medical Data Rx (Technical Solutions Group, Michigan; tıbbi muayenehane BT hizmeti) Vypr listesinde (5 Eki) — Edelson Lechtzin avukat incelemesi 16 Eki","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":"Medical Data Rx","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"legal","country":"US","sgb_id":null,"kev":false},{"id":"dexcom-vishing-company-confirm-class-actions-2026-10-16","first_seen":"2026-10-16T22:18:37+03:00","updated":"2026-10-16T22:49:06+03:00","title":"Dexcom (ABD, CGM üreticisi) şirket açıklaması 10 Eki 2026: hedefli vishing sonrası bazı iç belgelerden sınırlı bilgiye yetkisiz erişim; ürün/operasyon etkisi yok; ShinyHunters (1 Eki) ve Redact (10 Ek","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.dexcom.com/en-us/cyberupdate","cve":[],"cvss":null,"actor":["ShinyHunters"],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"guam-adventist-clinic-56k-patients-breach-2026-10-16","first_seen":"2026-10-16T21:51:25+03:00","updated":"2026-10-16T22:18:37+03:00","title":"Guam Adventist Clinic veri ihlali: ~56 bin hastanın bilgileri etkilendi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GU/US","desk_skipped"],"entity":"Guam Adventist Clinic","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"tfg-london-hobbs-whistles-phase-eight-cyber-incident-2026-10-11","first_seen":"2026-10-16T21:24:18+03:00","updated":"2026-10-16T22:18:37+03:00","title":"TFG London (The Foschini Group İngiltere kolu): 11 Eki siber olay Phase Eight, Hobbs, Whistles BT sistemlerini etkiledi; 16 Eki Whistles online siparişleri durdurdu; ödeme bilgisinin risk altında oldu","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.bleepingcomputer.com/news/security/tfg-london-cyberattack-disrupts-systems-at-hobbs-and-whistles-retailers/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GB","desk_skipped"],"entity":"TFG London","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"GB","sgb_id":null,"kev":false},{"id":"aomei-backupper-unc7017-supply-chain-2026-10-16","first_seen":"2026-10-16T20:58:07+03:00","updated":"2026-10-16T21:51:25+03:00","title":"AOMEI Backupper Sunucusuna Sızıldı: Türkiye Dahil 11 Ülkeye Arka Kapı","category":"malware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://cloud.google.com/blog/topics/threat-intelligence/investigating-ephemeral-supply-chain-tampering","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/aomei-backupper-guncelleme-sunucusu-tedarik-zinciri-arka-kapi-2026.html","summary":"AOMEI Backupper güncelleme sunucuları Nisan–Temmuz 2026'da dakikalık pencerelerle değiştirilerek arka kapı dağıtıldı; Türkiye de etkilenen ülkeler arasında.","tags":["malware","sgh_published","sgh_shared_on_x"],"entity":"AOMEI Backupper Sunucusuna Sızıldı","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"nikkei-cloud-dev-1-83m-personal-data-2026-10-16","first_seen":"2026-10-16T20:58:07+03:00","updated":"2026-10-16T22:49:06+03:00","title":"Nikkei'de Bulut Hizmetine Yetkisiz Erişim: 1,83 Milyon Kayıt Sızdı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.nikkei.co.jp/nikkeiinfo/en/news/announcements/1562.html","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/nikkei-bulut-gelistirme-ortami-1-83-milyon-kisisel-veri-sizintisi-2026.html","summary":"Nikkei, sistem geliştirmede kullandığı bulut hizmetine yetkisiz erişim sonucu yaklaşık 1,83 milyon kişisel veri kaydının sızdığını 16 Ekim 2026'da duyurdu.","tags":["country:JP","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"Nikkei","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1,83 Milyon Kayıt","sector":"technology","country":"JP","sgb_id":null,"kev":false},{"id":"flink-5m-records-claim-2026-10-16-63a29c","first_seen":"2026-10-16T20:58:07+03:00","updated":"2026-10-16T22:18:37+03:00","title":"Flink (AB hızlı market teslimat) 5 milyon+ kayıt ihlali iddiası — 16 Eki; önceki 1M/LPG Group kayıtlarıyla ilişkili olabilir","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:DE","desk_skipped","origin_x_tip"],"entity":"Flink","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"5 milyon+ kayıt","sector":"retail","country":"DE","sgb_id":null,"kev":false},{"id":"conference-space-company-breach-claim-erich-2026-10-16","first_seen":"2026-10-16T20:22:39+03:00","updated":"2026-10-16T20:58:07+03:00","title":"isimsiz conference-space şirketi ihlal iddiası (Erich) — ~80–100M$ ciro, 6.027 kullanıcı, 115.948 ek; erişim hâlâ canlı iddiası ( 16 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"6.027 kullanıcı","sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"lion-air-mail-server-access-claim-800usd-2026-10-16","first_seen":"2026-10-16T20:22:39+03:00","updated":"2026-10-16T20:58:07+03:00","title":"Lion Air kurumsal e-posta sunucusu erişim satışı iddiası (800 USD) — 16 Eki; Thai Lion Air Qilin kaydından ayrı iddia","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":null,"tags":["country:ID","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"ID","sgb_id":null,"kev":false},{"id":"central-ohio-primary-care-cyberattack-2026-10-15","first_seen":"2026-10-16T19:51:23+03:00","updated":"2026-10-16T19:51:23+03:00","title":"Central Ohio Primary Care: 1,4 milyon kişinin verisi açığa çıkmış olabilir","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.copcp.com/company-news/copc-cybersecurity-information/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/central-ohio-primary-care-1-4-milyon-hasta-verisi-vishing-2026.html","summary":"Ohio merkezli sağlık grubu Central Ohio Primary Care, telefonla oltalama saldırısında 1,4 milyon kişinin verilerinin açığa çıkmış olabileceğini duyurdu.","tags":["sgh_published","sgh_shared_on_x"],"entity":"Central Ohio Primary Care","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1,4 milyon kişinin","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cast-ai-veri-sizintisi-iddiasi-20gb-2026-10-16","first_seen":"2026-10-16T19:51:23+03:00","updated":"2026-10-16T20:58:07+03:00","title":"Cast AI (Kubernetes maliyet optimizasyonu) veri sızıntısı iddiası: AWS, GCP ve GitLab yedekleri dahil ~20 GB arşiv ( 16 Eki 16:45Z)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":"Cast AI","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"20 GB","sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"apicrypt-fransa-saglik-852bin-kayit-iddiasi-2026-10-16","first_seen":"2026-10-16T19:51:23+03:00","updated":"2026-10-16T20:58:07+03:00","title":"APICRYPT (Fransa sağlık güvenli mesajlaşma) veri seti iddiası: 852.757 kayıt, 60.911 sağlık kullanıcısı ( 16 Eki 16:34Z)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","desk_skipped","origin_x_tip"],"entity":"APICRYPT","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"852.757 kayıt","sector":"healthcare","country":"FR","sgb_id":null,"kev":false},{"id":"fancl-attenir-ec-yetkisiz-erisim-834947-uye-kaydi-2026-10-16","first_seen":"2026-10-16T18:53:53+03:00","updated":"2026-10-16T19:07:17+03:00","title":"FANCL ve Attenir e-ticaret sitelerinden 835 bin üye kaydı sızdı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.fancl.jp/news/pdf/husei.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/fancl-attenir-835-bin-uye-kaydi-sizintisi-2026.html","summary":"Japonya'da FANCL ve bağlı şirketi Attenir'in e-ticaret sitelerine 3–10 Ekim'de yetkisiz erişim yapıldı, 834.947 üye kaydı sızdı. Kart bilgileri ve ana parolalar etkilenmedi.","tags":["country:JP","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"835 bin üye","sector":"retail","country":"JP","sgb_id":null,"kev":false},{"id":"magna-hospitality-385gb-claim-2026-10-15","first_seen":"2026-10-16T18:53:53+03:00","updated":"2026-10-16T18:53:53+03:00","title":"Magna Hospitality: 385 GB veri iddiası (15 Ekim 2026)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"385 GB","sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"mid-florida-dermatology-85k-hasta-ihlali-2026-10-16","first_seen":"2026-10-16T18:53:53+03:00","updated":"2026-10-18T00:48:02+03:00","title":"Mid Florida Dermatology & Plastic Surgery veri ihlali 85 bin hastayı etkiliyor (HIPAA Journal, 16 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","partially_confirmed"],"entity":"Mid Florida Dermatology & Plastic Surgery","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"bristol-ilkokul-ikinci-siber-saldiri-kayit-disari-2026-10-16","first_seen":"2026-10-16T18:53:53+03:00","updated":"2026-10-16T20:22:39+03:00","title":"Bristol'da bir ilkokul ikinci kez siber saldırıya uğradı, kayıtlar dışarı aktarıldı (Bristol24/7, 16 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:UK","desk_skipped","partially_confirmed"],"entity":"Bristol","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":"UK","sgb_id":null,"kev":false},{"id":"vanguard-14m-sms-kaydi-satis-iddiasi-threatmon-2026-10-16","first_seen":"2026-10-16T18:53:53+03:00","updated":"2026-10-16T20:22:39+03:00","title":"ThreatMon: yeraltı forumunda investor.vanguard.com ile ilişkilendirilen '+14M' SMS kaydı veritabanı iddiası (16 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","origin_x_tip"],"entity":"ThreatMon","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"lion-air-mail-sunucusu-erisim-satisi-iddiasi-2026-10-16","first_seen":"2026-10-16T18:53:53+03:00","updated":"2026-10-16T18:53:53+03:00","title":"ThreatMon: Endonezya Lion Air kurumsal e-posta altyapısına erişimin 800 $'a satıldığı iddiası (16 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:ID","desk_skipped","origin_x_tip"],"entity":"ThreatMon","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"ID","sgb_id":null,"kev":false},{"id":"vicente-lopez-belediyesi-903bin-kayit-sizinti-iddiasi-2026-10-16","first_seen":"2026-10-16T18:53:53+03:00","updated":"2026-10-16T20:22:39+03:00","title":"Arjantin Vicente López Belediyesi'ne ait ~903 bin kaydın 'cantpwn' tarafından ücretsiz yayımlandığı iddiası (16 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:AR","desk_skipped","origin_x_tip"],"entity":"Arjantin Vicente López Belediyesi","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":"AR","sgb_id":null,"kev":false},{"id":"tencent-ai-ajan-filosu-amap-acik-web-swarmchase-2026-10-16","first_seen":"2026-10-16T18:53:53+03:00","updated":"2026-10-16T18:53:53+03:00","title":"swarmcha.se: Tencent bulutunda çalışan AI ajan filosu Amap sorusunda engellenince sızmış Amap anahtarları kullandı, Alibaba ön-üretim sunucularını yokladı (araştırma, 28 Eyl–8 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://swarmcha.se/posts/chinese-agent-fleet-full-report","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CN","origin_x_tip","partially_confirmed"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"manufacturing","country":"CN","sgb_id":null,"kev":false},{"id":"ledger-wallet-zero-day-satis-iddiasi-2026-10-16-bc1861","first_seen":"2026-10-16T18:24:22+03:00","updated":"2026-10-16T18:24:22+03:00","title":"'work159' Ledger Wallet masaüstü (Win/macOS) için kurtarma bilgisini çaldığını iddia ettiği zero-day'i 2.000 $'a satıyor (16 Eki iddia)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"wasabi-switch-yetkisiz-erisim-siparis-verisi-2026-10-16","first_seen":"2026-10-16T17:51:27+03:00","updated":"2026-10-16T19:26:19+03:00","title":"WASABI SWITCH'e Yetkisiz Erişim: Sipariş Verileri Sahte İade E-postalarında","category":"fraud","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://wasabi-inc.biz/help/news/20261016-01/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/wasabi-switch-siber-saldiri-siparis-verisi-sizintisi-2026.html","summary":"WASABI SWITCH sistemine yetkisiz erişim sağlandı; sızan sipariş verileri alıcılara LINE üzerinden sahte iade e-postası göndermek için kullanıldı.","tags":["country:JP","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"maruki-medical-cyberattack-order-stop-2026-10-15","first_seen":"2026-10-16T17:24:01+03:00","updated":"2026-10-16T17:51:27+03:00","title":"丸木医科器械 (Maruki Medical Instruments): siber saldırı — sipariş/sevkiyat durdu (15 Eki resmi)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://maruki-ms.co.jp/archives/8405","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:JP","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"triglav-serbia-525k-claim-2026-10-16-d99fe8","first_seen":"2026-10-16T17:24:01+03:00","updated":"2026-10-16T17:24:01+03:00","title":"Triglav Serbia ~525K müşteri kaydı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:RS","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"525K müşteri","sector":null,"country":"RS","sgb_id":null,"kev":false},{"id":"ntt-solmare-comic-seima-uye-verisi-sizintisi-2026-10-16","first_seen":"2026-10-16T16:50:26+03:00","updated":"2026-10-17T01:22:00+03:00","title":"NTT Solmare Comic Seima Üye Verisi Sızıntısını Doğruladı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.nttsolmare.com/press/2026/1016.html","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ntt-solmare-comic-seima-uye-verisi-sizintisi-2026.html","summary":"NTT Solmare Comic Seima e-kitap mağazasında yetkisiz erişim sonrası üye verisi sızıntısını doğruladı. E-posta ve hash’li parola etkilendi; adet incelemede.","tags":["country:JP","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"romania-central-depository-borsa-sistemi-siber-2026-10-16","first_seen":"2026-10-16T16:50:26+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Romanya Depozitarul Central'de Yatırımcı Verileri Görüntülendi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.roclear.ro/AppFiles/Default/Comunicatdepresa_DepozitarulCentralataccibernetic.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/romanya-merkezi-saklama-kurulusu-yatirimci-verisi-siber-saldiri-2026.html","summary":"Romanya Merkezi Saklama Kuruluşu Depozitarul Central siber saldırıya uğradı. Yatırımcıların kimlik ve IBAN bilgileri görüntülendi, takas işlemleri etkilenmedi.","tags":["country:RO","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"RO","sgb_id":null,"kev":false},{"id":"monst3r-ai-bitsight-stolen-api-keys-2026-10-16","first_seen":"2026-10-16T16:50:26+03:00","updated":"2026-10-16T20:22:39+03:00","title":"Bitsight: MONST3R-AI — çalıntı OpenAI/Anthropic/Google API anahtarıyla satılan otonom hacking ajanı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:INTL","origin_x_tip","partially_confirmed"],"entity":"Bitsight","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"mymichigan-health-cyberattack-claims-2026-10-16","first_seen":"2026-10-16T16:50:26+03:00","updated":"2026-10-16T17:24:01+03:00","title":"MyMichigan Health: siber saldırı iddialarını inceliyor (WSGW)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","partially_confirmed"],"entity":"MyMichigan Health","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"US","sgb_id":null,"kev":false},{"id":"ransomware-physical-violence-threats-semperis-2026-10-16","first_seen":"2026-10-16T16:22:05+03:00","updated":"2026-10-16T17:24:01+03:00","title":"Fidye çeteleri fiziksel şiddet tehdidi taktiği","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.darkreading.com/cybersecurity-analytics/ransomware-gangs-physical-threats-family-stalking","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:INTL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"transport","country":null,"sgb_id":null,"kev":false},{"id":"fehmarnbelt-flc-siber-saldiri-2026-10-12","first_seen":"2026-10-16T15:55:00+03:00","updated":"2026-10-16T17:24:01+03:00","title":"Fehmarnbelt Tüneli Yüklenicisine Siber Saldırı: İş Kısmen Başladı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://femern.com/press/news/contractor-on-the-fehmarnbelt-project-resumes-work-after-cyberattack/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/fehmarnbelt-tunel-flc-siber-saldiri-2026.html","summary":"Fehmarnbelt tünelinin ana yüklenicisi FLC siber saldırıya uğradı. Femern A/S, şantiyede çalışmanın kademeli olarak yeniden başladığını açıkladı.","tags":["country:DK/DE","sgh_published","sgh_shared_on_x"],"entity":"Fehmarnbelt Tüneli Yüklenicisine Siber Saldırı","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"baydoner-1-3m-musteri-db-iddiasi-2026-10-16-c1b89a","first_seen":"2026-10-16T15:55:00+03:00","updated":"2026-10-17T00:50:14+03:00","title":"Baydöner müşteri veritabanı (1,3M kayıt, 2026) yeraltı forumunda satışa çıkarıldı iddiası","category":"leak","severity":"critical","turkey_signal":true,"tr_entity":"Baydöner","status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:TR","origin_x_tip"],"entity":"Baydöner","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1,3M kayıt","sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"quartzline-expel-chrome-history-backdoor-2026-10-15","first_seen":"2026-10-16T15:20:38+03:00","updated":"2026-10-16T16:50:26+03:00","title":"QuartzLine: Expel raporunda Chrome geçmişi sızdırma + takipçi backdoor (15–16 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","malware","origin_x_tip"],"entity":"QuartzLine","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"poole-group-lockbit5-au-muhasebe-2026-10-16","first_seen":"2026-10-16T14:19:23+03:00","updated":"2026-10-16T18:53:53+03:00","title":"Poole Group (AU muhasebe) LockBit5 listesi — şirket IT olayı doğruladı, OAIC/ACSC/ATO bilgilendirildi (Cyber Daily 16 Eki)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["LockBit"],"sgh_url":null,"summary":"LockBit fidye yazılımı grubu, Poole Group kurumunu kurbanları arasında listelediğini iddia ediyor; iddia bağımsız olarak doğrulanmadı.","tags":["country:AU","desk_skipped","origin_leak_tracker","partially_confirmed"],"entity":"Poole Group","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"AU","sgb_id":null,"kev":false},{"id":"n0n-evolution-spine-all-labs-iddiasi-2026-10-16","first_seen":"2026-10-16T14:19:23+03:00","updated":"2026-10-16T15:20:38+03:00","title":"n0n, Evolution Spine / All Labs (TX spinal implant) sızıntısı iddiası (Pulse/Kalir 16 Eki)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["N0n"],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"calif-hexacon-iphone-18-pro-jailbreak-iddiasi-2026-10-16","first_seen":"2026-10-16T13:47:03+03:00","updated":"2026-10-16T20:22:39+03:00","title":"Calif (Hexacon): iPhone 18 Pro / iOS 27.0.1 untethered jailbreak demo iddiası","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR/US","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"notebooksbilliger-siber-saldiri-musteri-iban-2026-10-14","first_seen":"2026-10-16T13:24:06+03:00","updated":"2026-10-16T13:47:03+03:00","title":"notebooksbilliger.de Siber Saldırıya Uğradı: IBAN Etkilenebilir","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.computerbase.de/news/wirtschaft/cyberangriff-notebooksbilliger-warnt-vor-moeglichem-datenleck.99833/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/notebooksbilliger-siber-saldiri-musteri-verisi-iban-2026.html","summary":"Alman perakendeci notebooksbilliger.de, BT sistemlerine siber saldırı düzenlendiğini açıkladı. E-posta adresleri etkilendi; ad, adres ve IBAN etkilenmiş olabilir.","tags":["country:DE","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"DE","sgb_id":null,"kev":false},{"id":"beauty-garage-ec-775725-sizinti-2026-10-15","first_seen":"2026-10-16T12:51:58+03:00","updated":"2026-10-16T13:38:04+03:00","title":"Beauty Garage EC sızıntısı: 775.725 müşteri kaydı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.beautygarage.jp/topics/news_unauthorizedaccess2026","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/beauty-garage-ec-site-775-bin-musteri-veri-sizintisi-2026.html","summary":"Beauty Garage, 15 Ekim 2026’da EC sitelerine izinsiz erişimle 775.725 müşteri kaydının sızdığını açıkladı. Adres ve kartta şirket bulgu olmadığını söylüyor.","tags":["country:JP","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"Beauty Garage EC","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"775.725 müşteri","sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"chatgpt-github-connector-vuln-watch-2026-10-16","first_seen":"2026-10-16T12:51:58+03:00","updated":"2026-10-16T20:22:39+03:00","title":"ChatGPT GitHub connector / ilgili zafiyet iddiası","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"thn-peerstitch-fortios-vpn-2026-10-16","first_seen":"2026-10-16T12:51:58+03:00","updated":"2026-10-16T15:20:38+03:00","title":"PEERSTITCH malware FortiOS zafiyetiyle tagged VPN oturumlarında kontrolleri aşıyor (16 Eki)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","malware"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"n0n-38-denizcilik-firmasi-14m-dolar-tehdit-2026-10-16","first_seen":"2026-10-16T12:28:01+03:00","updated":"2026-10-16T18:53:53+03:00","title":"n0n grubu 38 denizcilik firmasını tehdit etti, 14 milyon dolar talep (tech-insider.org, ikincil)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["N0n"],"sgh_url":null,"summary":null,"tags":["country:INT"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"manomano-178k-siparis-kaydi-iddiasi-2026-10-16","first_seen":"2026-10-16T12:01:54+03:00","updated":"2026-10-16T15:20:38+03:00","title":"ManoMano (Fransa) ~178 bin müşteri sipariş kaydı forumda yayımlandı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","desk_skipped","origin_x_tip"],"entity":"ManoMano","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"178 bin müşteri","sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"fish-audio-drama-3-tts-2026-10-16","first_seen":"2026-10-16T10:55:36+03:00","updated":"2026-10-16T15:20:38+03:00","title":"Fish Audio Drama 3 açık kaynak TTS modeli","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CN","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"CN","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1350","first_seen":"2026-10-16T10:14:36+03:00","updated":"2026-10-16T13:47:03+03:00","title":"SGB TR-26-1350: CVE-2026-87902","category":"vulnerability","severity":"high","turkey_signal":true,"tr_entity":"SGB WordPress Uyarısı","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1350","cve":["CVE-2026-87902"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/wordpress-core-ayrintili-guvenlik-duyurusu-tr-26-1350-sgb.html","summary":"WordPress; blog, haber sitesi, kurumsal internet sitesi ve çevrim içi mağaza gibi internet sitelerinin oluşturulmasını ve yönetilmesini sağlayan bir yazılımdır. Site sahipleri WordPress sayesinde her sayfayı baştan programlamak zorunda kalmadan yazı yayımlayabilmekte, görsel ekleyebilmekte ve site içeriğini güncelleyebilmektedir.","tags":["cisa_kev","sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"SGB WordPress Uyarısı","affected_products":[],"patch_status":"available","exploited":true,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1350","kev":true},{"id":"sgb:TR-26-1349","first_seen":"2026-10-16T08:36:54+03:00","updated":"2026-10-16T12:14:37+03:00","title":"SGB TR-26-1349: SFM Yazılım - Costifier Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"SFM Yazılım Teknolojileri A.Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1349","cve":["CVE-2026-15219","CVE-2026-15575"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sfm-yazilim-costifier-guvenlik-bildirimi-tr-26-1349-sgb.html","summary":"SFM Yazılım Teknolojileri A.Ş. tarafından geliştirilen Costifier ürününde zafiyetler tespit edilmiştir. Siber Güvenlik Başkanlığı, üretici tarafından ilgili zafiyetlerin giderilmemesinden dolayı Costifier ürününü kullananlara muadil başka bir ürün kullanmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"SFM Yazılım Teknolojileri A.Ş.","affected_products":["Costifier"],"patch_status":"not_available","exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1349","kev":false},{"id":"sgb:TR-26-1348","first_seen":"2026-10-16T08:07:57+03:00","updated":"2026-10-16T12:14:09+03:00","title":"SGB TR-26-1348: İKAS Teknoloji - ikas E-Ticaret Altyapısı Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"İKAS Teknoloji A.Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1348","cve":["CVE-2026-14177"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ikas-e-ticaret-altyapisi-guvenlik-bildirimi-tr-26-1348-sgb.html","summary":"İKAS Teknoloji A.Ş. tarafından geliştirilen ikas E-Ticaret Altyapısı ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 13.07.2026 tarihli sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"İKAS Teknoloji A.Ş.","affected_products":["ikas E-Ticaret Altyapısı"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"retail","country":"TR","sgb_id":"TR-26-1348","kev":false},{"id":"hm-greyorange-iddia-2026","first_seen":"2026-10-16T07:19:05+03:00","updated":"2026-10-16T07:19:05+03:00","title":"H&M Siber Saldırı İddiasını İnceliyor: İzler Depo Tedarikçisinde","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/hm-siber-saldiri-iddiasi-greyorange-tedarikci-2026.html","summary":"H&M, siber saldırı iddialarını incelediğini ve veri ortamında ihlal işareti bulmadığını açıkladı. Sızdırma tehdidindeki örnekler GreyOrange'a uzanıyor.","tags":["country:SE","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"SE","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1347","first_seen":"2026-10-16T07:17:37+03:00","updated":"2026-10-16T11:10:19+03:00","title":"SGB TR-26-1347: Mitsubishi Electric Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Mitsubishi Electric","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1347","cve":["CVE-2026-16438","CVE-2026-16437","CVE-2026-16436"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/mitsubishi-electric-guvenlik-bildirimi-tr-26-1347-sgb.html","summary":"Mitsubishi Electric ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güvenlik önerilerini incelemelerini ve gerekli önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Mitsubishi Electric","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1347","kev":false},{"id":"sgb:TR-26-1346","first_seen":"2026-10-16T07:14:17+03:00","updated":"2026-10-16T11:10:19+03:00","title":"SGB TR-26-1346: Lenovo Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Lenovo Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1346","cve":["CVE-2026-92629","CVE-2026-92777","CVE-2026-89062","CVE-2026-89057","CVE-2026-75941","CVE-2026-16755","CVE-2026-16754"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/lenovo-coklu-urun-guvenlik-bildirimi-tr-26-1346-sgb.html","summary":"Lenovo'nun bazı yazılımlarında güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine ilgili dokümanları incelemelerini ve güncellemelerini ivedilikle yapmalarını önermektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Lenovo Çoklu Ürün","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1346","kev":false},{"id":"sgb:TR-26-1345","first_seen":"2026-10-16T07:10:51+03:00","updated":"2026-10-16T10:38:37+03:00","title":"SGB TR-26-1345: Frappe Framework/HRMS Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1345","cve":["CVE-2026-111389","CVE-2026-111388"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/frappe-framework-hrms-guvenlik-zafiyeti-tr-26-1345-sgb.html","summary":"Frappe Framework ve HRMS'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bültenini incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1345","kev":false},{"id":"sgb:TR-26-1344","first_seen":"2026-10-16T07:06:27+03:00","updated":"2026-10-16T10:44:36+03:00","title":"SGB TR-26-1344: QNAP Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"QNAP Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1344","cve":["CVE-2026-50619","CVE-2026-53882","CVE-2026-50612","CVE-2026-47790","CVE-2026-47786","CVE-2026-44084","CVE-2026-41545","CVE-2026-41541","CVE-2026-39997","CVE-2026-39991","CVE-2026-39989","CVE-2026-34015","CVE-2026-34014","CVE-2026-34009","CVE-2026-34008","CVE-2026-34007","CVE-2026-34006","CVE-2026-26245","CVE-2026-26244","CVE-2026-26243"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/qnap-coklu-urun-guvenlik-bildirimi-tr-26-1344-sgb.html","summary":"Bazı QNAP yazılımlarında güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine dokümanını gözden geçirmelerini ve gerekli güncellemelerin yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"QNAP Çoklu Ürün","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1344","kev":false},{"id":"sgb:TR-26-1343","first_seen":"2026-10-16T07:03:19+03:00","updated":"2026-10-16T10:38:08+03:00","title":"SGB TR-26-1343: OPNsense Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1343","cve":["CVE-2026-71490","CVE-2026-63442","CVE-2026-58390","CVE-2026-58394","CVE-2026-58392","CVE-2026-58395","CVE-2026-58393"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/opnsense-guvenlik-zafiyeti-tr-26-1343-sgb.html","summary":"OPNsense yazılımında güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine dokümanını gözden geçirmelerini ve gerekli güncellemelerin yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1343","kev":false},{"id":"sgb:TR-26-1342","first_seen":"2026-10-16T07:01:58+03:00","updated":"2026-10-16T10:37:38+03:00","title":"SGB TR-26-1342: Google Chrome Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Google Chrome","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1342","cve":["CVE-2026-110914","CVE-2026-110915","CVE-2026-110916","CVE-2026-110920","CVE-2026-110921","CVE-2026-110917","CVE-2026-110918","CVE-2026-110919","CVE-2026-110913","CVE-2026-110922"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/google-chrome-guvenlik-bildirimi-tr-26-1342-sgb.html","summary":"Google Chrome yazılımında tespit edilen güvenlik zafiyetleri için güncelleme yayınlanmıştır. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine Google tarafından yayınlanan dokümanları incelemeleri ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Google Chrome","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1342","kev":false},{"id":"sgb:TR-26-1341","first_seen":"2026-10-16T07:00:28+03:00","updated":"2026-10-16T10:37:09+03:00","title":"SGB TR-26-1341: Progress Software Kendo UI Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Progress Software Kendo UI","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1341","cve":["CVE-2026-106163","CVE-2026-106148","CVE-2026-106147","CVE-2026-106161","CVE-2026-106160","CVE-2026-106159","CVE-2026-106158","CVE-2026-106157","CVE-2026-106162"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/progress-kendo-ui-guvenlik-bildirimi-tr-26-1341-sgb.html","summary":"Progress Software Kendo UI ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili dokümanın gözden geçirilmesi ve gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Progress Software Kendo UI","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1341","kev":false},{"id":"zeabur-unauthorized-access-infrastructure-2026-10-15","first_seen":"2026-10-16T06:47:56+03:00","updated":"2026-10-16T08:22:42+03:00","title":"Zeabur Altyapısına ve Kullanıcı Verilerine Yetkisiz Erişim","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://status.zeabur.com/incident/1091243","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/zeabur-yetkisiz-erisim-altyapi-kullanici-verisi-2026.html","summary":"Bulut platformu Zeabur, altyapısına ve kullanıcı verilerine yetkisiz erişim sağlandığını duyurdu. Ortam değişkenleri ve API belirteçleri açığa çıktı.","tags":["country:TW?","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"access-ap-taiwan-cros-155-bin-musteri-veri-sizintisi-2026","first_seen":"2026-10-16T05:47:15+03:00","updated":"2026-10-16T18:17:39+03:00","title":"ACCESS: AP Taiwan CROS'ta 155 Bin Müşteri Kimliği Sızdı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.access-company.com/wp-content/blogs.dir/2/files/sites/3/2026/10/td261015.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/access-ap-taiwan-cros-155-bin-musteri-veri-sizintisi-2026.html","summary":"ACCESS CO., LTD., AP Taiwan'ın CROS e-ticaret destek hizmetinde 155.280 müşteri kimliği ve 1.305 hesaba ait kart bilgisinin sızdığını açıkladı.","tags":["country:JP/TW","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"ACCESS","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"155 Bin Müşteri","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"vercel-pwnescape-ai-bounty-50k-yibelo-2026-10-16","first_seen":"2026-10-16T05:47:15+03:00","updated":"2026-10-16T15:20:38+03:00","title":"Vercel üretim sandbox bellek sızıntısı için 50 bin USD ödül; Paulos Yibelo / PwnEscape (CVE-2026-99999 lab) — AI destekli bounty","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-99999"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:INTL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"manufacturing","country":null,"sgb_id":null,"kev":false},{"id":"ingka-group-github-50gb-claim-0xrune-2026-10-15","first_seen":"2026-10-16T00:53:08+03:00","updated":"2026-10-16T15:20:38+03:00","title":"Ingka Group (IKEA perakende) GitHub depolarından ~50 GB veri sızıntısı iddiası (aktör 0xRune)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:NL","origin_x_tip"],"entity":"Ingka Group","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"50 GB","sector":"retail","country":"NL","sgb_id":null,"kev":false},{"id":"pakistan-pnra-internal-docs-leak-claim-2026-10-15-136f2f","first_seen":"2026-10-16T00:53:08+03:00","updated":"2026-10-16T08:15:00+03:00","title":"Pakistan Nükleer Düzenleme Kurumu (PNRA) iç belgeleri sızdırıldığı iddiası (forum)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:PK","desk_skipped","origin_x_tip"],"entity":"Pakistan Nükleer Düzenleme Kurumu","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"PK","sgb_id":null,"kev":false},{"id":"ibrahim-kahveci-hesabi-kripto-dolandiriciligi-2026-10-15-db851e","first_seen":"2026-10-16T00:16:00+03:00","updated":"2026-10-16T00:53:08+03:00","title":"İbrahim Kahveci'nin X hesabından yüzlerce sahte kripto paylaşımı","category":"fraud","severity":"critical","turkey_signal":true,"tr_entity":null,"status":"unverified","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ibrahim-kahveci-x-hesabi-kripto-dolandiriciligi-paylasimlari-2026.html","summary":"İbrahim Kahveci'nin X hesabından 15 Ekim gecesi 409 sahte kripto paylaşımı yapıldı. Gazeteci Yavuz Değirmenci, Kahveci'nin \"Hesabım hacklendi\" dediğini aktardı.","tags":["country:TR","origin_x_tip","partially_confirmed","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"iran-international-muhabir-is-hesabi-ele-gecirildi-2026-10-15","first_seen":"2026-10-16T00:16:00+03:00","updated":"2026-10-16T10:55:36+03:00","title":"Iran International: muhabirin iş hesabına 10 Eki'de yetkisiz erişim; saldırgan saygın düşünce kuruluşu temsilcisi gibi online toplantıya davet etti (resmi açıklama 15 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.iranintl.com/en/202610152212","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:INTL","desk_skipped"],"entity":"Iran International","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sinaloa-mexico-gov-1m-claim-2026-10-16-38db8e","first_seen":"2026-10-16T00:00:00+03:00","updated":"2026-10-16T08:48:00+03:00","title":"Meksika Sinaloa eyalet hükümeti veritabanı ~1M vatandaş kaydı sızıntısı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:MX","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"MX","sgb_id":null,"kev":false},{"id":"kev:CVE-2025-61624","first_seen":"2026-10-16T00:00:00+03:00","updated":"2026-10-16T00:00:00+03:00","title":"CISA KEV: Fortinet Multiple Products (CVE-2025-61624)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61624","cve":["CVE-2025-61624"],"cvss":null,"actor":[],"sgh_url":null,"summary":"CISA, Fortinet Multiple Products ürünündeki CVE-2025-61624 açığını 2026-10-16 tarihinde bilinen istismar edilen açıklar kataloğuna (KEV) ekledi; ABD federal kurumları için son tarih 2026-10-19.","tags":["cisa_kev","exploited_in_wild"],"entity":"Fortinet","affected_products":["Multiple Products"],"patch_status":null,"exploited":true,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":true},{"id":"jpcert-ai-destekli-api-saldirilari-apk-2026-10-15","first_seen":"2026-10-15T23:51:00+03:00","updated":"2026-10-16T13:47:03+03:00","title":"JPCERT/CC: Japonya'daki ardışık veri sızıntılarında saldırganlar AI ile bilinen açık taraması ve API saldırısı yaptı (APK analizi, SSRF; Japonya dışı servisler de hedef)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://blogs.jpcert.or.jp/ja/2026/10/web_api_attacks.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:JP","origin_x_tip"],"entity":"JPCERT/CC","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"pwnescape-linux-kernel-guest-host-bellek-2026-10-15","first_seen":"2026-10-15T23:51:00+03:00","updated":"2026-10-21T00:44:27+03:00","title":"PwnEscape: Linux çekirdeği açığı misafir VM'lerin host belleğini okumasına izin veriyor (THN)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:INTL"],"entity":"PwnEscape","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"hunter-neurology-hasta-verisi-iddiasi-2026-10-15","first_seen":"2026-10-15T20:20:00+03:00","updated":"2026-10-15T20:20:00+03:00","title":"Avustralya: Hunter Neurology hasta verisi ihlali iddialarını inceliyor (Cyber Daily özel)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:AU","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"AU","sgb_id":null,"kev":false},{"id":"abd-telekom-518k-kayit-erisim-satisi-claim-2026-10-15","first_seen":"2026-10-15T20:20:00+03:00","updated":"2026-10-15T20:20:00+03:00","title":"İsimsiz ABD telekom şirketinin 518 bin müşteri kaydı ve ağ erişimi satışa çıkarıldı iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"518 bin müşteri","sector":"telecom","country":"US","sgb_id":null,"kev":false},{"id":"help-tds-hotejka-cloudflare-pages-tech-support-scam-2026-10-15","first_seen":"2026-10-15T18:32:00+03:00","updated":"2026-10-16T17:24:01+03:00","title":"Help TDS / Hotejka: 20.000+ Cloudflare Pages alanında teknik destek dolandırıcılığı","category":"fraud","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/help-tds-linked-to-hotejka-as-20000.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"eiliko-ai-oyuncak-13m-sohbet-cocuk-profil-2026-10-15","first_seen":"2026-10-15T18:04:19+03:00","updated":"2026-10-17T08:23:03+03:00","title":"The Verge: Eiliko AI oyuncağın sunucularında 13 milyon sohbet ve çocuk profilleri açıkta","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/eiliko-ai-oyuncak-13-milyon-sohbet-cocuk-verisi-2026.html","summary":"The Verge yazdı: Eiliko AI oyuncağın Çin’deki Energize Lab sunucularında ~13 milyon sohbet ve 31 binden fazla çocuk profili korumasız bulundu; şirket yanıt vermedi.","tags":["country:US","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"reklamla-zero-click-paralı-casus-yazilim-2026-10-15","first_seen":"2026-10-15T18:04:19+03:00","updated":"2026-10-15T18:32:00+03:00","title":"İlk kez hedefli reklamla dağıtılan zero-click paralı casus yazılım iddiası","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"nba-instagram-ele-gecirme-memecoin-2026-10-15","first_seen":"2026-10-15T14:55:00+03:00","updated":"2026-10-15T14:55:00+03:00","title":"NBA resmi Instagram hesabı ele geçirildi, '$NBA' memecoin tanıtımı (silinen gönderi); yıl içinde ikinci olay","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"ingiltere-laa-1978-kayit-250bin-2007-oncesi-2026-10-14","first_seen":"2026-10-15T14:24:00+03:00","updated":"2026-10-16T19:51:23+03:00","title":"İngiltere Adli Yardım Ajansı: çalınan kayıtlar 1978'e uzanıyor","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.gov.uk/government/news/legal-aid-agency-cyber-security-incident-data-update-october-2026","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ingiltere-adli-yardim-ajansi-laa-1978-kayit-siber-saldiri-2026.html","summary":"İngiltere Adli Yardım Ajansı (LAA), 2025 siber saldırısında çalınan kayıtların 1978'e uzandığını açıkladı; yaklaşık 250 bin kayıt 2007 öncesine ait.","tags":["country:GB","sgh_published","sgh_shared_on_x"],"entity":"İngiltere Adli Yardım Ajansı","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"250 bin kayıt","sector":null,"country":"GB","sgb_id":null,"kev":false},{"id":"japonya-jpcert-web-veri-sizintisi-iki-kat-2026-10-15","first_seen":"2026-10-15T14:24:00+03:00","updated":"2026-10-16T12:51:58+03:00","title":"JPCERT/CC: Japonya'da web sistemlerinden kişisel veri sızıntısı olayları üç yılda iki katını aştı (2024: 62, 2025: 84; mobil API'ler, CVSS 10 açık)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":10,"actor":[],"sgh_url":null,"summary":null,"tags":["country:JP","desk_skipped","origin_x_tip"],"entity":"JPCERT/CC","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"burnaby-okul-bolgesi-siber-saldiri-2026-10-15","first_seen":"2026-10-15T13:55:00+03:00","updated":"2026-10-17T00:14:05+03:00","title":"Kanada: Burnaby okul bölgesi siber saldırısı — öğrenci/veli bilgisi ve tıbbi teşhis verisi sızmış olabilir (CBC / Canadian Press)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CA","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":"CA","sgb_id":null,"kev":false},{"id":"alibaba-qwen-n1-n1-pro-ai-gozluk-cin-2026-10-15","first_seen":"2026-10-15T11:15:50+03:00","updated":"2026-10-15T11:16:19+03:00","title":"Alibaba Qwen N1 ve N1 Pro AI Gözlüklerini Çin'de Satışa Çıkardı","category":"leak","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.yicaiglobal.com/news/alibabas-qwen-deepens-personal-agent-push-with-new-ai-glasses-earbuds","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/alibaba-qwen-n1-n1-pro-ai-gozluk-cin-2026.html","summary":"Alibaba'nın Qwen birimi, Çin'de Qwen N1 ve N1 Pro yapay zekâ gözlüklerini satışa çıkardı. Modeller 50 MP kamera ve değiştirilebilir batarya taşıyor.","tags":["sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"medley-at-link-unauthorized-access-2026-10-15-ac6fa7","first_seen":"2026-10-15T10:04:02+03:00","updated":"2026-10-15T13:21:10+03:00","title":"Medley ’e yetkisiz erişim: servisler durdu, 787 kurum üst sınır","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.release.tdnet.info/inbs/140120261014550839.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/medley-atlink-yetkisiz-erisim-787-saglik-kurumu-2026.html","summary":"Hasta verisi sızıntısı ihtimali inceleniyor; etkilenebilecek kurum sayısı en fazla 787. Hastaların kişisel bilgilerinin sızmış olma ihtimali inceleniyor; etkilenmiş olabilecek sağlık kurumu sayısı en fazla 787.","tags":["country:JP","origin_x_tip","sgh_published"],"entity":"Medley","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"unit42-peerstitch-fortigate-implant-2026-10-15-096a4b","first_seen":"2026-10-15T10:04:02+03:00","updated":"2026-10-16T15:20:38+03:00","title":"Unit 42 PEERSTITCH: FortiManager ihlali sonrası bellek içi FortiGate implantı (CL-STA-0954/UNC5820)","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["UNC5820"],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"belgium-hospital-network-access-claim-2026-10-15-fd98d2","first_seen":"2026-10-15T09:18:53+03:00","updated":"2026-10-15T09:18:53+03:00","title":"isimsiz 'major Belgian hospital network' erişim satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:BE","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"BE","sgb_id":null,"kev":false},{"id":"magick-fr-10k-claim-2026-10-14-a353dc","first_seen":"2026-10-15T09:18:53+03:00","updated":"2026-10-15T09:18:53+03:00","title":"Magick.fr (AI foto/video) ~10k kayıt — actor MrData","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","origin_x_tip"],"entity":"Magick.fr","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"10k kayıt","sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"scale-ai-github-claim-2026-10-14-254194","first_seen":"2026-10-15T09:18:53+03:00","updated":"2026-10-15T13:16:37+03:00","title":"Scale AI org GitHub repo/source iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1339","first_seen":"2026-10-15T07:13:14+03:00","updated":"2026-10-15T11:15:45+03:00","title":"SGB TR-26-1339: Netgate pfSense Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1339","cve":["CVE-2026-110908"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/netgate-pfsense-guvenlik-bildirimi-tr-26-1339-sgb.html","summary":"Netgate pfSense'de güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanları gözden geçirmelerini ve gerekli güncellemelerin yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1339","kev":false},{"id":"sgb:TR-26-1338","first_seen":"2026-10-15T07:09:06+03:00","updated":"2026-10-15T11:15:02+03:00","title":"SGB TR-26-1338: OpenSSH Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"OpenSSH","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1338","cve":["CVE-2026-110926","CVE-2026-110925","CVE-2026-110923"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/openssh-guvenlik-bildirimi-tr-26-1338-sgb.html","summary":"OpenSSH'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanları gözden geçirmelerini ve gerekli güncellemelerin yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"OpenSSH","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1338","kev":false},{"id":"sgb:TR-26-1337","first_seen":"2026-10-15T07:06:55+03:00","updated":"2026-10-15T11:14:29+03:00","title":"SGB TR-26-1337: Progress Software MOVEit Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Progress Software MOVEit","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1337","cve":["CVE-2026-89076","CVE-2026-89077"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/progress-moveit-guvenlik-bildirimi-tr-26-1337-sgb.html","summary":"Progress Software MOVEit ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili dokümanın gözden geçirilmesi ve gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Progress Software MOVEit","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":"TR-26-1337","kev":false},{"id":"sgb:TR-26-1336","first_seen":"2026-10-15T07:05:06+03:00","updated":"2026-10-15T11:13:55+03:00","title":"SGB TR-26-1336: TP-Link Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"TP-Link Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1336","cve":["CVE-2026-109506"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/tp-link-coklu-urun-guvenlik-bildirimi-tr-26-1336-sgb.html","summary":"Bazı TP-Link ürünlerinde güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"TP-Link Çoklu Ürün","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1336","kev":false},{"id":"sgb:TR-26-1334","first_seen":"2026-10-15T07:02:02+03:00","updated":"2026-10-15T11:07:37+03:00","title":"SGB TR-26-1334: Linux Kernel Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Linux Kernel","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1334","cve":["CVE-2026-98386","CVE-2026-98431","CVE-2026-98430","CVE-2026-98429","CVE-2026-98428","CVE-2026-98427","CVE-2026-98426","CVE-2026-98425","CVE-2026-98424","CVE-2026-98423","CVE-2026-98422","CVE-2026-98421","CVE-2026-98420","CVE-2026-98419","CVE-2026-98418","CVE-2026-98417","CVE-2026-98416","CVE-2026-98415","CVE-2026-98414","CVE-2026-98413","CVE-2026-98412","CVE-2026-98411","CVE-2026-98410","CVE-2026-98409","CVE-2026-98408","CVE-2026-98407","CVE-2026-98406","CVE-2026-98405","CVE-2026-98404","CVE-2026-98403","CVE-2026-98402","CVE-2026-98401","CVE-2026-98400","CVE-2026-98399","CVE-2026-98398","CVE-2026-98397","CVE-2026-98396","CVE-2026-98395","CVE-2026-98394","CVE-2026-98393","CVE-2026-98392","CVE-2026-98391","CVE-2026-98390","CVE-2026-98389","CVE-2026-98388","CVE-2026-98387"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/linux-kernel-guvenlik-bildirimi-tr-26-1334-sgb.html","summary":"Linux Kernel seviyesindeki zafiyetler için güvenlik güncellemesi yayınlanmıştır. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güncellemeleri incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Linux Kernel","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1334","kev":false},{"id":"sgb:TR-26-1333","first_seen":"2026-10-15T07:01:03+03:00","updated":"2026-10-15T11:07:00+03:00","title":"SGB TR-26-1333: Zimbra Collaboration Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Zimbra Collaboration","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1333","cve":["CVE-2026-93637","CVE-2026-93635"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/zimbra-collaboration-guvenlik-bildirimi-tr-26-1333-sgb.html","summary":"Zimbra Collaboration ürününde güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümandaki güvenlik önerilerini inceleyerek gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Zimbra Collaboration","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1333","kev":false},{"id":"sgb:TR-26-1332","first_seen":"2026-10-15T06:56:38+03:00","updated":"2026-10-15T11:06:26+03:00","title":"SGB TR-26-1332: Palo Alto Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"high","turkey_signal":true,"tr_entity":"Palo Alto Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1332","cve":["CVE-2026-0322","CVE-2026-0311","CVE-2026-0312","CVE-2026-0313","CVE-2026-0314","CVE-2026-0315","CVE-2026-0316","CVE-2026-0317","CVE-2026-0318","CVE-2026-0319"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/palo-alto-coklu-urun-guvenlik-bildirimi-tr-26-1332-sgb.html","summary":"Bazı Palo Alto ürünlerinde tespit edilen güvenlik zafiyetleri için güncelleme yayınlanmıştır. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bültenini incelemelerini ve gerekli güncellemelerin yapılmasını tavsiye etmektedir.","tags":["cisa_kev","sgb","sgh_published","tr_official"],"entity":"Palo Alto Çoklu Ürün","affected_products":[],"patch_status":"available","exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1332","kev":true},{"id":"sgb:TR-26-1331","first_seen":"2026-10-15T06:51:58+03:00","updated":"2026-10-15T11:05:50+03:00","title":"SGB TR-26-1331: SODOLA SL902-SWTGW124AS Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"SODOLA SL902 Güvenlik Bildirimi Yayımladı","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1331","cve":["CVE-2026-0993"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sodola-sl902-swtgw124as-guvenlik-zafiyeti-tr-26-1331-sgb.html","summary":"SODOLA SL902-SWTGW124AS ürününde güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"SODOLA SL902 Güvenlik Bildirimi Yayımladı","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1331","kev":false},{"id":"sgb:TR-26-1330","first_seen":"2026-10-15T06:48:23+03:00","updated":"2026-10-15T11:05:14+03:00","title":"SGB TR-26-1330: HPE NonStop Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"HPE NonStop","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1330","cve":["CVE-2026-73790","CVE-2026-73792","CVE-2026-73795","CVE-2026-76655","CVE-2026-73798","CVE-2026-73797","CVE-2026-76659","CVE-2026-76656","CVE-2026-73799","CVE-2026-76663"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/hpe-nonstop-guvenlik-bildirimi-tr-26-1330-sgb.html","summary":"HPE NonStop bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"HPE NonStop","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1330","kev":false},{"id":"sgb:TR-26-1329","first_seen":"2026-10-15T06:45:25+03:00","updated":"2026-10-15T10:17:58+03:00","title":"SGB TR-26-1329: Gitea Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"SGB Gitea","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1329","cve":["CVE-2026-25946","CVE-2026-73273","CVE-2026-73135","CVE-2026-73130","CVE-2026-73126","CVE-2026-71301","CVE-2026-71184","CVE-2026-70407","CVE-2026-70406","CVE-2026-70402","CVE-2026-70400","CVE-2026-70396","CVE-2026-68964","CVE-2026-68957","CVE-2026-67577","CVE-2026-66877","CVE-2026-66874","CVE-2026-66853","CVE-2026-66849","CVE-2026-63792","CVE-2026-63021","CVE-2026-62925","CVE-2026-60021","CVE-2026-60018","CVE-2026-60010","CVE-2026-60008","CVE-2026-59774","CVE-2026-59766"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/gitea-guvenlik-zafiyeti-tr-26-1329-sgb.html","summary":"Gitea servisinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"SGB Gitea","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1329","kev":false},{"id":"sgb:TR-26-1328","first_seen":"2026-10-15T06:44:03+03:00","updated":"2026-10-15T10:17:09+03:00","title":"SGB TR-26-1328: Juniper Networks Junos OS Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Juniper Networks Junos OS","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1328","cve":["CVE-2026-101975","CVE-2026-101984","CVE-2026-101987","CVE-2026-101988","CVE-2026-101989","CVE-2026-101990","CVE-2026-101992","CVE-2026-101993","CVE-2026-101994","CVE-2026-101996","CVE-2026-102064","CVE-2026-102066","CVE-2026-102071","CVE-2026-101950","CVE-2026-101955","CVE-2026-101997","CVE-2026-102062","CVE-2026-102078","CVE-2026-102079","CVE-2026-102080","CVE-2026-102081","CVE-2026-102082","CVE-2026-102083","CVE-2026-102084","CVE-2026-102085","CVE-2026-33803","CVE-2026-102086","CVE-2026-102087","CVE-2026-103993","CVE-2026-101991","CVE-2026-101986","CVE-2026-101951","CVE-2026-101957","CVE-2026-102065","CVE-2026-101974","CVE-2026-102067","CVE-2026-101995","CVE-2026-101948","CVE-2026-101977","CVE-2026-101956","CVE-2026-101980","CVE-2026-102069","CVE-2026-102070","CVE-2026-101973","CVE-2026-102072","CVE-2026-103994","CVE-2026-102063","CVE-2026-101965","CVE-2026-101967","CVE-2026-101954"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/juniper-networks-junos-os-guvenlik-bildirimi-tr-26-1328-sgb.html","summary":"Juniper Networks Junos OS'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güvenlik önerilerini inceleyerek gerekli önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Juniper Networks Junos OS","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1328","kev":false},{"id":"bae-systems-abd-bnc-iflas-bildirim-kesintisi-2026","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-17T08:23:03+03:00","title":"BAE Systems'teki siber olay ABD iflas bildirim sistemini (BNC) durdurdu","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.uscourts.gov/data-news/judiciary-news/2026/10/15/cybersecurity-incident-disrupting-bankruptcy-court-operations","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/bae-systems-abd-bnc-iflas-bildirim-kesintisi-2026.html","summary":"ABD Mahkemeleri İdari Ofisi, BAE Systems'teki siber güvenlik olayının iflas bildirim merkezi BNC'yi ülke genelinde durdurduğunu duyurdu.","tags":["country:US","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"BAE Systems","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"garda-hesaplari-xrp-airdrop-2026-10-15-71d304","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-16T02:45:00+03:00","title":"İrlanda polisi Garda'nın resmi X hesapları ele geçirildi: Sahte XRP dolandırıcılığı paylaşıldı","category":"fraud","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.independent.ie/irish-news/crime/gardai-confirm-hack-of-official-x-accounts-say-they-are-satisfied-there-was-no-unauthorised-access-with-any-garda-systems/a/163091868.html","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/irlanda-polisi-garda-x-hesaplari-ele-gecirildi-xrp-dolandiriciligi-2026.html","summary":"İrlanda polisi Garda'nın X hesapları 14 Ekim gecesi ele geçirildi ve sahte XRP airdrop için kullanıldı. Garda, sistemlerine sızılmadığını açıkladı.","tags":["country:IE","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"IE","sgb_id":null,"kev":false},{"id":"burger-king-japonya-bk-japan-11-milyon-uye-2026-10-15","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-16T15:55:00+03:00","title":"Burger King Japonya uygulamasından yaklaşık 11,18 milyon üye kaydı sızdı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.burgerking.co.jp/images/notice/2026/10/15/d4d114ca-ebd7-4f3d-94ef-c4ea7a84a139.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/burger-king-japonya-uygulama-11-milyon-uye-verisi-2026.html","summary":"Burger King Japonya uygulamasında sistemlere yetkisiz erişim sağlandı; ad, telefon ve doğum tarihi içeren 11,18 milyon üye kaydının sızdığı duyuruldu.","tags":["country:JP","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"11,18 milyon üye","sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"sourcenext-22m-uye-verisi-2026-10-15","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-15T19:54:02+03:00","title":"SourceNext'te 22,5 milyon üye kaydı sızdı, parolalar da kapsamda","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.itmedia.co.jp/business/articles/2610/15/news102.html","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sourcenext-japonya-22-milyon-uye-verisi-sizintisi-2026.html","summary":"Japon yazılım şirketi SourceNext, e-posta ve parola dahil yaklaşık 22,5 milyon üye kaydının sızdığını açıkladı. Kart bilgileri kapsam dışında.","tags":["country:JP","sgh_published","sgh_shared_on_x"],"entity":"SourceNext","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"22,5 milyon üye","sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"beyondtrust-remote-support-sifirinci-gun-acigi-cin-baglantili-armory-castle-2026","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-16T16:50:26+03:00","title":"BeyondTrust Remote Support'ta sıfırıncı gün açığı: Çin bağlantılı aktöre atfediliyor, yama yayımlandı","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"sgh","primary_source_url":null,"cve":["CVE-2026-102764"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/beyondtrust-remote-support-sifirinci-gun-acigi-cin-baglantili-armory-castle-2026.html","summary":"BeyondTrust, Remote Support'ta CVE-2026-102764 sıfırıncı gün açığını şüpheli Çin bağlantılı ARMORY CASTLE'a atfettiğini 15 Ekim'de açıkladı; yama 8 Ekim'de yayımlandı.","tags":["cisa_kev","country:US","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"BeyondTrust Remote Support","affected_products":[],"patch_status":"available","exploited":true,"records_claimed":null,"sector":"transport","country":"US","sgb_id":null,"kev":true},{"id":"talabat-4m-claim-2026-10-15-1a332c","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-16T20:22:39+03:00","title":"Talabat 4M+ kayıt iddiası (underground forum 15 Eki 2026)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:AE","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"4M+ kayıt","sector":null,"country":"AE","sgb_id":null,"kev":false},{"id":"fortinet-forticlient-ems-cve-2026-35616-poc-2026-10-15","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-16T15:20:38+03:00","title":"Fortinet FortiClient EMS CVE-2026-35616 PoC ( 15 Eki)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-35616"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev","country:US","origin_x_tip"],"entity":"Fortinet FortiClient EMS","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":true},{"id":"emirates-motorsports-emso-27gb-claim-2026-10-15-0019a8","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-16T08:48:00+03:00","title":"Emirates Motorsports / EMSO: 27 GB veri iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:AE","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"27 GB","sector":null,"country":"AE","sgb_id":null,"kev":false},{"id":"cisco-secure-email-gateway-0day-active-exploit-2026-10-15","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-15T21:52:45+03:00","title":"Cisco Secure Email Gateway / CES — aktif sömürü uyarıları","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-76519"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev","country:US","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":true},{"id":"ms-oct2026-patch-tuesday-1400cve-2026-10-15-a19d90","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-16T00:16:00+03:00","title":"Microsoft Ekim 2026 Patch Tuesday 1400+ CVE / CVE-2026-96951 iddiası","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-96951"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"malindo-air-passenger-db-sale-claim-2026-10-15-bfe8c9","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-15T15:50:00+03:00","title":"Malindo Air (Batik Air Malaysia) yolcu veritabanı satış iddiası — X","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:MY","origin_x_tip"],"entity":"Malindo Air","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"MY","sgb_id":null,"kev":false},{"id":"palo-alto-pan-os-cve-2026-0322-aktif-somuru-2026-10-15","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-15T15:50:00+03:00","title":"Palo Alto Networks PAN-OS CVE-2026-0322 — kimlik doğrulamalı RCE, aktif sömürü","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","cve":["CVE-2026-0322"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev","country:US"],"entity":"Palo Alto Networks PAN-OS","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":true},{"id":"matferline-spain-driving-school-db-claim-2026-10-15-6ae40a","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-15T15:50:00+03:00","title":"İspanya Matferline.com sürücü kursu platformu DB (~300K) sızıntı iddiası — X","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:ES","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"ES","sgb_id":null,"kev":false},{"id":"durango-mexico-state-gov-db-claim-2026-10-15-44e0fb","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-15T15:50:00+03:00","title":"Meksika Durango eyalet hükümeti DB (~200K vatandaş) sızıntı iddiası — X","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:MX","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"MX","sgb_id":null,"kev":false},{"id":"bernalillo-nm-cyberattack-krqe-2026-10-15","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-16T19:23:44+03:00","title":"Town of Bernalillo (NM) siber saldırı — kamu online hizmetleri kesildi (KRQE / 15 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.krqe.com/news/new-mexico/town-of-bernalillo-hit-with-cyberattack/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","origin_x_tip","partially_confirmed"],"entity":"Town of Bernalillo","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":"US","sgb_id":null,"kev":false},{"id":"cursor-spacex-ai-veri-the-information-2026-10-15","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-15T23:24:00+03:00","title":"Cursor çalışanları gizli müşteri verisinin SpaceX yapay zekâ birimine eğitim için ulaşmış olabileceğinden endişelendi; satış ekibi Verizon e-postaları ve parolayı açık koda koydu (The Information 15 E","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.theinformation.com/articles/cursor-staff-investigated-whether-confidential-data-reached-spacex-ai-training","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":"US","sgb_id":null,"kev":false},{"id":"silent-lynx-winrar-bdt-hukumet-thn-2026-10-15","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-16T08:50:00+03:00","title":"Silent Lynx, WinRAR açığıyla BDT hükümetlerine ters kabuk yerleştiriyor","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CIS"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"american-board-preventive-medicine-ssn-class-action-2026-10-15","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-16T03:48:00+03:00","title":"American Board of Preventive Medicine — SSN ifşası iddiasıyla class-action duyurusu (ClassAction.org 15 Eki; birincil kurum duyurusu bu turda okunmadı)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.classaction.org/news/american-board-of-preventive-medicine-data-breach-exposes-ssns","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":"American Board of Preventive Medicine","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"heber-city-ut-cyberattack-kutv-2026-10-15","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-17T08:23:03+03:00","title":"Heber City (Utah) sistemlerine siber saldırı / ihlal — KUTV","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":"Heber City","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"madina-foundation-pk-access-claim-2026-10-15-40213b","first_seen":"2026-10-15T00:00:00+03:00","updated":"2026-10-16T08:15:00+03:00","title":"Madina Foundation / TUF / öğretim hastanesi (Faisalabad, Pakistan) canlı erişim + ~195K kayıt satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:PK","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"195K kayıt","sector":"healthcare","country":"PK","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1327","first_seen":"2026-10-14T12:20:32+03:00","updated":"2026-10-15T04:52:00+03:00","title":"SGB TR-26-1327: TR7 Siber Savunma - TR7 ASP Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"TR7 Siber Savunma A.Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1327","cve":["CVE-2026-16741","CVE-2026-16740"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/tr7-siber-savunma-tr7-asp-guvenlik-bildirimi-tr-26-1327-sgb.html","summary":"TR7 Siber Savunma A.Ş. tarafından geliştirilen TR7 ASP ürününde zafiyetler tespit edilmiştir. Siber Güvenlik Başkanlığı; Sanal sunucu kullananlar için en az v1.0.1554.2331 sürümü ve sonrasına, Fiziksel sunucu kullananlar için en az v1.6.1554.2331 sürümü ve sonrasına, yükseltmelerini tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"TR7 Siber Savunma A.Ş.","affected_products":["TR7 ASP"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1327","kev":false},{"id":"sgb:TR-26-1326","first_seen":"2026-10-14T10:16:39+03:00","updated":"2026-10-15T07:32:12+03:00","title":"SGB TR-26-1326: CVE-2026-88771 / CVE-2026-88772 Aktif İstismar Vakası","category":"vulnerability","severity":"high","turkey_signal":true,"tr_entity":"Citrix NetScaler ADC ve Gateway","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1326","cve":["CVE-2026-88771","CVE-2026-88772","CVE-2026-88773","CVE-2026-88774","CVE-2026-88775","CVE-2026-88776","CVE-2026-88777","CVE-2026-88778"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/citrix-netscaler-adc-ve-netscaler-gateway-ayrintili-guvenlik-duyurusu-tr-26-1326-sgb.html","summary":"NetScaler, Cloud Software Group bünyesindeki Citrix tarafından sunulan bir ürün ailesidir. Bir kurum veya kuruluşun müşterilerine sunduğu internet hizmetlerinde veya çalışanlarının işyerindeki programlara evden bağlanmasında kullanılabilmektedir. Bu duyurunun konusu, bu ailedeki NetScaler ADC ve NetScaler Gateway ürünleridir.","tags":["cisa_kev","exploited_in_wild","sgb","sgh_published","tr_official"],"entity":"Citrix NetScaler ADC ve Gateway","affected_products":[],"patch_status":"available","exploited":true,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1326","kev":true},{"id":"sgb:TR-26-1325","first_seen":"2026-10-14T07:55:18+03:00","updated":"2026-10-15T07:32:12+03:00","title":"SGB TR-26-1325: Ubiquiti UniFi Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Ubiquiti UniFi","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1325","cve":["CVE-2026-110458","CVE-2026-110459"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ubiquiti-unifi-guvenlik-bildirimi-tr-26-1325-sgb.html","summary":"Ubiquiti UniFi ekosisteminin bazı bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güvenlik önerilerinin incelenmesi ve gereken önlemlerin alınması tavsiye edilmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Ubiquiti UniFi","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1325","kev":false},{"id":"sgb:TR-26-1324","first_seen":"2026-10-14T07:53:34+03:00","updated":"2026-10-15T07:32:12+03:00","title":"SGB TR-26-1324: Mozilla Firefox Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Mozilla Firefox","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1324","cve":["CVE-2026-103418","CVE-2026-103417"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/mozilla-firefox-guvenlik-bildirimi-tr-26-1324-sgb.html","summary":"Mozilla Firefox bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Mozilla Firefox","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1324","kev":false},{"id":"sgb:TR-26-1323","first_seen":"2026-10-14T07:52:17+03:00","updated":"2026-10-15T07:12:26+03:00","title":"SGB TR-26-1323: Microsoft SQL Server Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1323","cve":["CVE-2026-83945","CVE-2026-85886","CVE-2026-85876","CVE-2026-70189","CVE-2026-68883","CVE-2026-67625","CVE-2026-96956"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/microsoft-sql-server-guvenlik-zafiyeti-tr-26-1323-sgb.html","summary":"Microsoft SQL Server ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine zafiyetin çözümü için yayınlanan güvenlik önerisini inceleyerek gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1323","kev":false},{"id":"sgb:TR-26-1322","first_seen":"2026-10-14T07:49:10+03:00","updated":"2026-10-15T07:12:26+03:00","title":"SGB TR-26-1322: Ivanti Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Ivanti Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1322","cve":["CVE-2026-109412","CVE-2026-106047","CVE-2026-106043"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ivanti-coklu-urun-guvenlik-bildirimi-tr-26-1322-sgb.html","summary":"Bazı Ivanti ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güvenlik önerilerini incelemelerini ve gereken önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Ivanti Çoklu Ürün","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1322","kev":false},{"id":"sgb:TR-26-1321","first_seen":"2026-10-14T07:46:06+03:00","updated":"2026-10-15T07:12:26+03:00","title":"SGB TR-26-1321: Epic Games Unreal Engine Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1321","cve":["CVE-2026-14765"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/epic-games-unreal-engine-guvenlik-bildirimi-tr-26-1321-sgb.html","summary":"Epic Games Unreal Engine'da güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili güvenlik bülteninin incelenmesi ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1321","kev":false},{"id":"sgb:TR-26-1320","first_seen":"2026-10-14T07:31:54+03:00","updated":"2026-10-15T07:12:26+03:00","title":"SGB TR-26-1320: NetBird Client Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"NetBird Client","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1320","cve":["CVE-2026-105429"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/netbird-client-guvenlik-bildirimi-tr-26-1320-sgb.html","summary":"NetBird Client'da güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"NetBird Client","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1320","kev":false},{"id":"sgb:TR-26-1319","first_seen":"2026-10-14T07:29:52+03:00","updated":"2026-10-15T06:45:09+03:00","title":"SGB TR-26-1319: IBM WebSphere Application Server Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"IBM WebSphere Application Server","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1319","cve":["CVE-2026-77816","CVE-2026-93905","CVE-2026-93909","CVE-2026-93895","CVE-2026-95695","CVE-2026-95696","CVE-2026-101294","CVE-2026-105442","CVE-2026-105443","CVE-2026-11713","CVE-2026-14532","CVE-2026-14909"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ibm-websphere-application-server-guvenlik-bildirimi-tr-26-1319-sgb.html","summary":"IBM WebSphere Application Server'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, IBM'in ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"IBM WebSphere Application Server","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1319","kev":false},{"id":"sgb:TR-26-1318","first_seen":"2026-10-14T07:28:27+03:00","updated":"2026-10-15T06:45:09+03:00","title":"SGB TR-26-1318: Siemens Ruggedcom Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Siemens Ruggedcom","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1318","cve":["CVE-2026-89196","CVE-2026-89206","CVE-2026-89205","CVE-2026-89204","CVE-2026-89203","CVE-2026-89202","CVE-2026-89201","CVE-2026-89200","CVE-2026-89199","CVE-2026-89198","CVE-2026-89197"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/siemens-ruggedcom-guvenlik-bildirimi-tr-26-1318-sgb.html","summary":"Siemens Ruggedcom ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bildirimini incelemelerini ve gerekli güvenlik güncellemelerini yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Siemens Ruggedcom","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1318","kev":false},{"id":"sgb:TR-26-1317","first_seen":"2026-10-14T07:26:16+03:00","updated":"2026-10-15T06:45:09+03:00","title":"SGB TR-26-1317: Wazuh Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1317","cve":["CVE-2026-74031","CVE-2026-93347","CVE-2026-93346","CVE-2026-74047","CVE-2026-74045","CVE-2026-74043","CVE-2026-74041","CVE-2026-74040","CVE-2026-74037","CVE-2026-74036","CVE-2026-74035","CVE-2026-74034","CVE-2026-74033","CVE-2026-74032","CVE-2026-74030"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/wazuh-guvenlik-zafiyeti-tr-26-1317-sgb.html","summary":"Wazuh platformunda güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik önerilerini incelemelerini ve gerekli güncellemelerin yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1317","kev":false},{"id":"sgb:TR-26-1316","first_seen":"2026-10-14T07:24:44+03:00","updated":"2026-10-15T06:45:09+03:00","title":"SGB TR-26-1316: Zoom Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Zoom","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1316","cve":["CVE-2026-53420","CVE-2026-53418"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/zoom-guvenlik-bildirimi-tr-26-1316-sgb.html","summary":"Bazı Zoom bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine; Zoom tarafından yayınlanan güvenlik önerilerini incelemelerini ve yazılım güncellemelerini yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Zoom","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1316","kev":false},{"id":"sgb:TR-26-1315","first_seen":"2026-10-14T07:23:08+03:00","updated":"2026-10-15T06:03:23+03:00","title":"SGB TR-26-1315: HYPR Passwordless Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"HYPR Passwordless","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1315","cve":["CVE-2026-15468"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/hypr-passwordless-guvenlik-bildirimi-tr-26-1315-sgb.html","summary":"HYPR Passwordless yazılımlarında güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemeleri ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"HYPR Passwordless","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1315","kev":false},{"id":"sgb:TR-26-1314","first_seen":"2026-10-14T07:18:11+03:00","updated":"2026-10-15T06:03:23+03:00","title":"SGB TR-26-1314: Nix ve Lix Paket Yöneticisi Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Nix ve Lix Paket Yöneticisi","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1314","cve":["CVE-2026-110453","CVE-2026-110449","CVE-2026-110452","CVE-2026-110451","CVE-2026-110450"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/nix-ve-lix-paket-yoneticisi-guvenlik-bildirimi-tr-26-1314-sgb.html","summary":"Nix ve Lix Paket Yöneticisi yazılımlarında güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemeleri ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Nix ve Lix Paket Yöneticisi","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1314","kev":false},{"id":"sgb:TR-26-1313","first_seen":"2026-10-14T07:14:42+03:00","updated":"2026-10-15T07:56:00+03:00","title":"SGB TR-26-1313: Adobe Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1313","cve":["CVE-2026-103848","CVE-2026-95631","CVE-2026-103849","CVE-2026-92910","CVE-2026-91013","CVE-2026-92464","CVE-2026-95630","CVE-2026-92922","CVE-2026-92908","CVE-2026-92909","CVE-2026-100133","CVE-2026-92911","CVE-2026-90532","CVE-2026-90531","CVE-2026-83960","CVE-2026-83958","CVE-2026-83662","CVE-2026-75732","CVE-2026-48398","CVE-2026-48383","CVE-2026-48382","CVE-2026-110084","CVE-2026-110083","CVE-2026-110082","CVE-2026-110081","CVE-2026-110080","CVE-2026-110079","CVE-2026-110078","CVE-2026-110077","CVE-2026-110076","CVE-2026-110075","CVE-2026-110074","CVE-2026-110073","CVE-2026-110037","CVE-2026-109415","CVE-2026-107682","CVE-2026-107305","CVE-2026-106634","CVE-2026-106633","CVE-2026-106632","CVE-2026-106631","CVE-2026-106630","CVE-2026-106629","CVE-2026-106628","CVE-2026-106626","CVE-2026-105895","CVE-2026-90530","CVE-2026-96521","CVE-2026-96522","CVE-2026-83661"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/adobe-coklu-urun-guvenlik-bildirimi-tr-26-1313-sgb.html","summary":"Bazı Adobe ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bültenini incelemelerini ve gereken önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1313","kev":false},{"id":"sgb:TR-26-1312","first_seen":"2026-10-14T07:11:50+03:00","updated":"2026-10-15T06:03:23+03:00","title":"SGB TR-26-1312: Inductive Automation Ignition Perspective Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Inductive Automation Ignition Perspective","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1312","cve":["CVE-2026-92817"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/inductive-automation-ignition-perspective-guvenlik-bildirimi-tr-26-1312-sgb.html","summary":"Inductive Automation Ignition Perspective ürününde güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Inductive Automation Ignition Perspective","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1312","kev":false},{"id":"guney-kore-finans-16-kurum-100-bin-kayit-fsc-2026-10-14","first_seen":"2026-10-14T00:00:00+03:00","updated":"2026-10-15T13:53:47+03:00","title":"Güney Kore FSC: veri ihlali doğrulanan finans şirketi sayısı 16'ya çıktı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.fsc.go.kr/eng/pr010101/87928","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/guney-kore-fsc-finans-16-kurum-100-bin-kayit-2026.html","summary":"Güney Kore FSC, veri ihlali doğrulanan finans şirketi sayısının 16'ya çıktığını açıkladı. Yaklaşık 100 bin müşteri kaydı sızdı; şifre ve kart bilgisi yok.","tags":["country:KR","sgh_published"],"entity":"Güney Kore FSC","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"100 bin müşteri","sector":"finance","country":"KR","sgb_id":null,"kev":false},{"id":"drupal-sa-core-2026-014-field-ui-rce-2026-10-14","first_seen":"2026-10-14T00:00:00+03:00","updated":"2026-10-15T15:29:25+03:00","title":"Drupal Field UI'da kritik uzaktan kod çalıştırma açığı kapatıldı: SA-CORE-2026-014","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.drupal.org/sa-core-2026-014","cve":["CVE-2026-108097"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/drupal-core-field-ui-kritik-rce-sa-core-2026-014.html","summary":"Drupal, Field UI'daki kritik uzaktan kod çalıştırma açığını (CVE-2026-108097) 14 Ekim 2026'da 11.4.10, 11.3.19 ve 10.6.19 ile kapattı.","tags":["sgh_published","sgh_shared_on_x"],"entity":"Drupal Field UI","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ampath-guney-afrika-siber-saldiri-80-milyon-kayit-iddiasi-2026","first_seen":"2026-10-14T00:00:00+03:00","updated":"2026-10-16T02:45:00+03:00","title":"Ampath siber saldırıyı doğruladı, 80 milyon kayıt iddiasına itiraz etti","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://techcentral.co.za/ampath-breach-no-evidence-test-results-taken/287314/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ampath-guney-afrika-siber-saldiri-80-milyon-kayit-iddiasi-2026.html","summary":"Güney Afrikalı patoloji laboratuvarı Ampath siber saldırıyı doğruladı; ByteToBreach'in 80 milyon hasta kaydı iddiasının kişi değil veritabanı satırı olduğunu söyledi.","tags":["country:ZA","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"80 milyon kayıt","sector":null,"country":"ZA","sgb_id":null,"kev":false},{"id":"nginx-1-30-6-five-flaws-2026-10-14","first_seen":"2026-10-14T00:00:00+03:00","updated":"2026-10-21T00:44:27+03:00","title":"nginx 1.30.6 — five flaws (THN)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"nextjs-oob-rce-cache-svg-2026-10-14","first_seen":"2026-10-14T00:00:00+03:00","updated":"2026-10-16T12:51:58+03:00","title":"Next.js OOB RCE / cache SVG","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"abd-ulastirma-bakanligi-guvenlik-ajansi-cagri-merkezi-siber-2026-10-14","first_seen":"2026-10-14T00:00:00+03:00","updated":"2026-10-15T03:25:00+03:00","title":"ABD Ulaştırma Bakanlığı güvenlik ajansının iletişim merkezi siber saldırıyla aksadı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":"US","sgb_id":null,"kev":false},{"id":"azerbaycan-100-devlet-alani-saldiri-2026-10-14","first_seen":"2026-10-14T00:00:00+03:00","updated":"2026-10-16T18:53:53+03:00","title":"Azerbaycan: yabancı hackerlar 100'den fazla devlet kurumu sitesine saldırdı (Yeniavaz, Türkinform)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:AZ"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":"AZ","sgb_id":null,"kev":false},{"id":"senture-fmcsa-iletisim-merkezi-siber-saldiri-2026-10-14","first_seen":"2026-10-14T00:00:00+03:00","updated":"2026-10-15T05:20:00+03:00","title":"ABD Ulaştırma Bakanlığı FMCSA iletişim merkezi, yüklenici Senture'ye siber saldırı nedeniyle telefon desteğinde kesinti (Motus kayıt desteği); FMCSA: merkez yeniden tam çalışıyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"official","primary_source_url":"https://www.fmcsa.dot.gov/registration/registration-alerts","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","partially_confirmed"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":"US","sgb_id":null,"kev":false},{"id":"mississippi-cities-cyberattack-wlox-2026-10-14","first_seen":"2026-10-14T00:00:00+03:00","updated":"2026-10-16T04:20:00+03:00","title":"Mississippi şehirlerinde siber saldırı kaynaklı hizmet sorunları","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"kev:CVE-2026-105133","first_seen":"2026-10-14T00:00:00+03:00","updated":"2026-10-14T00:00:00+03:00","title":"CISA KEV: Ahsay AhsayCBS (CVE-2026-105133)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105133","cve":["CVE-2026-105133"],"cvss":null,"actor":[],"sgh_url":null,"summary":"CISA, Ahsay AhsayCBS ürünündeki CVE-2026-105133 açığını 2026-10-14 tarihinde bilinen istismar edilen açıklar kataloğuna (KEV) ekledi; ABD federal kurumları için son tarih 2026-10-17.","tags":["cisa_kev","exploited_in_wild"],"entity":"Ahsay","affected_products":["AhsayCBS"],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"sgb:TR-26-1310","first_seen":"2026-10-13T11:16:37+03:00","updated":"2026-10-15T04:52:00+03:00","title":"SGB TR-26-1310: AuthTake Teknoloji - authtake Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"AuthTake Teknoloji A.Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1310","cve":["CVE-2026-89279"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/authtake-teknoloji-authtake-guvenlik-bildirimi-tr-26-1310-sgb.html","summary":"AuthTake Teknoloji A.Ş. tarafından geliştirilen authtake ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az v1.4 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"AuthTake Teknoloji A.Ş.","affected_products":["authtake"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1310","kev":false},{"id":"sgb:TR-26-1309","first_seen":"2026-10-13T08:28:05+03:00","updated":"2026-10-15T04:52:00+03:00","title":"SGB TR-26-1309: Divasoft Yazılım - Biletiva Bilet Platformu Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Divasoft Yazılım ve Elektronik Ticaret A.Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1309","cve":["CVE-2026-13138"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/divasoft-yazilim-biletiva-bilet-platformu-guvenlik-bildirimi-tr-26-1309-sgb.html","summary":"Divasoft Yazılım ve Elektronik Ticaret A.Ş. tarafından geliştirilen Biletiva Bilet Platformu ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 23.07.2026 tarihli sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Divasoft Yazılım ve Elektronik Ticaret A.Ş.","affected_products":["Biletiva Bilet Platformu"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1309","kev":false},{"id":"sgb:TR-26-1308","first_seen":"2026-10-13T07:29:21+03:00","updated":"2026-10-15T05:37:06+03:00","title":"SGB TR-26-1308: Progress MarkLogic Server Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Progress MarkLogic Server","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1308","cve":["CVE-2026-85947","CVE-2026-85949","CVE-2026-85948","CVE-2026-9191","CVE-2026-85969","CVE-2026-85968","CVE-2026-85967","CVE-2026-85966","CVE-2026-85965","CVE-2026-85964","CVE-2026-85963"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/progress-marklogic-server-guvenlik-bildirimi-tr-26-1308-sgb.html","summary":"Progress MarkLogic Server ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Progress MarkLogic Server","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1308","kev":false},{"id":"sgb:TR-26-1307","first_seen":"2026-10-13T07:25:56+03:00","updated":"2026-10-15T05:37:06+03:00","title":"SGB TR-26-1307: Edimax BR-6208AC Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1307","cve":["CVE-2026-108935","CVE-2026-108916","CVE-2026-108915","CVE-2026-108936"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/edimax-br-6208ac-guvenlik-zafiyeti-tr-26-1307-sgb.html","summary":"Edimax BR-6208AC ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güncellemeleri incelemeleri ve gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1307","kev":false},{"id":"sgb:TR-26-1306","first_seen":"2026-10-13T07:23:16+03:00","updated":"2026-10-15T05:37:06+03:00","title":"SGB TR-26-1306: OTRS Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"OTRS","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1306","cve":["CVE-2026-48211","CVE-2026-93582","CVE-2026-93581","CVE-2026-78359","CVE-2026-78358","CVE-2026-78357","CVE-2026-78356","CVE-2026-78355","CVE-2026-48212"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/otrs-guvenlik-bildirimi-tr-26-1306-sgb.html","summary":"OTRS'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güvenlik önerilerini incelemelerini ve gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"OTRS","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1306","kev":false},{"id":"sgb:TR-26-1305","first_seen":"2026-10-13T07:19:39+03:00","updated":"2026-10-15T05:37:06+03:00","title":"SGB TR-26-1305: SAP Çoklu Bileşen Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"SAP Çoklu Bileşen","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1305","cve":["CVE-2026-58242","CVE-2026-89122","CVE-2026-89121","CVE-2026-89120","CVE-2026-89118","CVE-2026-89117","CVE-2026-89113","CVE-2026-89111","CVE-2026-89110","CVE-2026-89108","CVE-2026-89107","CVE-2026-89106","CVE-2026-89105","CVE-2026-76976","CVE-2026-76972","CVE-2026-58249"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sap-coklu-bilesen-guvenlik-bildirimi-tr-26-1305-sgb.html","summary":"Bazı SAP bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bültenini incelemelerini ve gereken önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"SAP Çoklu Bileşen","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1305","kev":false},{"id":"sgb:TR-26-1304","first_seen":"2026-10-13T07:14:47+03:00","updated":"2026-10-15T05:14:06+03:00","title":"SGB TR-26-1304: GitLab CE/EE Güvenlik Bildirimi","category":"vulnerability","severity":"high","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1304","cve":["CVE-2026-105458","CVE-2026-5954","CVE-2026-6567","CVE-2026-7767","CVE-2026-9268","CVE-2026-14210","CVE-2026-14552","CVE-2026-14814","CVE-2026-16275","CVE-2026-16301","CVE-2026-78335","CVE-2026-81839","CVE-2026-82632","CVE-2026-84284","CVE-2026-85529","CVE-2026-92528","CVE-2026-92883","CVE-2026-97229","CVE-2026-96893","CVE-2026-100104","CVE-2026-100755","CVE-2026-101168","CVE-2026-103549","CVE-2026-104661"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/gitlab-ce-ee-guvenlik-bildirimi-tr-26-1304-sgb.html","summary":"GitLab CE/EE'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bültenini incelemelerini ve gereken önlemleri almalarını tavsiye etmektedir.","tags":["cisa_kev","sgb","sgh_published","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1304","kev":true},{"id":"sgb:TR-26-1303","first_seen":"2026-10-13T07:12:47+03:00","updated":"2026-10-15T05:14:06+03:00","title":"SGB TR-26-1303: IBM Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"IBM Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1303","cve":["CVE-2026-96012","CVE-2026-104364","CVE-2026-104332","CVE-2026-82101","CVE-2026-82103","CVE-2026-82110","CVE-2026-82096","CVE-2026-82108","CVE-2026-84418","CVE-2026-17484","CVE-2026-17487","CVE-2026-18318","CVE-2026-18343","CVE-2026-81858","CVE-2026-93886","CVE-2026-96119"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ibm-coklu-urun-guvenlik-bildirimi-tr-26-1303-sgb.html","summary":"Bazı IBM ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, IBM'in ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"IBM Çoklu Ürün","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1303","kev":false},{"id":"sgb:TR-26-1301","first_seen":"2026-10-13T07:07:50+03:00","updated":"2026-10-15T05:14:06+03:00","title":"SGB TR-26-1301: Linksys E1700 Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1301","cve":["CVE-2026-108896","CVE-2026-108895","CVE-2026-108894","CVE-2026-108893","CVE-2026-108892"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/linksys-e1700-guvenlik-zafiyeti-tr-26-1301-sgb.html","summary":"Linksys E1700 ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanı incelemelerini ve gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":null,"affected_products":[],"patch_status":"not_available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1301","kev":false},{"id":"sgb:TR-26-1300","first_seen":"2026-10-13T07:02:56+03:00","updated":"2026-10-15T09:18:53+03:00","title":"SGB TR-26-1300: Frappe Framework Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1300","cve":["CVE-2024-58390","CVE-2026-109675","CVE-2026-109674","CVE-2026-109673","CVE-2026-109672","CVE-2026-109671","CVE-2026-109670","CVE-2026-109669","CVE-2026-109668","CVE-2026-109667","CVE-2026-109666","CVE-2026-109665","CVE-2026-109664","CVE-2026-109663","CVE-2026-109662","CVE-2026-109661","CVE-2026-109660","CVE-2026-109659","CVE-2026-109658","CVE-2026-109657","CVE-2026-109656","CVE-2026-109655","CVE-2026-109654","CVE-2026-109653","CVE-2026-109652","CVE-2026-109651","CVE-2026-109650","CVE-2026-109649","CVE-2026-109648","CVE-2026-109647","CVE-2026-109646","CVE-2026-109645","CVE-2026-109644","CVE-2026-109643","CVE-2026-109642","CVE-2026-109641","CVE-2026-109640","CVE-2026-109639","CVE-2026-109638","CVE-2026-109637","CVE-2026-109636","CVE-2026-109635","CVE-2026-109634","CVE-2026-109633","CVE-2026-109632","CVE-2026-109631","CVE-2026-109630","CVE-2026-109629","CVE-2026-109628","CVE-2026-109627"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/frappe-framework-guvenlik-zafiyeti-tr-26-1300-sgb.html","summary":"Frappe Framework'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bültenini incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1300","kev":false},{"id":"jm-bullion-veri-ihlali-ssn-kart-2026-10-13","first_seen":"2026-10-13T00:00:00+03:00","updated":"2026-10-15T15:50:00+03:00","title":"JM Bullion (Dallas, değerli metal e-ticaret) veri ihlali: SSN, ehliyet, finansal hesap ve kart numaraları; 12–14 Nis 2026 yetkisiz erişim, 13 Eki bildirim; Massachusetts 1.420 kişi (OCABR 2026-1771)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"official","primary_source_url":"https://oag.ca.gov/system/files/JM%20Bullion%2C%20Inc.%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":"JM Bullion","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1.420 kişi","sector":"finance","country":"US","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1299","first_seen":"2026-10-12T13:50:25+03:00","updated":"2026-10-15T04:52:00+03:00","title":"SGB TR-26-1299: Adalet Bakanlığı - UYAP Doküman Editörü Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"T.C. Adalet Bakanlığı Bilgi İşlem Genel Müdürlüğü","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1299","cve":["CVE-2026-18390","CVE-2026-12613"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/adalet-bakanligi-uyap-dokuman-editoru-guvenlik-bildirimi-tr-26-1299-sgb.html","summary":"Adalet Bakanlığı Bilgi İşlem Genel Müdürlüğü tarafından geliştirilen UYAP Doküman Editörü ürününde zafiyetler tespit edilmiştir. Siber Güvenlik Başkanlığı; Windows ve Pardus,Debian tabanlı işletim sistemi kullananlara, uygulamayı en az v5.4.20 sürümü ve sonrasına, MAC işletim sistemi kullananlara, uygulamayı en az v5.4.21 sürümü ve sonrasına, yükseltmelerini tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"T.C. Adalet Bakanlığı Bilgi İşlem Genel Müdürlüğü","affected_products":["UYAP Doküman Editörü"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"government","country":"TR","sgb_id":"TR-26-1299","kev":false},{"id":"paloalto-globalprotect-cve-2026-0257-reliaquest-settra-2026-10-12","first_seen":"2026-10-12T08:56:00+03:00","updated":"2026-10-12T08:56:00+03:00","title":"ReliaQuest: Qilin ve Settra fidye grupları Palo Alto GlobalProtect CVE-2026-0257 (Mayıs 2026, KEV 29 May) ile yetkisiz VPN oturumu açıyor","category":"ransomware","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/cve-2026-0257","cve":["CVE-2026-0257"],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":null,"tags":["cisa_kev"],"entity":"ReliaQuest","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"sgb:TR-26-1298","first_seen":"2026-10-12T07:46:19+03:00","updated":"2026-10-12T12:18:00+03:00","title":"SGB TR-26-1298: Progress Telerik Report Server Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Progress Telerik Report Server","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1298","cve":["CVE-2026-106145","CVE-2026-106155"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/progress-telerik-report-server-guvenlik-bildirimi-tr-26-1298-sgb.html","summary":"Progress Telerik Report Server ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Progress Telerik Report Server","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"transport","country":"TR","sgb_id":"TR-26-1298","kev":false},{"id":"sgb:TR-26-1297","first_seen":"2026-10-12T07:41:26+03:00","updated":"2026-10-12T12:18:00+03:00","title":"SGB TR-26-1297: Red Lion Controls N-Tron 700 Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1297","cve":["CVE-2026-29797","CVE-2026-33367","CVE-2026-39460"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/red-lion-n-tron-700-guvenlik-zafiyeti-tr-26-1297-sgb.html","summary":"Red Lion Controls N-Tron 700 serisinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bültenini incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1297","kev":false},{"id":"sgb:TR-26-1296","first_seen":"2026-10-12T07:36:34+03:00","updated":"2026-10-16T15:20:38+03:00","title":"SGB TR-26-1296: Nginx UI Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Nginx UI","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1296","cve":["CVE-2026-107809","CVE-2026-107810"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/nginx-ui-guvenlik-bildirimi-tr-26-1296-sgb.html","summary":"Nginx UI yazılımında güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bültenini incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Nginx UI","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1296","kev":false},{"id":"sgb:TR-26-1295","first_seen":"2026-10-12T07:34:16+03:00","updated":"2026-10-12T11:11:37+03:00","title":"SGB TR-26-1295: ZTE Z80 Ultra Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"ZTE Z80 Ultra","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1295","cve":["CVE-2026-108502","CVE-2026-108504","CVE-2026-108503"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/zte-z80-ultra-guvenlik-bildirimi-tr-26-1295-sgb.html","summary":"ZTE Z80 Ultra ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanı gözden geçirmelerini ve gereken önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"ZTE Z80 Ultra","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1295","kev":false},{"id":"sgb:TR-26-1294","first_seen":"2026-10-12T07:31:03+03:00","updated":"2026-10-12T11:11:08+03:00","title":"SGB TR-26-1294: ZKTeco BioTime Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1294","cve":["CVE-2026-108794","CVE-2026-108796","CVE-2026-108795"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/zkteco-biotime-guvenlik-zafiyeti-tr-26-1294-sgb.html","summary":"ZKTeco BioTime ürününde güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dökümanları incelemelerini ve gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1294","kev":false},{"id":"sgb:TR-26-1293","first_seen":"2026-10-12T07:27:44+03:00","updated":"2026-10-12T11:10:40+03:00","title":"SGB TR-26-1293: MariaDB Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1293","cve":["CVE-2026-107823","CVE-2026-107822","CVE-2026-107821","CVE-2026-107819","CVE-2026-107818","CVE-2026-107817","CVE-2026-107816"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/mariadb-guvenlik-zafiyeti-tr-26-1293-sgb.html","summary":"MariaDB'nin bazı versiyonlarında güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanı gözden geçirmelerini ve gerekli güncellemeleri yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1293","kev":false},{"id":"sgb:TR-26-1292","first_seen":"2026-10-12T07:25:23+03:00","updated":"2026-10-12T11:10:12+03:00","title":"SGB TR-26-1292: Zephyr Project Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1292","cve":["CVE-2026-19740","CVE-2026-19569","CVE-2026-19737","CVE-2026-19736","CVE-2026-19669"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/zephyr-project-guvenlik-zafiyeti-tr-26-1292-sgb.html","summary":"Zephyr Project'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1292","kev":false},{"id":"sgb:TR-26-1291","first_seen":"2026-10-12T07:23:05+03:00","updated":"2026-10-12T11:09:42+03:00","title":"SGB TR-26-1291: Dell Secure Connect Gateway (SCG","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Dell Secure Connect Gateway (SCG) Policy Manager","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1291","cve":["CVE-2026-78026","CVE-2026-78015","CVE-2026-78013","CVE-2026-76779","CVE-2026-76769","CVE-2026-78341","CVE-2026-78340","CVE-2026-78339","CVE-2026-78027"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/dell-secure-connect-gateway-policy-manager-guvenlik-bildirimi-tr-26-1291-sgb.html","summary":"Dell Secure Connect Gateway (SCG) Policy Manager bileşeninde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemeleri ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Dell Secure Connect Gateway (SCG) Policy Manager","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1291","kev":false},{"id":"sgb:TR-26-1290","first_seen":"2026-10-12T07:16:13+03:00","updated":"2026-10-16T10:36:38+03:00","title":"SGB TR-26-1290: WordPress Eklenti Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"WordPress Eklenti","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1290","cve":["CVE-2026-108981","CVE-2026-81929","CVE-2026-104022","CVE-2026-93883","CVE-2026-104915","CVE-2026-94589","CVE-2026-103365","CVE-2026-104732","CVE-2026-107645","CVE-2026-104797","CVE-2026-96743","CVE-2026-104898","CVE-2026-89301","CVE-2026-97670","CVE-2026-104021","CVE-2026-9696","CVE-2026-104724","CVE-2026-103998","CVE-2026-103424","CVE-2026-6723","CVE-2026-104735","CVE-2026-103964","CVE-2026-87869","CVE-2026-97630","CVE-2026-5727","CVE-2026-102401","CVE-2026-101324","CVE-2026-103889","CVE-2026-104993","CVE-2026-96648","CVE-2026-12054","CVE-2026-14335","CVE-2026-17025","CVE-2026-14882","CVE-2026-103912","CVE-2026-103482","CVE-2026-14877","CVE-2026-93775","CVE-2026-97643","CVE-2026-104723","CVE-2026-104762","CVE-2026-96682","CVE-2026-92975","CVE-2026-104899","CVE-2026-18558","CVE-2026-77183","CVE-2026-91862","CVE-2026-94421","CVE-2026-96667","CVE-2026-94375","CVE-2026-108479","CVE-2026-108481","CVE-2026-96661","CVE-2026-92097","CVE-2026-17092","CVE-2026-104995","CVE-2026-104767","CVE-2026-107652","CVE-2026-104749","CVE-2026-103425","CVE-2026-103423","CVE-2026-103422","CVE-2026-97657","CVE-2026-102251","CVE-2026-97668","CVE-2026-110002","CVE-2026-101926","CVE-2026-103369","CVE-2026-101924","CVE-2026-100153","CVE-2026-87855","CVE-2026-97471","CVE-2026-97398","CVE-2026-95808","CVE-2026-100185","CVE-2026-83592","CVE-2026-95816","CVE-2026-78193","CVE-2026-94377","CVE-2026-97020","CVE-2026-93885","CVE-2026-77114","CVE-2026-16495","CVE-2026-100193","CVE-2026-95807","CVE-2026-104800","CVE-2026-78001","CVE-2026-97315","CVE-2026-88998","CVE-2026-82844","CVE-2026-103308","CVE-2026-101301","CVE-2026-86461","CVE-2026-14572","CVE-2026-108587","CVE-2026-3712","CVE-2026-78087","CVE-2026-15090","CVE-2026-15180","CVE-2026-88043","CVE-2026-18557","CVE-2026-18548","CVE-2026-18586","CVE-2026-17031","CVE-2026-17001","CVE-2026-86803","CVE-2026-96570","CVE-2026-8145","CVE-2026-108092","CVE-2026-100159","CVE-2026-109221","CVE-2026-107659","CVE-2026-104798","CVE-2026-103481","CVE-2026-110019","CVE-2026-110590","CVE-2026-107746","CVE-2026-111114","CVE-2026-109998","CVE-2026-103911","CVE-2026-109191","CVE-2026-109515","CVE-2026-109400","CVE-2026-110721","CVE-2026-103525","CVE-2026-111106","CVE-2026-109512","CVE-2026-103895","CVE-2026-101335","CVE-2026-109219","CVE-2026-96562","CVE-2026-100186","CVE-2026-88963","CVE-2026-85659","CVE-2026-104932","CVE-2026-109513","CVE-2026-109414","CVE-2026-107764","CVE-2026-111122","CVE-2026-89051","CVE-2026-103768","CVE-2026-109447","CVE-2026-103896","CVE-2026-109232","CVE-2026-104001","CVE-2026-95809","CVE-2026-12272","CVE-2026-89079","CVE-2026-93767","CVE-2026-95686","CVE-2026-104000","CVE-2026-103480","CVE-2026-107748","CVE-2026-103999","CVE-2026-110017","CVE-2026-100158"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/wordpress-eklenti-guvenlik-bildirimi-tr-26-1290-sgb.html","summary":"Bazı WordPress eklentilerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"WordPress Eklenti","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1290","kev":false},{"id":"tabung-haji-siber-saldiri-hizmet-geri-2026-10-12","first_seen":"2026-10-12T00:00:00+03:00","updated":"2026-10-12T09:50:08+03:00","title":"Tabung Haji siber saldırı sonrası ana hizmetleri yeniden açtı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.freemalaysiatoday.com/category/nation/2026/10/12/tabung-haji-services-back-following-cyberattack","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/tabung-haji-siber-saldiri-hizmet-geri-2026.html","summary":"Malezya'nın hac fonu Tabung Haji, uğradığı siber saldırı nedeniyle durdurduğu ana sistem ve hizmetlerini güvenlik önlemlerinin ardından yeniden açtı.","tags":["country:MY","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"MY","sgb_id":null,"kev":false},{"id":"arabia-falcon-insurance-veri-yayimlandi-2026-2026-10-12","first_seen":"2026-10-12T00:00:00+03:00","updated":"2026-10-12T12:18:00+03:00","title":"Umman'daki Arabia Falcon Insurance, verilerin yayımlanmış göründüğünü açıkladı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.mubasher.info/news/4683456/%D8%A5%D9%84%D8%AD%D8%A7%D9%82-%D8%A7-%D8%A8%D8%A7%D9%84%D8%A5%D9%81%D8%B5%D8%A7%D8%AD-%D8%A7%D9%84%D9%85%D8%A4%D8%B1%D8%AE-%D9%81%D9%8A-7-%D9%8A%D9%88%D9%84%D9%8A%D9%88-2026-%D9%88%D8%A7%D9%84%D8%AA%D8%AD%D8%AF%D9%8A%D8%AB-%D8%A7%D9%84%D8%B5%D8%A7%D8%AF%D8%B1-%D8%A8%D8%AA%D8%A7%D8%B1%D9%8A%D8%AE-16-%D9%8A%D9%88%D9%84%D9%8A%D9%88-2026/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/arabia-falcon-insurance-veri-yayimlandi-2026.html","summary":"Umman merkezli Arabia Falcon Insurance, verilerin yayımlanmış göründüğünü duyurdu. Şirket olayın kapsamını ve etkilenen verileri araştırıyor.","tags":["country:OM","origin_leak_tracker","sgh_published","sgh_shared_on_x"],"entity":"Umman","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"insurance","country":"OM","sgb_id":null,"kev":false},{"id":"albert-heijn-ahold-delhaize-siber-olay-2026-2026-10-12","first_seen":"2026-10-12T00:00:00+03:00","updated":"2026-10-21T13:59:00+03:00","title":"Ahold Delhaize'de güvenlik sorunu: Albert Heijn'de teslimatlar durdu","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://newsroom.aholddelhaize.com/ahold-delhaize-takes-precautionary-measures-following-cybersecurity-incident/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/albert-heijn-ahold-delhaize-siber-olay-2026.html","summary":"Ahold Delhaize, ağındaki güvenlik sorunu nedeniyle bazı sistemleri kapattı. Albert Heijn, Etos ve Gall & Gall'da internet siparişleri teslim edilemiyor; mağazalar açık.","tags":["country:NL","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"NL","sgb_id":null,"kev":false},{"id":"asyaport-n0n-tr-2026-10-12-484597","first_seen":"2026-10-12T00:00:00+03:00","updated":"2026-10-21T00:44:27+03:00","title":"N0n grubu Asyaport'u sızıntı sitesine eklediğini iddia etti","category":"ransomware","severity":"critical","turkey_signal":true,"tr_entity":"Asyaport","status":"confirmed","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":["N0n"],"sgh_url":"https://siberguvenlikhaber.com/haber/asyaport-n0n-sizinti-iddiasi-2026.html","summary":"Fidye grubu N0n, Tekirdağ merkezli konteyner terminali Asyaport'u sızıntı sitesine eklediğini iddia etti. Bağımsız doğrulama henüz yok; dosya yayımı 19 Ekim iddiası.","tags":["country:TR","origin_leak_tracker","origin_x_tip","sgh_published"],"entity":"Asyaport","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"transport","country":"TR","sgb_id":null,"kev":false},{"id":"fransa-supermarket-sogutma-siber-saldiri-2026-10-12","first_seen":"2026-10-12T00:00:00+03:00","updated":"2026-10-21T13:59:00+03:00","title":"Fransa'da Süpermarket Soğutma Sistemlerine Siber Saldırı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-012/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/fransa-supermarket-sogutma-siber-saldiri-2026.html","summary":"Fransa'da çok sayıda süpermarkette soğutma sistemleri siber saldırıyla etkilendi. CERT-FR, Danfoss ve diğer uzaktan kontrolcülerin ele geçirildiğini duyurdu.","tags":["country:FR","partially_confirmed","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"retail","country":"FR","sgb_id":null,"kev":false},{"id":"rohlik-cz-destek-sistemi-musteri-verisi-sizintisi-2026-10-12","first_seen":"2026-10-12T00:00:00+03:00","updated":"2026-10-15T09:18:53+03:00","title":"Rohlík (Çekya) — destek sistemi siber saldırısında müşteri verisi çalındı; isim/e-posta/destek yazışmaları; giriş-ödeme etkilenmedi (şirket/ČTK, Expats.cz 12 Eki 07:14)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.expats.cz/czech-news/article/rohlik-customer-data-stolen-in-cyberattack-on-its-support-system","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CZ","desk_skipped"],"entity":"Rohlík","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"CZ","sgb_id":null,"kev":false},{"id":"kfc-the-gentlemen-fidye-iddiasi-2026-10-12","first_seen":"2026-10-12T00:00:00+03:00","updated":"2026-10-12T06:50:00+03:00","title":"KFC — The Gentlemen fidye grubu sızıntı sitesi iddiası (listeleme 10 Eki 2026, 12 Eki 03:34Z)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["The Gentlemen"],"sgh_url":null,"summary":"The Gentlemen fidye yazılımı grubu, KFC kurumunu kurbanları arasında listelediğini iddia ediyor; iddia bağımsız olarak doğrulanmadı.","tags":["country:US","origin_x_tip"],"entity":"KFC","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"cyberxero-claude-code-iab-ukrayna-2026-10-12","first_seen":"2026-10-12T00:00:00+03:00","updated":"2026-10-12T11:59:00+03:00","title":"CyberXero (Rusça konuşan IAB) — kampanyada Anthropic Claude Code kullanımı; 4 Ukrayna kurumundan 628.000+ kayıt","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://socradar.io/blog/cyberxero-ai-iab-ukraine-critical-infrastructure/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:UA"],"entity":"CyberXero","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"628.000+ kayıt","sector":null,"country":"UA","sgb_id":null,"kev":false},{"id":"ifood-55m-musteri-kaydi-satis-iddiasi-2026-10-12","first_seen":"2026-10-12T00:00:00+03:00","updated":"2026-10-12T12:18:00+03:00","title":"iFood (Brezilya) — 55 milyon müşteri kaydının yeraltı forumunda satışa çıkarıldığı iddiası (, 12 Eki 2026)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:BR","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"55 milyon müşteri","sector":null,"country":"BR","sgb_id":null,"kev":false},{"id":"sili-pdi-17m-kayit-api-ihlal-iddiasi-2026-10-12","first_seen":"2026-10-12T00:00:00+03:00","updated":"2026-10-12T12:18:00+03:00","title":"Şili PDI (Policía de Investigaciones) — API üzerinden 17 milyon kayıt ihlali iddiası (, 12 Eki 2026)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CL","desk_skipped","origin_x_tip"],"entity":"Şili PDI","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"17 milyon kayıt","sector":null,"country":"CL","sgb_id":null,"kev":false},{"id":"kpn-4-7m-musteri-kaydi-iddiasi-2026-10-12","first_seen":"2026-10-12T00:00:00+03:00","updated":"2026-10-12T12:18:00+03:00","title":"KPN (Hollanda telekom) — 4,7 milyon müşteri kişisel/fatura kaydının darkweb forumunda yayımlandığı iddiası (, 12 Eki 2026)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:NL","desk_skipped","origin_x_tip"],"entity":"KPN","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"4,7 milyon müşteri","sector":"telecom","country":"NL","sgb_id":null,"kev":false},{"id":"tera-mlkp-devrimci-adalet-hackerlari-iddiasi-2026-10-12","first_seen":"2026-10-12T00:00:00+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Tera (TR finans grubu) — \"MLKP Devrimci Adalet Hackerları\" 12.566 dosya elde ettiği iddiası","category":"leak","severity":"medium","turkey_signal":true,"tr_entity":"Tera","status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:TR","origin_x_tip"],"entity":"Tera","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"TR","sgb_id":null,"kev":false},{"id":"biotold-sahte-biyoteknoloji-konferansi-2026-10-11","first_seen":"2026-10-11T23:20:00+03:00","updated":"2026-10-11T23:20:00+03:00","title":"Boston'da 5-6 Kasım'da düzenleneceği ilan edilen BioTold 2026 biyoteknoloji konferansı sahte çıktı: Proofpoint'e göre site, biyoteknoloji çalışanlarına zararlı yazılım indirtmek için kurulmuş (George","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.bizjournals.com/boston/news/2026/10/11/biotold-conference-cybercriminals-malware.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","malware"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"US","sgb_id":null,"kev":false},{"id":"levante-ud-siber-saldiri-2026-10-11","first_seen":"2026-10-11T22:04:00+03:00","updated":"2026-10-11T22:13:09+03:00","title":"Levante UD siber saldırıyı doğruladı: Üye ve oyuncu verileri etkilenmiş olabilir","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.levanteud.com/noticias/el-levante-ud-activa-un-plan-de-blindaje-digital-ante-una-anomalia-detectada-en-sus-servidores-de-datos","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/levante-ud-siber-saldiri-veri-ihlali-2026.html","summary":"Levante UD siber saldırıyı doğruladı. Kulübe göre üye ve oyuncu verileri etkilenmiş olabilir, ancak verilerin kötüye kullanıldığına dair bulgu yok.","tags":["country:ES","origin_leak_tracker","sgh_published","sgh_shared_on_x"],"entity":"Levante UD","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"ES","sgb_id":null,"kev":false},{"id":"coldcard-hesabi-oltalama-2026-10-11-b901a4","first_seen":"2026-10-11T22:04:00+03:00","updated":"2026-10-11T22:41:00+03:00","title":"COLDCARD, resmî X hesabındaki oltalama gönderisini inceliyor","category":"fraud","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://cointelegraph.com/news/coldcard-says-its-investigating-how-phishing-link-appeared-on-its-x-account","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/coldcard-x-hesabi-oltalama-baglantisi-2026.html","summary":"COLDCARD, resmî X hesabından oltalama bağlantılı bir gönderi yayımlandığını açıkladı. Şirket gönderiyi sildi; buna karşılık gelen giriş kaydı bulamadı.","tags":["country:GLOBAL","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgh:ledger-cryptobilis-donanim-implanti-dogrulandi-2026","first_seen":"2026-10-11T20:43:34+03:00","updated":"2026-10-11T20:43:34+03:00","title":"Ledger, CryptoBilis'in sattığı bir cihazda yetkisiz donanım implantı bulunduğunu doğruladı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://cointelegraph.com/news/ledger-confirms-unauthorized-hardware-implant-losses-may-exceed-86m","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ledger-cryptobilis-donanim-implanti-dogrulandi-2026.html","summary":"Ledger, CryptoBilis'in sattığı bir cihazda yetkisiz donanım implantı bulunduğunu doğruladı. Şirkete göre sistemleri etkilenmedi; kayıp tutarı doğrulanmadı.","tags":["origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"vacaf-caf-fransa-tatil-yardimi-veri-sizintisi-2026-10-09","first_seen":"2026-10-11T12:52:00+03:00","updated":"2026-10-11T13:24:10+03:00","title":"Fransa'da VACAF tatil yardımı sisteminde veri sızıntısı: Cnaf doğruladı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://frenchbreaches.com/blog/caf-les-donnees-de-pres-de-12-million-de-dossiers-daides-aux-vacances-proposees-a-la-vente","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/fransa-caf-vacaf-tatil-yardimi-veri-sizintisi-2026.html","summary":"Fransa'da Cnaf, tatil yardımı sistemi VACAF'taki veri sızıntısını doğruladı ve siteyi askıya aldı; saldırganın 1,2 milyon dosya iddiası doğrulanmadı.","tags":["country:FR","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"b-20261011-1213-mlkp-hacker-tera-grubu-iddiasi","first_seen":"2026-10-11T12:17:23+03:00","updated":"2026-10-21T00:44:27+03:00","title":"Yasa dışı MLKP'ye bağlı 'Devrimci Adalet Hackerları' Tera Grubu sistemlerinden 7 GB / 12.566 dosya aldığını iddia etti (ETHA çevresi aktarım)","category":"leak","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:TR","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"7 GB","sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"xmtp-ceo-grok-bot-slack-banka-bakiyesi-2026-10-09","first_seen":"2026-10-11T10:52:00+03:00","updated":"2026-10-11T10:52:00+03:00","title":"XMTP Labs CEO'su Shane Mac: kişisel finans ajanı (Grok Bot) banka bakiyelerini şirketin Slack yönetici kanalına gönderdi (1 Eki olayı; WSJ 9 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"US","sgb_id":null,"kev":false},{"id":"india-mea-nic-eposta-satis-iddiasi-2026-10-11","first_seen":"2026-10-11T07:48:00+03:00","updated":"2026-10-11T07:48:00+03:00","title":"Hindistan: tehdit aktörü Dışişleri Bakanlığı (MEA) ve NIC'e ait 7,5 GB gizli e-posta sattığını iddia ediyor (yeraltı forumu; doğrulanmadı)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"7,5 GB","sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"fireworks-ai-kimlik-bilgisi-guvenlik-olayi-2026-10-06","first_seen":"2026-10-11T06:50:00+03:00","updated":"2026-10-11T07:20:00+03:00","title":"Fireworks AI platformunda güvenlik olayı: İç kimlik bilgileri yetkisiz kullanıldı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://fireworks.ai/security/bulletins/october-2026-security-incident","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/fireworks-ai-kimlik-bilgisi-guvenlik-olayi-2026.html","summary":"Fireworks AI, iç kimlik bilgilerinin yetkisiz kullanıldığını ve bazı müşteri ortam değişkenlerine erişildiğini duyurdu; veri erişimi tespit edilmedi.","tags":["country:US","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"bigid-the-gentlemen-fidye-iddiasi-2026-10-11","first_seen":"2026-10-11T06:14:00+03:00","updated":"2026-10-11T08:20:00+03:00","title":"The Gentlemen fidye grubu, ABD'li veri güvenliği şirketi BigID'i kurban listesine ekledi (iddia)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["The Gentlemen"],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"osint-industries-uk-sale-claim-2026-10-11","first_seen":"2026-10-11T04:39:00+03:00","updated":"2026-10-11T04:39:00+03:00","title":"İngiltere merkezli OSINT Industries platformunun verilerinin satışa çıkarıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"icon-cancer-centre-sale-claim-2026-10-11","first_seen":"2026-10-11T03:20:00+03:00","updated":"2026-10-11T03:20:00+03:00","title":"Icon Cancer Centre (Avustralya) 31.300+ hasta belgesi satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"vd2e-fr-86k-sale-claim-2026-10-11","first_seen":"2026-10-11T03:20:00+03:00","updated":"2026-10-11T03:20:00+03:00","title":"Fransız enerji renovasyon firması VD2E 86 bin müşteri kaydı satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"86 bin müşteri","sector":"energy","country":null,"sgb_id":null,"kev":false},{"id":"resorttrust-62k-web-sizinti-2026-10-09","first_seen":"2026-10-11T01:30:00+03:00","updated":"2026-10-11T01:30:00+03:00","title":"Resorttrust (TSE 4681): web sitesine yetkisiz erişim, ~62 bin kayıt (26k grup üyesi + 36k The Kahala Yokohama rezervasyon) sızdı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://fs2.magicalir.net/tdnet/2026/4681/20261009548973.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:JP"],"entity":"Resorttrust","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"62 bin kayıt","sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"tata-electronics-world-leaks-apple-tesla-2026-10-10-gn","first_seen":"2026-10-11T01:30:00+03:00","updated":"2026-10-11T01:30:00+03:00","title":"Tata Electronics World Leaks sızıntısı (Apple/Tesla dosyaları)","category":"ransomware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.reuters.com/business/media-telecom/indias-tata-electronics-hit-by-cyber-breach-claiming-expose-apple-tesla-trade-2026-06-22/","cve":[],"cvss":null,"actor":["World Leaks"],"sgh_url":null,"summary":null,"tags":["country:IN"],"entity":"Tata Electronics World Leaks","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"IN","sgb_id":null,"kev":false},{"id":"infogreffe-fr-3-7m-ihlal-iddiasi-2026-10-10","first_seen":"2026-10-10T20:20:00+03:00","updated":"2026-10-11T00:45:49+03:00","title":"Infogreffe için 3,7 milyon satırlık veri sızıntısı iddiası","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/infogreffe-3-7-milyon-kayit-ihlal-iddiasi-2026.html","summary":"Infogreffe'e ait olduğu öne sürülen yaklaşık 3,7 milyon satırlık verinin paylaşıldığı iddia edildi. İddia doğrulanmadı ve kurum açıklaması yok.","tags":["country:FR","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"Infogreffe","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"3,7 milyon satır","sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"auchan-fr-1-2m-satis-iddiasi-2026-10-10","first_seen":"2026-10-10T19:50:00+03:00","updated":"2026-10-10T20:50:00+03:00","title":"Auchan.fr: 'mica' takma adlı aktör pwnforums'ta 1,2 milyon müşteri kaydı satıyor iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","desk_skipped","origin_x_tip"],"entity":"Auchan.fr","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1,2 milyon müşteri","sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"temairazu-otel-rezervasyon-445-bin-2026-10-09","first_seen":"2026-10-10T19:20:00+03:00","updated":"2026-10-10T20:21:31+03:00","title":"Japon otel rezervasyon sistemi TEMAIRAZU'da 4,45 milyon misafirin bilgileri görüntülenmiş olabilir","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.temairazu.co.jp/pdf/1212/ir-news","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/temairazu-otel-rezervasyon-sistemi-4-milyon-misafir-verisi-2026.html","summary":"Japonya'da otel rezervasyon sistemi TEMAIRAZU'ya yetkisiz erişildi. Şirkete göre en fazla yaklaşık 4,45 milyon misafirin bilgileri görüntülenmiş olabilir.","tags":["country:JP","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"hospitality","country":"JP","sgb_id":null,"kev":false},{"id":"claude-clickfix-google-ads-bing-yonlendirme-2026-10-09","first_seen":"2026-10-10T18:18:37+03:00","updated":"2026-10-10T18:18:37+03:00","title":"Google Ads ve Bing yönlendirmeleriyle sahte Claude sayfaları üzerinden ClickFix saldırıları","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"fransa-ps-primaire-e-votez-ddos-2026-10-09","first_seen":"2026-10-10T14:19:55+03:00","updated":"2026-10-10T14:53:21+03:00","title":"Fransa'da solun ön seçim platformu e-votez bot saldırısıyla yavaşladı, oylama uzatıldı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://parti-socialiste.fr/actualites/choisir-2027-la-plateforme-e-votez-objet-dune-cyberattaque-vote-ralenti-mais-pas-compromis/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/fransa-sol-on-secim-e-votez-bot-saldirisi-2026.html","summary":"Fransa'da sol ön seçimin oy platformu e-votez bot saldırısıyla yavaşladı. İlk tur uzatıldı, ANSSI devreye girdi; komisyona göre oyların bütünlüğü korundu.","tags":["sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"usnext-mississippi-hosting-siber-saldiri-2026-10-09","first_seen":"2026-10-10T13:48:24+03:00","updated":"2026-10-16T19:23:44+03:00","title":"Mississippi merkezli web/hosting sağlayıcısı U.S.NEXT'e siber saldırı: Madison County (ve muhtemelen Hinds County) web siteleri ve e-posta hizmetleri kesildi; FBI ve İç Güvenlik inceliyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://dysruptionhub.com/incidents/profiles/u-s-next-2026-01/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"egide-bollene-siber-saldiri-it-saglayici-2026-10-09","first_seen":"2026-10-10T04:13:22+03:00","updated":"2026-10-15T17:35:00+03:00","title":"Fransız Egide, siber saldırı sonrası Bollène tesisinde faaliyetleri kısmen durdurdu","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.egide-group.com/file_bdd/dynamic_content/file_pdf_pdf/1791563207_Egide-Communique-09-octobre-2026-Cyber-FR.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/egide-bollene-siber-saldiri-bt-saglayici-2026.html","summary":"Fransız Egide, dış bilişim sağlayıcısı üzerinden gelen siber saldırı sonrası Bollène tesisini kısmen durdurdu. Etkilenmiş olabilecek veriler inceleniyor.","tags":["country:FR","origin_x_tip","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"bayer-black-ransomware-claim-2026-10-09-50f536","first_seen":"2026-10-10T04:13:22+03:00","updated":"2026-10-10T04:13:22+03:00","title":"'Black X' fidye yazılımı grubu Bayer'i (Almanya; ilaç/tüketici sağlığı/tarım) sızıntı listesine yazdı iddiası — , 9 Eki 23:43Z","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:DE","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"DE","sgb_id":null,"kev":false},{"id":"spokane-public-schools-veri-ihlali-2026-10-08","first_seen":"2026-10-10T03:25:00+03:00","updated":"2026-10-10T03:25:00+03:00","title":"Spokane Public Schools (Washington, ABD): 20 Eylül'de tespit edilen ağ güvenliği olayında öğrenci ve personel verisinin ele geçirildiğine inanılıyor (8 Eki aile bildirimi)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.spokesman.com/stories/2026/oct/08/spokane-public-schools-suspects-student-staff-data/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":"US","sgb_id":null,"kev":false},{"id":"comparitech-q3-2026-fidye-rekor-2627-2026-10-07","first_seen":"2026-10-10T03:25:00+03:00","updated":"2026-10-10T03:25:00+03:00","title":"Comparitech Q3 2026: 2.627 fidye yazılımı saldırısı iddiasıyla çeyrek rekoru (Q2'ye göre +%29, yıllık +%61; 247 teyitli; Qilin 357, The Gentlemen 342; ABD 1.066)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.comparitech.com/news/ransomware-roundup-q3-2026-stats-on-attacks-ransoms-and-active-gangs/","cve":[],"cvss":null,"actor":["Qilin","The Gentlemen"],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":"Comparitech Q3 2026","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"dubrovsky-cypfer-fbi-gozalti-santaj-komplo-edtx-2026-10-08","first_seen":"2026-10-10T03:17:00+03:00","updated":"2026-10-21T00:44:27+03:00","title":"FBI, Kanadalı fidye müzakerecisi Edward Dubrovsky'yi gözaltına aldı","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.bop.gov/inmateloc/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/shinyhunters-fidye-muzakerecisi-edward-dubrovsky-gozalti-2026.html","summary":"FBI, Kanadalı fidye müzakerecisi Edward Dubrovsky'yi Pensilvanya'da gözaltına aldı. Şantaj komplosuyla suçlanan Dubrovsky'nin dosyası Teksas'a gönderildi.","tags":["country:US","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"42-coding-school-140k-ogrenci-profili-satis-claim-2026-10-09-1b1049","first_seen":"2026-10-10T02:34:37+03:00","updated":"2026-10-10T02:34:37+03:00","title":"'42' kodlama okulu ağına ait 140.080 öğrenci profili (94.427 profil fotoğrafı, ad, e-posta, kampüs, not/değerlendirme puanı) siber suç forumunda satışta — aktör 'fentag', 8 Eki'de kazıdığını iddia edi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"telegram-stars-gift-refund-exploit-claim-2026-10-10","first_seen":"2026-10-10T01:45:00+03:00","updated":"2026-10-10T01:45:00+03:00","title":"Telegram Stars/koleksiyon hediye sisteminde iade/muhasebe açığıyla ~4,5 M$ üretildiği iddiası (topluluk raporları)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"telegram-desktop-cve-2026-107181-ipc-ato-2026-10","first_seen":"2026-10-10T00:47:39+03:00","updated":"2026-10-10T00:47:39+03:00","title":"Telegram Desktop CVE-2026-107181: tek tıkla tg:// bağlantısıyla oturum dosyası çalma (IPC enjeksiyonu), 7.2.9'da düzeltildi; PoC yayımlandı","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/","cve":["CVE-2026-107181"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":"Telegram Desktop","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"deloitte-the-gentlemen-claim-2026-10-09-bdf7d5","first_seen":"2026-10-10T00:05:51+03:00","updated":"2026-10-10T00:05:51+03:00","title":"The Gentlemen fidye yazılımı grubu Deloitte'u (küresel denetim/danışmanlık) sızıntı sitesinde listeledi — ayrıntı/veri miktarı yok","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["The Gentlemen"],"sgh_url":null,"summary":null,"tags":["country:GB","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"GB","sgb_id":null,"kev":false},{"id":"quitt-ch-29k-dataset-sale-claim-2026-10-09-e2e4d6","first_seen":"2026-10-10T00:05:51+03:00","updated":"2026-10-10T00:05:51+03:00","title":"İsviçreli sigorta/evrak yönetim platformu Quitt'e ait 29.435 kişilik, 197 MB veri setinin forumda satışa çıkarıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CH","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"29.435 kişilik","sector":"insurance","country":"CH","sgb_id":null,"kev":false},{"id":"courtiers-partenaires-ch-57k-dataset-sale-claim-2026-10-09-4e4093","first_seen":"2026-10-10T00:05:51+03:00","updated":"2026-10-10T00:05:51+03:00","title":"İsviçreli finans/sigorta aracı platformu Courtiers Partenaires'e ait 57.229 kişilik, 121 MB veri setinin forumda satışa çıkarıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CH","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"57.229 kişilik","sector":"insurance","country":"CH","sgb_id":null,"kev":false},{"id":"ghostaction-github-actions-345-depo-2026-10-08","first_seen":"2026-10-09T23:48:00+03:00","updated":"2026-10-21T00:44:27+03:00","title":"GhostAction geri döndü: Ele geçirilen iki bakımcı hesabıyla 345 GitHub deposuna kimlik bilgisi çalan iş akışı eklendi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.stepsecurity.io/blog/ghostaction-returns","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ghostaction-github-actions-kimlik-bilgisi-hirsizligi-2026.html","summary":"StepSecurity'ye göre GhostAction, ele geçirilen iki bakımcı hesabıyla 345 GitHub deposuna güvenlik denetimi kılığında kimlik bilgisi çalan iş akışı ekledi.","tags":["country:GLOBAL","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"anne-arundel-county-rhysida-25btc-claim-2026-10-09-190841","first_seen":"2026-10-09T23:29:30+03:00","updated":"2026-10-16T20:22:39+03:00","title":"Anne Arundel County Ağustos 2026 Olayında Dosyaların Kopyalandığını Açıkladı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.aacounty.org/cyber-incident/updates/anne-arundel-county-provides-updates-2025-and-2026-data-privacy-events","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/anne-arundel-county-agustos-2026-veri-kopyalama-resmi-aciklama.html","summary":"Maryland Anne Arundel County, 15 Ekim'de 28 Ağustos 2026'da sınırlı sistemlere yetkisiz erişim ve dosya kopyalama olduğunu açıkladı; operasyonlar aksamadı.","tags":["country:US","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"tamimi-group-sa-310gb-claim-2026-10-09-002001","first_seen":"2026-10-09T23:01:29+03:00","updated":"2026-10-09T23:01:29+03:00","title":"Tamimi Group (Suudi Arabistan) 310 GB kurumsal veri ve 522 binden fazla kimlik/pasaport eşleşmesi satışta iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:SA","origin_x_tip"],"entity":"Tamimi Group","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"310 GB","sector":"transport","country":"SA","sgb_id":null,"kev":false},{"id":"fiction-express-725gb-kazu-claim-es-2026-10-09","first_seen":"2026-10-09T20:36:47+03:00","updated":"2026-10-09T21:28:00+03:00","title":"İspanyol dijital okuma/eğitim platformu Fiction Express'ten 725 GB öğrenci/öğretmen/okul verisi çalındığı iddiası; aktör 'Kazu', 100 bin $ fidye talebi","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:ES","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"725 GB","sector":"education","country":"ES","sgb_id":null,"kev":false},{"id":"qilin-almanya-iade-tutuklama-bleeping-2026-10-09","first_seen":"2026-10-09T19:58:51+03:00","updated":"2026-10-10T10:52:00+03:00","title":"Almanya, iade edilen Qilin çekirdek üyesini tutukladı","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":null,"tags":["country:DE"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"DE","sgb_id":null,"kev":false},{"id":"darksword-ios-exploit-kit-kripto-2026-10-09","first_seen":"2026-10-09T19:58:51+03:00","updated":"2026-10-09T19:58:51+03:00","title":"DarkSword iOS exploit kiti kripto cüzdan verisi çalma ve uzaktan komut ekledi (THN)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"mendoza-arjantin-1m-pii-claim-2026-10-09-8c754c","first_seen":"2026-10-09T19:58:51+03:00","updated":"2026-10-09T19:58:51+03:00","title":"Arjantin Mendoza eyalet hükümeti 1M+ vatandaş PII sızıntısı iddiası ( 16:52Z)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:AR","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"AR","sgb_id":null,"kev":false},{"id":"fransa-asp-31k-kayit-claim-2026-10-09-942062","first_seen":"2026-10-09T19:58:51+03:00","updated":"2026-10-09T19:58:51+03:00","title":"Fransa Agence de Services et de Paiement (ASP) 31.028 kayıtlık kısmi veri seti satışta iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"31.028 kayıt","sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"daiichikosho-big-echo-872-milyon-kayit-2026-10-09","first_seen":"2026-10-09T18:46:00+03:00","updated":"2026-10-09T23:36:10+03:00","title":"Big Echo'nun işletmecisi Daiichikosho'da 8,72 milyon kişisel kayıt sızmış olabilir","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.dkkaraoke.co.jp/news/newsletter/261008_2.html?lang=ja","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/daiichikosho-big-echo-8-milyon-kayit-sizinti-2026.html","summary":"Daiichikosho, veri işleme işini devrettiği firmadaki zararlı yazılım nedeniyle müşteri ve çalışanlara ait 8,72 milyon kaydın sızmış olabileceğini açıkladı.","tags":["country:JP","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"8,72 milyon kişisel","sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"ricardo-smg-890-bin-hesap-veri-acigi-2026-10-09","first_seen":"2026-10-09T18:42:00+03:00","updated":"2026-10-09T20:48:40+03:00","title":"İsviçreli pazar yeri Ricardo'da yaklaşık 890 bin hesabın verileri açığa çıktı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://swissmarketplace.group/de/media-release/ricardo-fixes/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ricardo-smg-890-bin-hesap-veri-sizintisi-2026.html","summary":"İsviçreli çevrim içi pazar yeri Ricardo'da yaklaşık 890 bin hesaba ait veriler açığa çıktı. SMG, e-posta ve parolaların etkilenmediğini bildirdi.","tags":["country:CH","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"890 bin hesabın","sector":null,"country":"CH","sgb_id":null,"kev":false},{"id":"shinyhunters-supheli-pennsylvania-tutuklama-2026-10-09","first_seen":"2026-10-09T17:32:00+03:00","updated":"2026-10-09T23:09:08+03:00","title":"FBI, ShinyHunters'a bağlı olduğundan şüphelenilen bir kişiyi daha gözaltına aldı","category":"apt","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.cbsnews.com/news/fbi-shinyhunters-arrest-jobs-website-hack/","cve":[],"cvss":null,"actor":["ShinyHunters"],"sgh_url":"https://siberguvenlikhaber.com/haber/shinyhunters-fbi-pennsylvania-tutuklama-2026.html","summary":"FBI Direktörü Kash Patel, ShinyHunters grubuyla bağlantılı olduğundan şüphelenilen bir kişinin daha gözaltına alındığını 9 Ekim 2026'da duyurdu.","tags":["country:US","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"mass-general-brigham-kesinti-siber-saldiri-degil-2026-10-09","first_seen":"2026-10-09T14:32:34+03:00","updated":"2026-10-09T14:32:34+03:00","title":"ABD: Mass General Brigham sistem kesintisinin siber saldırı olmadığı açıklandı (Western Mass News, 8 Eki 2026 23:42Z)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1289","first_seen":"2026-10-09T14:32:16+03:00","updated":"2026-10-12T10:54:14+03:00","title":"SGB TR-26-1289: Hayat Sağlık - Hayat Mobile Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Hayat Sağlık","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1289","cve":["CVE-2026-90983"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/hayat-mobile-guvenlik-bildirimi-tr-26-1289-sgb.html","summary":"Hayat Sağlık Tesisleri A.Ş. (Hayat Hastanesi) için geliştirilen Hayat Mobile ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 3.4.0 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Hayat Sağlık","affected_products":["Hayat Mobile"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"healthcare","country":"TR","sgb_id":"TR-26-1289","kev":false},{"id":"swedish-fit-fr-253k-musteri-db-satis-claim-2026-10-09","first_seen":"2026-10-09T13:57:46+03:00","updated":"2026-10-09T13:57:46+03:00","title":"Fransa: Swedish Fit (swedishfit.fr) müşteri veritabanı — 253 bin kayıt + 253 bin fotoğraf satışta iddiası (, yeraltı forumu)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"253 bin kayıt","sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"react-server-components-cve-2026-23870-dos-2026-10-09","first_seen":"2026-10-09T13:57:46+03:00","updated":"2026-10-09T13:57:46+03:00","title":"React Server Components CVE-2026-23870 (yüksek önem) — tek POST isteğiyle Next.js sunucularını kilitleyen DoS açığı","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-23870"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":"React Server Components","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"mfrr-mapping-media-freedom-ddos-2026-10-09","first_seen":"2026-10-09T13:57:46+03:00","updated":"2026-10-12T10:54:14+03:00","title":"Avrupa: Mapping Media Freedom (ECPMF) platformuna DDoS — 30 Eyl/1 Eki erişim aksadı, 2 Eki geri geldi, 6 Eki Leipzig polisine bildirildi; kişisel veri etkisi işareti yok; kaynak/motif bilinmiyor (MFRR","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://europeanjournalists.org/blog/2026/10/09/mfrr-condemns-cyberattack-on-mapping-media-freedom/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:EU","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"EU","sgb_id":null,"kev":false},{"id":"jr-east-viewcard-bookoff-6-milyon-kayit-sizinti-2026-10-09","first_seen":"2026-10-09T13:30:26+03:00","updated":"2026-10-09T13:37:18+03:00","title":"JR East ve Bookoff'ta 6'şar milyonu aşkın müşteri kaydı sızmış olabilir","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://ssl4.eir-parts.net/doc/9278/tdnet/2893077/00.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/jr-east-bookoff-6-milyon-musteri-kaydi-sizinti-2026.html","summary":"Japonya'da JR East ile Bookoff, 9 Ekim 2026'da ayrı ayrı yaklaşık 6'şar milyon müşteri kaydının sızmış olabileceğini açıkladı; kart numaraları etkilenmedi.","tags":["country:JP","sgh_published","sgh_shared_on_x"],"entity":"JR East ve Bookoff","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"springfield-public-schools-ma-kredi-izleme-genisletti-2026-10-09","first_seen":"2026-10-09T13:30:26+03:00","updated":"2026-10-09T13:30:26+03:00","title":"ABD (Massachusetts): Springfield Public Schools siber saldırı sonrası kredi izleme hizmetini genişletti; uzun süreli çalışanlar, emekliler ve gönüllüler de etkilenenler arasında (WWLP / MassLive / Wes","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"US","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1288","first_seen":"2026-10-09T13:20:38+03:00","updated":"2026-10-09T17:14:39+03:00","title":"SGB TR-26-1288: TMT Makine - Talassoft Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"TMT Makine Sanayi ve Ticaret Ltd. Şti.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1288","cve":["CVE-2026-92085"],"cvss":3.1,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/tmt-makine-talassoft-guvenlik-bildirimi-tr-26-1288-sgb.html","summary":"TMT Makine Sanayi ve Ticaret Ltd. Şti. tarafından geliştirilen Talassoft Endüstriyel Yönetim Yazılımı ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az V16.0.1 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"TMT Makine Sanayi ve Ticaret Ltd. Şti.","affected_products":["Talassoft Endüstriyel Yönetim Yazılımı"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1288","kev":false},{"id":"corum-il-saglik-hastaneler-bilgi-islem-sistemi-coktu-2026-10-09","first_seen":"2026-10-09T13:01:32+03:00","updated":"2026-10-10T13:21:45+03:00","title":"Çorum'da hastanelerin bilgi işlem sistemi çöktü, siber saldırı şüphesi var","category":"leak","severity":"critical","turkey_signal":true,"tr_entity":"Çorum","status":"unverified","source_type":"primary","primary_source_url":"https://www.habercim19.com/saglik/corumda-sagliga-siber-saldiri-suphesi/87421","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/corum-hastaneler-bilgi-islem-sistemi-coktu-siber-saldiri-suphesi-2026.html","summary":"Çorum İl Sağlık Müdürlüğü'ne bağlı hastanelerin bilgi işlem sistemi 9 Ekim'de çöktü; yerel basına göre arıza virüs kaynaklı, siber saldırı şüphesi var.","tags":["country:TR","partially_confirmed","sgh_published","sgh_shared_on_x"],"entity":"Çorum","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"TR","sgb_id":null,"kev":false},{"id":"vk-5-7-milyon-kullanici-veritabani-iddiasi-2026-10-09-06381d","first_seen":"2026-10-09T13:01:32+03:00","updated":"2026-10-09T13:01:32+03:00","title":"Rusya VK: yeraltı forumunda 5,7 milyon VK kullanıcı kaydı satış iddiası — teyit yok","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:RU","desk_skipped","origin_x_tip"],"entity":"Rusya VK","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"RU","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1287","first_seen":"2026-10-09T12:45:39+03:00","updated":"2026-10-09T17:14:39+03:00","title":"SGB TR-26-1287: Sipay Elektronik - PrestaShop Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Sipay Elektronik Para ve Ödeme Hizmetleri A.Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1287","cve":["CVE-2026-86405"],"cvss":3.1,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sipay-prestashop-sanal-pos-guvenlik-bildirimi-tr-26-1287-sgb.html","summary":"Sipay Elektronik Para ve Ödeme Hizmetleri A.Ş. tarafından geliştirilen PrestaShop Sanal POS Modülü ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az v26.9.1 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Sipay Elektronik Para ve Ödeme Hizmetleri A.Ş.","affected_products":["PrestaShop Sanal POS Modülü"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"finance","country":"TR","sgb_id":"TR-26-1287","kev":false},{"id":"skyticket-adventure-14-milyon-musteri-kaydi-sizinti-2026-2026-10-09","first_seen":"2026-10-09T12:25:55+03:00","updated":"2026-10-28T19:12:00+03:00","title":"Japon seyahat sitesi skyticket'ten 14,64 milyon müşteri kaydı sızmış olabilir","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://skyticket.jp/news/maintenance/67603/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/skyticket-adventure-14-milyon-musteri-kaydi-sizinti-2026.html","summary":"Adventure Inc., skyticket sistemlerine yetkisiz erişim sonucu yaklaşık 14,64 milyon müşteri kaydının dışarı sızdığını ya da sızmış olabileceğini açıkladı.","tags":["country:JP","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"14,64 milyon müşteri","sector":"hospitality","country":"JP","sgb_id":null,"kev":false},{"id":"scouts-de-france-71k-uye-veritabani-iddiasi-2026-10-09","first_seen":"2026-10-09T12:25:55+03:00","updated":"2026-10-09T12:25:55+03:00","title":"Scouts de France: yeraltı forumunda 71 bin kayıtlık üye veritabanı iddiası (reşit olmayanlar olası) — teyit yok","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","desk_skipped","origin_x_tip"],"entity":"Scouts de France","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"71 bin kayıt","sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1286","first_seen":"2026-10-09T12:00:27+03:00","updated":"2026-10-09T15:51:56+03:00","title":"SGB TR-26-1286: Sipay Elektronik - OpenCart Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Sipay Elektronik Para ve Ödeme Hizmetleri A.Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1286","cve":["CVE-2026-85531"],"cvss":3.1,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/sipay-opencart-sanal-pos-guvenlik-bildirimi-tr-26-1286-sgb.html","summary":"Sipay Elektronik Para ve Ödeme Hizmetleri A.Ş. tarafından geliştirilen OpenCart Sanal POS Modülü ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az v26.9.1 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Sipay Elektronik Para ve Ödeme Hizmetleri A.Ş.","affected_products":["OpenCart Sanal POS Modülü"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"finance","country":"TR","sgb_id":"TR-26-1286","kev":false},{"id":"citrix-netscaler-cve-2026-107406-saml-ctx697191-2026-10-09","first_seen":"2026-10-09T11:38:09+03:00","updated":"2026-10-09T13:30:26+03:00","title":"Citrix NetScaler ADC/Gateway CVE-2026-107406 (CVSS 9.5) SAML bellek taşması — bülten CTX697191; istismar kanıtı yok","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/citrix-patches-critical-netscaler-flaw.html","cve":["CVE-2026-107406"],"cvss":9.5,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":"Citrix NetScaler ADC/Gateway","affected_products":[],"patch_status":null,"exploited":false,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"south-padre-island-edc-bec-fake-account-2026-10-09","first_seen":"2026-10-09T11:38:09+03:00","updated":"2026-10-16T03:48:00+03:00","title":"South Padre Island EDC: siber saldırı sonucu para sahte hesaba gönderildi, federal soruşturma sürüyor (KRGV)","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"emergency-paisa-india-3-2m-claim-2026-10-09-520b70","first_seen":"2026-10-09T07:48:00+03:00","updated":"2026-10-09T07:48:00+03:00","title":"Hindistan Emergency Paisa (emergencypaisa.com) — forumda ~3.2M+ müşteri kaydı / 18GB CSV iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:IN","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"3.2M+ müşteri","sector":null,"country":"IN","sgb_id":null,"kev":false},{"id":"srg-leaked-chats-lawfirm-navy-2026-10-09-589d80","first_seen":"2026-10-09T07:23:24+03:00","updated":"2026-10-15T09:18:53+03:00","title":"Silent Ransom Group: sızdırılan sohbetlerde ABD hukuk bürolarına fiziksel sızma + denizci casusluk planı iddiası","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","origin_x_tip"],"entity":"Silent Ransom Group","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"legal","country":"US","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1285","first_seen":"2026-10-09T07:21:21+03:00","updated":"2026-10-09T11:51:35+03:00","title":"SGB TR-26-1285: Red Hat Keycloak Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Red Hat Keycloak","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1285","cve":["CVE-2026-107623","CVE-2026-107604"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/red-hat-keycloak-guvenlik-bildirimi-tr-26-1285-sgb.html","summary":"Red Hat Keycloak'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine Keycloak güncellemelerini ivedilikle yapmalarını önermektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Red Hat Keycloak","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1285","kev":false},{"id":"sgb:TR-26-1284","first_seen":"2026-10-09T07:18:52+03:00","updated":"2026-10-09T11:51:35+03:00","title":"SGB TR-26-1284: FFmpeg Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"FFmpeg","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1284","cve":["CVE-2026-107698","CVE-2026-107697","CVE-2026-107696","CVE-2026-107695"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ffmpeg-guvenlik-zafiyeti-tr-26-1284-sgb.html","summary":"FFmpeg'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanları gözden geçirmelerini ve gerekli güncellemeleri yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"FFmpeg","affected_products":[],"patch_status":"not_available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1284","kev":false},{"id":"sgb:TR-26-1283","first_seen":"2026-10-09T07:15:13+03:00","updated":"2026-10-09T11:02:00+03:00","title":"SGB TR-26-1283: OpenStack Mistral Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"OpenStack Mistral","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1283","cve":["CVE-2026-93861","CVE-2026-93860","CVE-2026-93858"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/openstack-mistral-guvenlik-bildirimi-tr-26-1283-sgb.html","summary":"OpenStack Mistral'da güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanı gözden geçirmelerini ve gerekli güncellemeleri yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"OpenStack Mistral","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1283","kev":false},{"id":"sgb:TR-26-1282","first_seen":"2026-10-09T07:13:28+03:00","updated":"2026-10-09T11:02:00+03:00","title":"SGB TR-26-1282: cPanel WP Toolkit Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"cPanel WP Toolkit","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1282","cve":["CVE-2026-93699"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/cpanel-wp-toolkit-guvenlik-bildirimi-tr-26-1282-sgb.html","summary":"cPanel WP Toolkit bileşeninde güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"cPanel WP Toolkit","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1282","kev":false},{"id":"sgb:TR-26-1281","first_seen":"2026-10-09T07:11:16+03:00","updated":"2026-10-09T11:02:00+03:00","title":"SGB TR-26-1281: Zimbra Collaboration Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Zimbra Collaboration","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1281","cve":["CVE-2026-50054","CVE-2026-50055","CVE-2026-10631"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/zimbra-collaboration-guvenlik-bildirimi-tr-26-1281-sgb.html","summary":"Zimbra Collaboration ürününde güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümandaki güvenlik önerilerini inceleyerek gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Zimbra Collaboration","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1281","kev":false},{"id":"sgb:TR-26-1280","first_seen":"2026-10-09T07:07:40+03:00","updated":"2026-10-09T10:58:00+03:00","title":"SGB TR-26-1280: Microsoft Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Microsoft Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1280","cve":["CVE-2026-94510","CVE-2026-88131","CVE-2026-96207"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/microsoft-coklu-urun-guvenlik-bildirimi-tr-26-1280-sgb.html","summary":"Bazı Microsoft ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine, yayınlanan güvenlik önerilerini incelemeleri ve gerekli önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Microsoft Çoklu Ürün","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1280","kev":false},{"id":"sgb:TR-26-1279","first_seen":"2026-10-09T07:03:57+03:00","updated":"2026-10-09T10:58:00+03:00","title":"SGB TR-26-1279: Brocade ASCG Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Brocade ASCG","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1279","cve":["CVE-2026-85423","CVE-2026-85490","CVE-2026-85489","CVE-2026-85488","CVE-2026-85487","CVE-2026-85486","CVE-2026-85422","CVE-2026-85421"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/brocade-ascg-guvenlik-bildirimi-tr-26-1279-sgb.html","summary":"Brocade ASCG ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanları incelemelerini ve ürünlerini güncellemelerini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Brocade ASCG","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1279","kev":false},{"id":"sgb:TR-26-1278","first_seen":"2026-10-09T06:59:32+03:00","updated":"2026-10-09T10:58:00+03:00","title":"SGB TR-26-1278: Malcolm Network Analysis Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1278","cve":["CVE-2026-107337","CVE-2026-107334","CVE-2026-107335","CVE-2026-107361","CVE-2026-107362","CVE-2026-107333","CVE-2026-107336"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/malcolm-network-analysis-guvenlik-zafiyeti-tr-26-1278-sgb.html","summary":"Malcolm Network Analysis yazılımında güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":null,"affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1278","kev":false},{"id":"sgb:TR-26-1277","first_seen":"2026-10-09T06:52:26+03:00","updated":"2026-10-09T10:58:00+03:00","title":"SGB TR-26-1277: IBM Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"IBM Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1277","cve":["CVE-2026-75875","CVE-2026-14269","CVE-2026-80381","CVE-2026-82895","CVE-2026-82900","CVE-2026-81932","CVE-2026-84032","CVE-2026-84035","CVE-2026-84057","CVE-2026-84058","CVE-2026-84198","CVE-2026-84209","CVE-2026-84230","CVE-2026-84246","CVE-2026-84247","CVE-2026-84249","CVE-2026-84875","CVE-2026-84891","CVE-2026-87980"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ibm-coklu-urun-guvenlik-bildirimi-tr-26-1277-sgb.html","summary":"Bazı IBM ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, IBM'in ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"IBM Çoklu Ürün","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1277","kev":false},{"id":"ffjda-french-judo-federation-43k-claim-2026-10-09-d51601","first_seen":"2026-10-09T06:29:42+03:00","updated":"2026-10-09T07:48:00+03:00","title":"Fransa Judo Federasyonu (FFJDA / ffjudo.com) — forumda ~43K kayıt iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"43K kayıt","sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"teamlinkt-8-2m-claim-2026-10-09-a48eed","first_seen":"2026-10-09T06:10:00+03:00","updated":"2026-10-15T09:18:53+03:00","title":"TeamLinkt spor yönetim platformu: tehdit aktörü 8,2 milyon kullanıcı kaydını sattığını iddia ediyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CA","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"8,2 milyon kullanıcı","sector":null,"country":"CA","sgb_id":null,"kev":false},{"id":"eau-coeur-essonne-55k-claim-2026-10-09-f8c115","first_seen":"2026-10-09T03:43:52+03:00","updated":"2026-10-15T09:18:53+03:00","title":"Eau Cœur d'Essonne (FR kamu su) — tehdit aktörü 55K müşteri kaydı ücretsiz dump iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"55K müşteri","sector":"government","country":"FR","sgb_id":null,"kev":false},{"id":"mi-teleferico-bolivia-11k-claim-2026-10-08-3bcd7d","first_seen":"2026-10-09T03:43:52+03:00","updated":"2026-10-15T09:18:53+03:00","title":"Mi Teleférico (Bolivya devlet teleferik) ~11K kayıt sızıntı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:BO","desk_skipped","origin_x_tip"],"entity":"Mi Teleférico","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"11K kayıt","sector":"government","country":"BO","sgb_id":null,"kev":false},{"id":"jcpenney-db-claim-2026-10-08-1fe0bc","first_seen":"2026-10-09T02:18:00+03:00","updated":"2026-10-09T06:29:42+03:00","title":"JCPenney veri tabanı satış iddiası (>5 GB kimlik/SSN görselleri)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","origin_x_tip"],"entity":"JCPenney","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"5 GB","sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"aac-austria-209gb-claim-2026-10-08-33dfe1","first_seen":"2026-10-09T02:18:00+03:00","updated":"2026-10-09T06:29:42+03:00","title":"AAC (Aerospace & Advanced Composites, Avusturya) 209 GB dump satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:AT","desk_skipped","origin_x_tip"],"entity":"AAC","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"209 GB","sector":null,"country":"AT","sgb_id":null,"kev":false},{"id":"ginkgo-bioworks-legacy-cloud-access-2026-10-08","first_seen":"2026-10-09T02:18:00+03:00","updated":"2026-10-09T06:29:42+03:00","title":"Ginkgo Bioworks: eski biyoguvenlik bulut ortamında yetkisiz erişim (şirket açıklaması iddiası, 8 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.pubt.io/view/8AA94BDB5045FD6ED37F813E06B90D3D96DB254D","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"US","sgb_id":null,"kev":false},{"id":"bern-emeklilik-fonlari-yazilim-tedarikcisi-2026-10-09","first_seen":"2026-10-09T00:00:00+03:00","updated":"2026-10-09T17:15:05+03:00","title":"İsviçre Bern emeklilik fonları: yazılım tedarikçisine siber saldırı, binlerce emekli etkilenmiş olabilir (swissinfo / Escudo Digital, 9 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"tcs-kaynak-kod-ihlali-iddiasi-2026-10-09","first_seen":"2026-10-09T00:00:00+03:00","updated":"2026-10-09T17:15:05+03:00","title":"Tata Consultancy Services kaynak kod ihlali iddiası (yeraltı forumu, ThreatMon 9 Eki 13:20Z)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"japonya-fsa-ic-cip-kimlik-dogrulama-erken-gecis-2026-10-09","first_seen":"2026-10-09T00:00:00+03:00","updated":"2026-10-11T17:52:00+03:00","title":"Japonya FSA: bankalar ve finans kuruluşları kimlik fotoğrafı yerine IC çip okumaya Nisan 2027'yi beklemeden geçsin (Times Car 1,6 milyon belge görüntüsü sızıntısı sonrası)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.zyphe.com/resources/news/japan-fsa-ic-chip-verification-october-2026","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:JP","desk_skipped"],"entity":"Japonya FSA","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"JP","sgb_id":null,"kev":false},{"id":"claims-credicuotas-momentum-sbobet-2026-10-08-0cb18f","first_seen":"2026-10-08T22:40:28+03:00","updated":"2026-10-09T02:18:00+03:00","title":"X iddiaları: Credicuotas AR 14,7M , Momentum Telecom US 7,5M , SBOBET TH","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"telecom","country":null,"sgb_id":null,"kev":false},{"id":"openai-rusya-iran-sahte-cephe-etki-operasyonlari-2026-10-08","first_seen":"2026-10-08T21:18:00+03:00","updated":"2026-10-09T08:44:41+03:00","title":"OpenAI, Rusya ve İran kaynaklı iki sahte cephe etki operasyonunu engelledi","category":"fraud","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://openai.com/index/disrupting-ai-enabled-false-front-operations","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/openai-rusya-iran-sahte-cephe-etki-operasyonlari-2026.html","summary":"OpenAI, Rusya ve İran kaynaklı iki etki operasyonunu engelledi. Ağlar sahte gazeteciler ve sahte bir düşünce kuruluşuyla ana akım medyaya da sızdı.","tags":["country:GLOBAL","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"italya-disisleri-web-sitesi-siber-saldiri-2026-10-08","first_seen":"2026-10-08T21:18:00+03:00","updated":"2026-10-11T21:24:00+03:00","title":"İtalya Dışişleri Bakanlığı web sitesinin siber saldırıya hedef olduğunu açıkladı (AA, 8 Eki) — 1639'daki İtalya DDoS iddialarının resmi yankısı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:IT","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":"IT","sgb_id":null,"kev":false},{"id":"sungrow-isolarcloud-yetkilendirme-atlatma-jakkaru-2026-10-08","first_seen":"2026-10-08T17:03:53+03:00","updated":"2026-10-08T17:03:53+03:00","title":"Sungrow iSolarCloud: login_type=5 ile parolasız oturum açma/yetki atlatma — yönetici hesapları, ~470 bin Avrupa güneş sistemi (Jakkaru araştırması; Sungrow 1 günde yama)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://jakkaru.de/de/artikel/sungrow-vulnerability-exposes-gigawatts-worldwide","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:DE/CN","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"etiyopya-saglik-bakanligi-65gb-iddia-2026-10-08","first_seen":"2026-10-08T17:03:53+03:00","updated":"2026-10-08T21:18:00+03:00","title":"Etiyopya Sağlık Bakanlığı: forumda 65 GB sağlık bilgi sistemi yedeği ücretsiz yayımlandı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:ET","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"65 GB","sector":"healthcare","country":"ET","sgb_id":null,"kev":false},{"id":"portekiz-sirp-gelistirme-sunucusu-veri-2026-10-08","first_seen":"2026-10-08T16:37:00+03:00","updated":"2026-10-10T12:29:14+03:00","title":"Portekiz istihbaratı SIRP, tedarikçi sunucusuna saldırıyı doğruladı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://expresso.pt/ciberseguranca/2026-10-08-ciberataque-a-empresa-informatica-compromete-dados-nao-classificados-das-secretas-portuguesas-f14b983b","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/portekiz-istihbarat-sirp-tedarikci-sunucusu-veri-sizintisi-2026.html","summary":"Portekiz istihbarat sistemi SIRP, sitelerini tasarlayan şirketin test sunucusuna yapılan saldırıda gizli olmayan verilerin ele geçirildiğini açıkladı.","tags":["country:PT","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"PT","sgb_id":null,"kev":false},{"id":"lawson-id-2-milyon-musteri-kaydi-sizinti-2026-2026-10-09","first_seen":"2026-10-08T16:37:00+03:00","updated":"2026-10-09T19:57:34+03:00","title":"Japon market zinciri Lawson'da 2,15 milyon müşteri kaydı sızdı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.lawson.co.jp/contents/cont07/1533174_3310.html","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/lawson-id-2-milyon-musteri-kaydi-sizinti-2026.html","summary":"Lawson, Inc., hesap hizmeti Lawson ID'ye yapılan yetkisiz erişimde 2,15 milyon kayıtta e-posta adresi ve ad-soyad bilgilerinin sızdığını açıkladı.","tags":["country:JP","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"2,15 milyon müşteri","sector":"retail","country":"JP","sgb_id":null,"kev":false},{"id":"safepay-t-systems-iddia-2026-10-08","first_seen":"2026-10-08T16:37:00+03:00","updated":"2026-10-08T17:03:53+03:00","title":"SafePay, T-Systems'ı sızıntı sitesine ekledi (Cybernews)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["SafePay"],"sgh_url":null,"summary":"SafePay fidye yazılımı grubu, T-Systems kurumunu kurbanları arasında listelediğini iddia ediyor; iddia bağımsız olarak doğrulanmadı.","tags":["country:DE"],"entity":"T-Systems","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"DE","sgb_id":null,"kev":false},{"id":"libya-csc-gov-ly-vatandas-hizmet-merkezi-iddia-2026-10-08","first_seen":"2026-10-08T15:33:00+03:00","updated":"2026-10-08T15:33:00+03:00","title":"Libya: tehdit aktörü, Ulusal Birlik Hükümeti'ne bağlı Vatandaş Hizmet Merkezi (csc.gov.ly) ağına sızdığını iddia ediyor; örnek veri vaat edildi — X 8 Eki 12:00Z","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:LY","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"LY","sgb_id":null,"kev":false},{"id":"gta6-cyberleek-extended-leek-iddia-2026-10-08","first_seen":"2026-10-08T14:56:29+03:00","updated":"2026-10-09T06:08:00+03:00","title":"GTA 6: Cyberleek «An Extended Leek» adlı 24 dakikalık yeni sızıntı videosu paylaştı (cutscene/oynanış iddiası; doğrulanmadı) — X 8 Eki 11:42Z","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":"GTA 6","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1276","first_seen":"2026-10-08T14:26:12+03:00","updated":"2026-10-09T07:48:00+03:00","title":"SGB TR-26-1276: Caz Bilişim - Advancity ALMS Cloud Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Caz Bilişim Hizmetleri Ticaret Anonim Şirketi","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1276","cve":["CVE-2026-12859"],"cvss":3.1,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/advancity-alms-cloud-guvenlik-zafiyeti-tr-26-1276-sgb.html","summary":"Caz Bilişim Hizmetleri Ticaret Anonim Şirketi tarafından geliştirilen Advancity ALMS Cloud ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, üretici tarafından ilgili zafiyetin giderilmemesinden dolayı Advancity ALMS Cloud ürününü kullananlara muadil başka bir ürün kullanmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Caz Bilişim Hizmetleri Ticaret Anonim Şirketi","affected_products":["Advancity ALMS Cloud"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1276","kev":false},{"id":"jalisco-eyalet-hukumeti-veri-iddia-2026-10-08","first_seen":"2026-10-08T14:23:40+03:00","updated":"2026-10-08T14:23:40+03:00","title":"Meksika: Bir tehdit aktörü yeraltı forumunda Jalisco Eyalet Hükümeti (jalisco.gob.mx) verilerini ele geçirdiğini iddia etti; örnekte vatandaş kayıtları gösteriliyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:MX","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"MX","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1275","first_seen":"2026-10-08T13:33:42+03:00","updated":"2026-10-09T07:48:00+03:00","title":"SGB TR-26-1275: İzometri Bilişim - eimzamip Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"İzometri Bilişim Hizmetleri İç ve Dış Tic. Ltd. Şti.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1275","cve":["CVE-2026-91844","CVE-2026-89290"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/izometri-eimzamip-guvenlik-zafiyeti-tr-26-1275-sgb.html","summary":"İzometri Bilişim Hizmetleri İç ve Dış Tic. Ltd. Şti. tarafından geliştirilen eimzamip ürününde zafiyetler tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 1.6.7 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"İzometri Bilişim Hizmetleri İç ve Dış Tic. Ltd. Şti.","affected_products":["eimzamip"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1275","kev":false},{"id":"assurimo-fr-954k-iddia-2026-10-08","first_seen":"2026-10-08T13:20:00+03:00","updated":"2026-10-08T21:18:00+03:00","title":"Fransız çevrimiçi sigorta platformu Assurimo'dan yaklaşık 954 bin kaydın yeraltı forumunda satışa çıkarıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"insurance","country":"FR","sgb_id":null,"kev":false},{"id":"kore-banka-hacker-claude-code-ifsa-2026-10-08","first_seen":"2026-10-08T13:20:00+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Shinhan, KB Kookmin ve Hana Bank saldırılarının arkasındaki kişinin Claude Code oturumlarını açıkta bırakıp kendini ifşa ettiği iddiası (Maoming, Çin; 'YY')","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"KB Kookmin ve Hana Bank","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"b-20261006-1209-olive-young-20m-claim","first_seen":"2026-10-08T12:31:40+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Olive Young (Güney Kore) 20,8 milyon müşteri kaydı sızıntısı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"20,8 milyon müşteri","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261006-1209-samsung-579gb-trustzone-claim","first_seen":"2026-10-08T12:31:40+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Samsung 579 GB TrustZone ve hesap kaynak kodu sızıntısı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"579 GB","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"movimiento-antorchista-mx-596bin-iddia-2026-10-08","first_seen":"2026-10-08T12:31:40+03:00","updated":"2026-10-08T12:31:40+03:00","title":"Meksika Movimiento Antorchista (Antorcha Revolucionaria) üye kaydından 596.652 Meksika vatandaşının verisinin yeraltı forumunda satışa çıkarıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:MX","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"MX","sgb_id":null,"kev":false},{"id":"qilin-japonya-npa-53-sirket-2026-10-08","first_seen":"2026-10-08T12:01:37+03:00","updated":"2026-10-10T04:13:22+03:00","title":"Japonya Ulusal Polis Ajansı (NPA): Qilin fidye grubu Japonya'da 53 şirketi vurdu (Nisan 2023'ten beri; dünya genelinde ~4 bin) — Sankei/Kyodo, 8 Eki 2026","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.sankei.com/article/20261008-AI6NGFYRU5O5ZKQ4FLKED43MFE/","cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":null,"tags":["country:JP","desk_skipped","origin_x_tip"],"entity":"Japonya Ulusal Polis Ajansı","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1274","first_seen":"2026-10-08T11:58:27+03:00","updated":"2026-10-09T06:29:42+03:00","title":"SGB TR-26-1274: AKIN Yazılım - MyRezzta Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"AKIN Yazılım Bilgisayar İthalat İhracat Sanayi ve Ticaret Ltd.Şti.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1274","cve":["CVE-2026-19218"],"cvss":3.1,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/akinsoft-myrezzta-guvenlik-zafiyeti-tr-26-1274-sgb.html","summary":"AKIN Yazılım Bilgisayar İthalat İhracat Sanayi ve Ticaret Ltd.Şti. tarafından geliştirilen MyRezzta ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 2.07.01 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"AKIN Yazılım Bilgisayar İthalat İhracat Sanayi ve Ticaret Ltd.Şti.","affected_products":["MyRezzta"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1274","kev":false},{"id":"sgb:TR-26-1273","first_seen":"2026-10-08T11:44:00+03:00","updated":"2026-10-09T06:29:42+03:00","title":"SGB TR-26-1273: AKIN Yazılım - AKINSOFT WOLVOX Kontrol Paneli Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"AKIN Yazılım Bilgisayar İthalat İhracat Sanayi ve Ticaret Ltd.Şti.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1273","cve":["CVE-2026-92555"],"cvss":9.1,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/akinsoft-wolvox-kontrol-paneli-guvenlik-zafiyeti-tr-26-1273-sgb.html","summary":"AKIN Yazılım Bilgisayar İthalat İhracat Sanayi ve Ticaret Ltd.Şti. tarafından geliştirilen AKINSOFT WOLVOX Kontrol Paneli ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az S26.02.26 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"AKIN Yazılım Bilgisayar İthalat İhracat Sanayi ve Ticaret Ltd.Şti.","affected_products":["AKINSOFT WOLVOX Kontrol Paneli"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1273","kev":false},{"id":"sgb:TR-26-1272","first_seen":"2026-10-08T11:22:00+03:00","updated":"2026-10-09T06:29:42+03:00","title":"SGB TR-26-1272: AKIN Yazılım - OctoCloud Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"AKIN Yazılım Bilgisayar İthalat İhracat Sanayi ve Ticaret Ltd.Şti.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1272","cve":["CVE-2026-19083"],"cvss":8.8,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/akinsoft-octocloud-guvenlik-zafiyeti-tr-26-1272-sgb.html","summary":"AKIN Yazılım Bilgisayar İthalat İhracat Sanayi ve Ticaret Ltd.Şti. tarafından geliştirilen OctoCloud ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 1.12.07 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"AKIN Yazılım Bilgisayar İthalat İhracat Sanayi ve Ticaret Ltd.Şti.","affected_products":["OctoCloud"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":"TR-26-1272","kev":false},{"id":"vmware-vmxnet3-cve-2026-59346-poc-2026-10-08","first_seen":"2026-10-08T11:14:00+03:00","updated":"2026-10-08T11:14:00+03:00","title":"VMware VMXNET3 kritik tamsayı taşması CVE-2026-59346 için açık PoC yayımlandı (misafirden ana makineye kod çalıştırma)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://cybersecuritynews.com/vmware-vmxnet3-flaw-poc/","cve":["CVE-2026-59346"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"yandex-sasovo-dc-yangin-kesinti-2026-10-08","first_seen":"2026-10-08T10:05:23+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Yandex Sasovo (Ryazan) veri merkezinde yangın/olay: merkez tamamen durdu, bazı servisler erişilemez olabilir; Yandex Cloud ru-central1-b elektrik kesintisi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.interfax.ru/russia/1121019","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:RU"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"RU","sgb_id":null,"kev":false},{"id":"tensorlake-npm-shai-hulud-2026-10-08","first_seen":"2026-10-08T10:05:23+03:00","updated":"2026-10-09T03:43:52+03:00","title":"Tensorlake npm paketi ele geçirildi; Shai-Hulud kimlik bilgisi çalan solucan dağıtıldı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/tensorlake-npm-package-compromised-to.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ntt-docomo-d-point-110m-sale-claim-2026-10-08","first_seen":"2026-10-08T10:05:23+03:00","updated":"2026-10-09T06:08:00+03:00","title":"'wulen' adlı aktör NTT DOCOMO d POINT sadakat programına ait 110M kayıt sunduğunu öne sürüyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:JP","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"110M kayıt","sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"mypcp-us-dealer-db-sale-claim-2026-10-08","first_seen":"2026-10-08T08:30:53+03:00","updated":"2026-10-09T06:08:00+03:00","title":"MyPCP (ABD bayi müşteri programı, mypcp.us): 5M+ kayıtlık müşteri veritabanı satış iddiası (, 8 Eki 2026 04:59Z)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped","origin_x_tip"],"entity":"MyPCP","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"5M+ kayıt","sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"green-clinic-ruston-la-cyberattack-2026-10-08","first_seen":"2026-10-08T08:30:53+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Green Clinic (Ruston, Louisiana, ABD): siber saldırı operasyonları aksattı, hasta kayıtları tehdit altında (Lincoln Parish Journal, «Sources:», 8 Eki 2026 01:17Z)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":"Green Clinic","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"US","sgb_id":null,"kev":false},{"id":"wannacry-bitcoin-ransom-moved-2026-10-07","first_seen":"2026-10-08T08:30:53+03:00","updated":"2026-10-09T06:08:00+03:00","title":"WannaCry (2017) fidye bitcoinleri hareket etti (Mashable, 7 Eki 2026 06:17Z)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:INT"],"entity":"WannaCry","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"jubelio-id-data-source-sale-claim-2026-10-08","first_seen":"2026-10-08T08:00:11+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Jubelio (Endonezya e-ticaret SaaS): 17 GB veri + 6 GB kaynak kodu satış iddiası (, 8 Eki 2026 03:59Z)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:ID","desk_skipped","origin_x_tip"],"entity":"Jubelio","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"17 GB","sector":"retail","country":"ID","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1271","first_seen":"2026-10-08T07:16:33+03:00","updated":"2026-10-08T10:57:49+03:00","title":"SGB TR-26-1271: ImageMagick Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"SGB ImageMagick","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1271","cve":["CVE-2026-106566","CVE-2026-107210","CVE-2026-107209","CVE-2026-107208","CVE-2026-106580","CVE-2026-106579","CVE-2026-106578","CVE-2026-106577","CVE-2026-106576","CVE-2026-106575","CVE-2026-106574","CVE-2026-106573","CVE-2026-106572","CVE-2026-106571","CVE-2026-106570","CVE-2026-106569","CVE-2026-106568","CVE-2026-106567"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/imagemagick-guvenlik-zafiyeti-tr-26-1271-sgb.html","summary":"ImageMagick yazılımında güvenlik zafiyetleri tespit edildi. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine dokümanını gözden geçirmelerini ve gerekli güncellemeleri yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"SGB ImageMagick","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1271","kev":false},{"id":"sgb:TR-26-1270","first_seen":"2026-10-08T07:14:32+03:00","updated":"2026-10-08T10:57:49+03:00","title":"SGB TR-26-1270: Brocade Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Brocade Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1270","cve":["CVE-2026-5048","CVE-2026-87683","CVE-2026-87682","CVE-2026-87681","CVE-2026-87680","CVE-2026-87679","CVE-2026-87676","CVE-2026-87686","CVE-2026-94578","CVE-2026-87659","CVE-2026-87671","CVE-2026-87684","CVE-2026-87674","CVE-2026-87673","CVE-2026-87687","CVE-2026-87685","CVE-2026-87688","CVE-2026-87677","CVE-2026-94586","CVE-2026-94581","CVE-2026-94577","CVE-2026-87664","CVE-2026-5049","CVE-2026-5047"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/brocade-coklu-urun-guvenlik-bildirimi-tr-26-1270-sgb.html","summary":"Bazı Brocade ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanları incelemelerini ve ürünlerini güncellemelerini tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Brocade Çoklu Ürün","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1270","kev":false},{"id":"sgb:TR-26-1268","first_seen":"2026-10-08T07:04:53+03:00","updated":"2026-10-08T10:57:49+03:00","title":"SGB TR-26-1268: Splunk Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Splunk","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1268","cve":["CVE-2026-76264","CVE-2026-76286","CVE-2026-76285","CVE-2026-76284","CVE-2026-76283","CVE-2026-76282","CVE-2026-76281","CVE-2026-76280","CVE-2026-76279","CVE-2026-76278","CVE-2026-76277","CVE-2026-76276","CVE-2026-76275","CVE-2026-76274","CVE-2026-76273","CVE-2026-76272","CVE-2026-76271","CVE-2026-76270","CVE-2026-76269","CVE-2026-76268","CVE-2026-76267","CVE-2026-76266","CVE-2026-76265"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/splunk-guvenlik-bildirimi-tr-26-1268-sgb.html","summary":"Splunk bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Splunk","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1268","kev":false},{"id":"sgb:TR-26-1267","first_seen":"2026-10-08T07:03:00+03:00","updated":"2026-10-08T10:57:49+03:00","title":"SGB TR-26-1267: Cisco Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Cisco Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1267","cve":["CVE-2026-20038","CVE-2026-76472","CVE-2026-76467","CVE-2026-76470","CVE-2026-76469","CVE-2026-76468","CVE-2026-76464","CVE-2026-76463","CVE-2026-76501","CVE-2026-76500","CVE-2026-76498","CVE-2026-76499","CVE-2026-76486","CVE-2026-76488","CVE-2026-76484","CVE-2026-76485","CVE-2026-76483","CVE-2026-76482","CVE-2026-76480","CVE-2026-76458","CVE-2026-76459","CVE-2026-76471","CVE-2026-76455","CVE-2026-76457","CVE-2026-76456","CVE-2026-76465","CVE-2026-101886","CVE-2026-76454","CVE-2026-76453","CVE-2026-76437","CVE-2026-20362","CVE-2026-76452","CVE-2026-20173","CVE-2026-20328","CVE-2026-20032","CVE-2026-20321"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/cisco-coklu-urun-guvenlik-bildirimi-tr-26-1267-sgb.html","summary":"Bazı Cisco ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanların gözden geçirilmesini ve gerekli önlemlerin alınmasıni tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Cisco Çoklu Ürün","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1267","kev":false},{"id":"crowdstrike-artex-kr-finans-2026-10-07","first_seen":"2026-10-08T06:45:00+03:00","updated":"2026-10-12T09:50:08+03:00","title":"CrowdStrike: Güney Kore bankalarına saldırıda ARTEX ve Claude Code kullanıldı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.crowdstrike.com/en-us/blog/unknown-threat-actor-uses-artex-to-target-south-korean-finance/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/crowdstrike-artex-guney-kore-bankalari-2026.html","summary":"CrowdStrike'a göre Güney Kore'deki finans kuruluşlarına yönelik saldırılarda saldırgan, açık kaynak yapay zekâ sızma testi aracı ARTEX'i ve Anthropic'in Claude Code aracını kullandı. Saldırı bilinen bir gruba bağlanmadı.","tags":["country:KR","sgh_published","sgh_shared_on_x"],"entity":"CrowdStrike","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"KR","sgb_id":null,"kev":false},{"id":"myanmar-5bb-broadband-db-sale-claim-2026-10-08","first_seen":"2026-10-08T05:59:28+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Myanmar ISS 5BB Broadband veritabanı satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:MM","origin_x_tip"],"entity":"Myanmar ISS 5BB Broadband","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"MM","sgb_id":null,"kev":false},{"id":"kvkk-7-ekim-2026-omnibus","first_seen":"2026-10-08T05:39:00+03:00","updated":"2026-10-09T02:18:00+03:00","title":"KVKK 17 veri ihlali duyurusu yayımladı: Procat şirketlerinde fidye yazılımı","category":"ransomware","severity":"critical","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.kvkk.gov.tr/Icerik/9029/kamuoyu-duyurusu-veri-ihlali-bildirimi-procat-teknoloji-danismanlik-hizmetleri-anonim-sirketi","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/kvkk-7-ekim-2026-veri-ihlali-duyurulari.html","summary":"KVKK 7 Ekim 2026'da 17 veri ihlali duyurusu yayımladı. Procat şirketleri fidye yazılımı saldırısı bildirdi; GIG Sigorta, 4 Race ve D Elektronik'te çağrı kayıtları etkilendi.","tags":["country:TR","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":null,"kev":false},{"id":"loblaw-oct2-update-2026-10-07","first_seen":"2026-10-08T05:39:00+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Loblaw (Kanada) Mart 2026 ihlali güncellemesi 2 Eki: kapsam ad, adres, telefon, e-posta, doğum tarihi, sadakat no, sipariş ayrıntısı, eksik kart bilgisi; bildirim «önümüzdeki haftalarda»","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.loblaw.ca/en/real-talk-important-information-about-your-account/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CA","desk_skipped"],"entity":"Loblaw","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"CA","sgb_id":null,"kev":false},{"id":"st-andrews-hospital-adelaide-hack-2026-10-07","first_seen":"2026-10-08T05:14:42+03:00","updated":"2026-10-08T14:23:40+03:00","title":"Avustralya'da St Andrew's Hastanesi hasta verilerinin çalındığını doğruladı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://7news.com.au/news/patients-notified-after-personal-data-stolen-in-cyberattack-on-st-andrews-hospital-in-adelaide-c-22986855","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/st-andrews-hastanesi-adelaide-veri-ihlali-2026.html","summary":"Avustralya'nın Adelaide kentindeki özel St Andrew's Hastanesi, siber saldırı sonucu hasta bilgilerinin çalındığını doğrulayarak bildirimlere başladı.","tags":["country:AU","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"AU","sgb_id":null,"kev":false},{"id":"san-luis-potosi-gob-db-claim-2026-10-08","first_seen":"2026-10-08T05:14:42+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Meksika San Luis Potosí eyalet hükümeti veritabanı sızıntı iddiası (, hacktivist forum ilanı)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:MX","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"MX","sgb_id":null,"kev":false},{"id":"qilin-nrw-reul-limbach-resmi-aciklama-2026-10-07","first_seen":"2026-10-08T04:28:42+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Qilin şüphelisinin iadesini Almanya resmen doğruladı: Reul'e göre 4 bin kurum hedef alındı","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.sueddeutsche.de/panorama/cybercrime-nrw-gelingt-schlag-gegen-beruechtigte-russische-hackergruppe-dpa.urn-newsml-dpa-com-20090101-261007-930-803069","cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":"https://siberguvenlikhaber.com/haber/qilin-almanya-resmi-aciklama-reul-limbach-2026.html","summary":"Almanya, Qilin fidye yazılımı şüphelisinin Japonya'dan iadesini resmen doğruladı. Bakan Reul'e göre grup 2024'ten bu yana yaklaşık 4 bin kurumu hedef aldı.","tags":["country:DE/JP","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"tucuman-gov-db-claim-20261008","first_seen":"2026-10-08T03:17:14+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Arjantin Tucumán eyalet hükümeti veritabanı sızıntı iddiası (yeraltı forumu, «90K registros», ~90.000 kayıt)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:AR","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"90.000 kayıt","sector":null,"country":"AR","sgb_id":null,"kev":false},{"id":"ytu-fidye-yazilimi-kvkk-2026-10-07","first_seen":"2026-10-08T02:39:00+03:00","updated":"2026-10-09T13:57:46+03:00","title":"YTÜ'ye fidye yazılımı saldırısı: 140 bin öğrenci etkilenmiş olabilir","category":"ransomware","severity":"critical","turkey_signal":true,"tr_entity":"YTÜ","status":"confirmed","source_type":"official","primary_source_url":"https://www.kvkk.gov.tr/Icerik/9033/kamuoyu-duyurusu-veri-ihlali-bildirimi-yildiz-teknik-universitesi","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/yildiz-teknik-universitesi-fidye-yazilimi-veri-ihlali-2026.html","summary":"Yıldız Teknik Üniversitesinin sunucuları fidye yazılımı saldırısından etkilendi; KVKK'ya göre yaklaşık 140 bin öğrenci ve 4 bin 500 personel etkilenmiş olabilir.","tags":["country:TR","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"YTÜ","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"TR","sgb_id":null,"kev":false},{"id":"lexipol-888-kaynak-kod-claim-2026-10-07","first_seen":"2026-10-08T02:25:00+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Lexipol (ABD kolluk politika/eğitim şirketi) — «888» aktörü Ekim 2026 ihlalinde kaynak kodu çaldığını ve sızdırdığını iddia ediyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":"Lexipol","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"t-mobile-byod-tehdit-claim-2026-10-07","first_seen":"2026-10-08T02:25:00+03:00","updated":"2026-10-09T13:57:46+03:00","title":"Yeni fidye grubu BYOD, T-Mobile'a ihlal tehdidi","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"censys-iphone-kripto-kit-acik-sunucu-2026-10-07","first_seen":"2026-10-08T02:25:00+03:00","updated":"2026-10-09T06:08:00+03:00","title":"Censys: Çince konuşan operatörün iPhone kripto hırsızlık kiti sunucusu açıkta — 11 kurtarma ifadesi, 179 cihaz, iOS 26 istismar geliştirme","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Censys","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"telecom","country":null,"sgb_id":null,"kev":false},{"id":"gate-crypto-byod-claim-2026-10-08","first_seen":"2026-10-08T02:20:23+03:00","updated":"2026-10-09T06:08:00+03:00","title":"BYOD grubu Gate (kripto borsası, SG) kurban listesine ekledi ( recent)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:SG"],"entity":"Gate","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"SG","sgb_id":null,"kev":false},{"id":"monstercloud-pinhasi-edny-wire-fraud-2026-10-07","first_seen":"2026-10-08T01:30:00+03:00","updated":"2026-10-08T15:33:00+03:00","title":"MonsterCloud'un sahibi Zohar Pinhasi, gizlice fidye ödeyip müşterilerden çok daha yüksek ücret aldığı iddiasıyla yargılanıyor","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.justice.gov/usao-edny/pr/owner-florida-ransomware-remediation-company-charged-defrauding-clients","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/monstercloud-zohar-pinhasi-fidye-dolandiricilik-suclamasi-2026.html","summary":"Fidye yazılımı kurtarma şirketi MonsterCloud'un sahibi Zohar Pinhasi, müşterilerden yüksek ücret alıp gizlice fidye ödediği iddiasıyla hâkim karşısına çıktı.","tags":["country:US","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"US","sgb_id":null,"kev":false},{"id":"france-travail-employee-db-62848-claim-2026-10-07-f50ec4","first_seen":"2026-10-08T01:30:00+03:00","updated":"2026-10-09T06:08:00+03:00","title":"France Travail (FR; kamu istihdam kurumu) çalışan veritabanı satışı iddiası — 62.848 satır, ilan başlığı «France Travail September 2026», yalnız çalışan verisi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"62.848 satır","sector":"government","country":"FR","sgb_id":null,"kev":false},{"id":"pwn2own-ireland-2026-day2-2026-10-08-0e9ab5","first_seen":"2026-10-08T00:33:00+03:00","updated":"2026-10-09T13:30:26+03:00","title":"Pwn2Own Ireland 2026 2. gün: Galaxy S26 tek açıkla, NVIDIA Dynamo (40 bin dolar), Home Assistant Green 5 kez, Oracle AI veritabanı 7 açık zinciri, Lexmark yazıcıda DOOM","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/three-teams-demonstrate-remote-hacks-of.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"publica-isvicre-tedarikci-siber-saldiri-veri-sizintisi-2026-10-08","first_seen":"2026-10-08T00:00:00+03:00","updated":"2026-10-09T06:08:00+03:00","title":"İsviçre federal emeklilik kasası Publica, yazılım tedarikçisine yapılan saldırıda veri sızıntısını doğruladı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.admin.ch/de/newnsb/FjG4XOIms04s","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/publica-isvicre-federal-emeklilik-kasasi-siber-saldiri-veri-sizintisi-2026.html","summary":"İsviçre federal emeklilik kasası Publica, dış yazılım tedarikçilerinden birine yapılan siber saldırıda veri sızıntısı yaşandığını 8 Ekim 2026'da doğruladı. İsviçre Federal Savcılığı soruşturma başlattı.","tags":["country:CH","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"CH","sgb_id":null,"kev":false},{"id":"anthropic-oss-scanner-2026-10-08","first_seen":"2026-10-08T00:00:00+03:00","updated":"2026-10-09T07:57:42+03:00","title":"Anthropic açık kaynak projeler için ücretsiz OSS Scanner zafiyet tarayıcısını başlattı","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/anthropic-oss-scanner-acik-kaynak-zafiyet-tarayicisi-2026.html","summary":"Anthropic, açık kaynak projeler için ücretsiz ve isteğe bağlı OSS Scanner'ı başlattı. Katılan projeler en güçlü modellerle periyodik taranacak.","tags":["country:US","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"kev:CVE-2015-5477","first_seen":"2026-10-08T00:00:00+03:00","updated":"2026-10-08T00:00:00+03:00","title":"CISA KEV: ISC BIND (CVE-2015-5477)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5477","cve":["CVE-2015-5477"],"cvss":null,"actor":[],"sgh_url":null,"summary":"CISA, ISC BIND ürünündeki CVE-2015-5477 açığını 2026-10-08 tarihinde bilinen istismar edilen açıklar kataloğuna (KEV) ekledi; ABD federal kurumları için son tarih 2026-10-11.","tags":["cisa_kev","exploited_in_wild"],"entity":"ISC","affected_products":["BIND"],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"kev:CVE-2016-3081","first_seen":"2026-10-08T00:00:00+03:00","updated":"2026-10-08T00:00:00+03:00","title":"CISA KEV: Apache Struts (CVE-2016-3081)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3081","cve":["CVE-2016-3081"],"cvss":null,"actor":[],"sgh_url":null,"summary":"CISA, Apache Struts ürünündeki CVE-2016-3081 açığını 2026-10-08 tarihinde bilinen istismar edilen açıklar kataloğuna (KEV) ekledi; ABD federal kurumları için son tarih 2026-10-11.","tags":["cisa_kev","exploited_in_wild"],"entity":"Apache","affected_products":["Struts"],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"kev:CVE-2023-22894","first_seen":"2026-10-08T00:00:00+03:00","updated":"2026-10-08T00:00:00+03:00","title":"CISA KEV: Strapi Strapi (CVE-2023-22894)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22894","cve":["CVE-2023-22894"],"cvss":null,"actor":[],"sgh_url":null,"summary":"CISA, Strapi Strapi ürünündeki CVE-2023-22894 açığını 2026-10-08 tarihinde bilinen istismar edilen açıklar kataloğuna (KEV) ekledi; ABD federal kurumları için son tarih 2026-10-11.","tags":["cisa_kev","exploited_in_wild"],"entity":"Strapi","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"kev:CVE-2021-3199","first_seen":"2026-10-08T00:00:00+03:00","updated":"2026-10-08T00:00:00+03:00","title":"CISA KEV: ONLYOFFICE Docs (CVE-2021-3199)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3199","cve":["CVE-2021-3199"],"cvss":null,"actor":[],"sgh_url":null,"summary":"CISA, ONLYOFFICE Docs ürünündeki CVE-2021-3199 açığını 2026-10-08 tarihinde bilinen istismar edilen açıklar kataloğuna (KEV) ekledi; ABD federal kurumları için son tarih 2026-10-11.","tags":["cisa_kev","exploited_in_wild"],"entity":"ONLYOFFICE","affected_products":["Docs"],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"kev:CVE-2015-3306","first_seen":"2026-10-08T00:00:00+03:00","updated":"2026-10-08T00:00:00+03:00","title":"CISA KEV: ProFTPD ProFTPD (CVE-2015-3306)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3306","cve":["CVE-2015-3306"],"cvss":null,"actor":[],"sgh_url":null,"summary":"CISA, ProFTPD ProFTPD ürünündeki CVE-2015-3306 açığını 2026-10-08 tarihinde bilinen istismar edilen açıklar kataloğuna (KEV) ekledi; ABD federal kurumları için son tarih 2026-10-11.","tags":["cisa_kev","exploited_in_wild"],"entity":"ProFTPD","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"revolut-680-kimlik-masrafi-reuters-2026-10-07","first_seen":"2026-10-07T23:42:02+03:00","updated":"2026-10-17T13:29:40+03:00","title":"Revolut, sahte taleple verileri gönderilen 680 müşterinin kimlik masrafını karşılayacak","category":"fraud","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.bfmtv.com/economie/replay-emissions/good-morning-business/beatrice-cossa-dumurgier-revolut-revolut-a-obtenu-une-licence-bancaire-en-france-07-10_EN-202610070199.html","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/revolut-680-musteri-kimlik-masrafi-italya-pec-2026.html","summary":"Revolut, sahte bir taleple verilerini hackerlara gönderdiği müşteriler kimlik belgelerini değiştirmek zorunda kalırsa masrafı karşılayacak.","tags":["sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"jeppesen-foreflight-shinyhunters-krebs-2026-10-07","first_seen":"2026-10-07T19:34:50+03:00","updated":"2026-10-07T20:51:01+03:00","title":"ShinyHunters'ın Jeppesen ForeFlight'a şantaj girişimi iddiası","category":"apt","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":["ShinyHunters"],"sgh_url":"https://siberguvenlikhaber.com/haber/jeppesen-foreflight-shinyhunters-boeing-2026.html","summary":"ShinyHunters'ın, Boeing'in sattığı Jeppesen ForeFlight'a şantaj yapmaya çalıştığı iddia edildi. Boeing inceliyor; şirket operasyonlarının etkilenmediğini söyledi.","tags":["country:US/JO","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"yale-university-press-scarlettgroup-claim-2026-10-07","first_seen":"2026-10-07T19:34:50+03:00","updated":"2026-10-07T19:34:50+03:00","title":"Yale University Press — ScarlettGroup iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":"ScarlettGroup, Yale University Press'e ait 64 binden fazla kayıt ele geçirdiğini iddia ediyor.","tags":["country:US","desk_skipped","origin_x_tip"],"entity":"Yale University Press","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":"US","sgb_id":null,"kev":false},{"id":"poellm-botnet-3400-2026-10-07","first_seen":"2026-10-07T19:34:50+03:00","updated":"2026-10-07T19:34:50+03:00","title":"PoeLLM botnet — ~3.400 cihaz (araştırma/lab)","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"lmcache-cve-2026-105192-2026-10-07","first_seen":"2026-10-07T19:34:50+03:00","updated":"2026-10-07T19:34:50+03:00","title":"LMCache CVE-2026-105192 (araştırma/lab açığı)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":["CVE-2026-105192"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"LMCache","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261007-1609-sonicwall-sma1000-cve-2026-102255-cvss10","first_seen":"2026-10-07T16:32:29+03:00","updated":"2026-10-07T16:32:29+03:00","title":"SonicWall SMA1000 kimlik doğrulamasız SSRF açığı CVE-2026-102255 (CVSS 10.0), 6 Eki 2026 hotfix","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-102255"],"cvss":10,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"b-20261007-1509-peoplesbank-idscan-vendor-ihlali","first_seen":"2026-10-07T15:32:01+03:00","updated":"2026-10-07T15:32:01+03:00","title":"PeoplesBank (Holyoke, MA): tedarikçi IDScan.net ihlali bildirimi — MA kaydı 30 Eyl 2026: 23.731 MA sakini (VT 30, IN 1; AcidPeak'e göre toplam 27.624); yetkisiz erişim Nis–Eyl 2026; ad, adres, ehliyet","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":"PeoplesBank","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"b-20261007-1509-flexera-flexnet-lmadmin-cve-2026-19572","first_seen":"2026-10-07T15:32:01+03:00","updated":"2026-10-07T15:32:01+03:00","title":"Flexera/Revenera FlexNet Publisher lmadmin kimlik doğrulama atlatma açığı CVE-2026-19572 (CVSS 9.3)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-19572"],"cvss":9.3,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"b-20261007-1409-pathao-extortion-claim-8c732a","first_seen":"2026-10-07T14:29:00+03:00","updated":"2026-10-07T17:43:47+03:00","title":"Pathao Limited (Bangladeş araç çağırma/lojistik) — tehdit aktörü yeraltı forumunda üretim altyapısını ele geçirdiğini iddia ediyor, 400 bin USDT fidye istiyor","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:BD","desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"transport","country":"BD","sgb_id":null,"kev":false},{"id":"b-20261007-1409-openai-sandbox-escape-oliver-fish","first_seen":"2026-10-07T14:29:00+03:00","updated":"2026-10-07T14:29:00+03:00","title":"OpenAI sandbox kaçışı: araştırmacı Oliver Fish, API anahtarı ya da hesap olmadan ücretli modellere istek atabildiğini söylüyor (Cyber Security News)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"b-20261007-1309-cmu-canada-cyber-incident","first_seen":"2026-10-07T13:22:00+03:00","updated":"2026-10-11T12:17:23+03:00","title":"Canadian Mennonite University (Winnipeg) siber olayı: 18 Eyl fark edildi; SIN ve vergi kayıtları dahil öğrenci/çalışan verisi çalınmış olabilir; 2 yıl kredi izleme; OPC'ye bildirim","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://media.cmu.ca/incident-notice","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:CA","desk_skipped"],"entity":"Canadian Mennonite University","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"CA","sgb_id":null,"kev":false},{"id":"gentlemen-azazel-leakned-cloudsek-2026-10-07","first_seen":"2026-10-07T09:56:00+03:00","updated":"2026-10-07T09:56:00+03:00","title":"CloudSEK: The Gentlemen ortağı Azazel / LEAKNED","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.cloudsek.com/blog/caught-in-4k-the-gentlemen-files","cve":[],"cvss":null,"actor":["The Gentlemen"],"sgh_url":null,"summary":null,"tags":[],"entity":"CloudSEK","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"sgh:gentlemen-fidye-azazel-leakned-mcp-cloudsek-2026","first_seen":"2026-10-07T09:53:09+03:00","updated":"2026-10-07T09:53:09+03:00","title":"CloudSEK: The Gentlemen ortağı Azazel kendi sızıntı sitesini kurup fidyeyi paylaşmadı","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.cloudsek.com/blog/caught-in-4k-the-gentlemen-files","cve":[],"cvss":null,"actor":["The Gentlemen"],"sgh_url":"https://siberguvenlikhaber.com/haber/gentlemen-fidye-azazel-leakned-mcp-cloudsek-2026.html","summary":"CloudSEK'e göre The Gentlemen fidye yazılımı grubunun ortağı Azazel, kendi sızıntı sitesi LEAKNED'i kurdu ve altı ülkede iki düzineden fazla kurumdan aldığı şantaj gelirini grupla paylaşmadı.","tags":["sgh_published","sgh_shared_on_x"],"entity":"CloudSEK","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"kia-gwangmyeong-union-malgunsoft-2026-10-07","first_seen":"2026-10-07T08:20:00+03:00","updated":"2026-10-07T13:22:00+03:00","title":"Kia Gwangmyeong sendikası ~5.000 üye verisi — eğitim sağlayıcısı Malgunsoft sunucusuna arka kapı (19 Eyl); ~20 kurum etkilendi (Yolsuzlukla Mücadele ve Sivil Haklar Komisyonu, Milli Savunma Bakanlığı","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:KR","desk_skipped","malware"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":"KR","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1266","first_seen":"2026-10-07T07:33:35+03:00","updated":"2026-10-07T11:52:47+03:00","title":"SGB TR-26-1266: Arista CloudVision Portal Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Arista CloudVision Portal","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1266","cve":["CVE-2026-101153","CVE-2026-101158"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/arista-cloudvision-portal-guvenlik-zafiyeti-tr-26-1266-sgb.html","summary":"Arista CloudVision Portal güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Arista CloudVision Portal","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":"TR-26-1266","kev":false},{"id":"sgb:TR-26-1265","first_seen":"2026-10-07T07:25:21+03:00","updated":"2026-10-07T11:52:47+03:00","title":"SGB TR-26-1265: Backstage Framework Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1265","cve":["CVE-2026-106486","CVE-2026-106463","CVE-2026-106462","CVE-2026-106461","CVE-2026-106460","CVE-2026-106459","CVE-2026-106458","CVE-2026-106504","CVE-2026-106503","CVE-2026-106502","CVE-2026-106501","CVE-2026-106500","CVE-2026-106499","CVE-2026-106498","CVE-2026-106497","CVE-2026-106496"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Backstage Framework'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1265","kev":false},{"id":"sgb:TR-26-1264","first_seen":"2026-10-07T07:23:13+03:00","updated":"2026-10-07T11:52:47+03:00","title":"SGB TR-26-1264: Elasticsearch/Kibana Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Elasticsearch/Kibana","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1264","cve":["CVE-2026-103008","CVE-2026-103009","CVE-2026-103007","CVE-2026-103006","CVE-2026-103005","CVE-2026-102412","CVE-2026-102411","CVE-2026-102410","CVE-2026-102409","CVE-2026-102408","CVE-2026-102407","CVE-2026-102406","CVE-2026-102404"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/elasticsearch-kibana-guvenlik-zafiyeti-tr-26-1264-sgb.html","summary":"Elasticsearch ve Kibana'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"Elasticsearch/Kibana","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1264","kev":false},{"id":"sgb:TR-26-1263","first_seen":"2026-10-07T07:14:40+03:00","updated":"2026-10-07T11:52:47+03:00","title":"SGB TR-26-1263: Dell Çoklu Bileşen Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Dell Çoklu Bileşen","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1263","cve":["CVE-2026-63692","CVE-2026-63688","CVE-2026-63690","CVE-2026-63691","CVE-2026-63689","CVE-2026-70411","CVE-2026-101207","CVE-2026-86362","CVE-2026-86361","CVE-2026-63697"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Bazı Dell bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemeleri ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Dell Çoklu Bileşen","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1263","kev":false},{"id":"sgb:TR-26-1262","first_seen":"2026-10-07T07:11:31+03:00","updated":"2026-10-07T11:52:47+03:00","title":"SGB TR-26-1262: OpenSSH Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"OpenSSH","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1262","cve":["CVE-2026-106553","CVE-2026-106582","CVE-2026-106555","CVE-2026-106552","CVE-2026-106589","CVE-2026-106583"],"cvss":null,"actor":[],"sgh_url":null,"summary":"OpenSSH'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanları gözden geçirmelerini ve gerekli güncellemelerin yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"OpenSSH","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1262","kev":false},{"id":"sgb:TR-26-1261","first_seen":"2026-10-07T07:09:55+03:00","updated":"2026-10-07T10:52:04+03:00","title":"SGB TR-26-1261: Gitea Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1261","cve":["CVE-2026-86684","CVE-2026-73278","CVE-2026-96589","CVE-2026-96580","CVE-2026-96404","CVE-2026-96400","CVE-2026-96399","CVE-2026-95112","CVE-2026-94205","CVE-2026-79960","CVE-2026-70357","CVE-2026-104636","CVE-2026-95106","CVE-2026-89430","CVE-2026-103670","CVE-2026-103667","CVE-2026-101029","CVE-2026-101027","CVE-2026-104626","CVE-2026-103059","CVE-2026-104632","CVE-2026-96594","CVE-2026-89182","CVE-2026-105268","CVE-2026-105267","CVE-2026-104633","CVE-2026-101023","CVE-2026-97208"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Gitea servisinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1261","kev":false},{"id":"sgb:TR-26-1260","first_seen":"2026-10-07T07:08:09+03:00","updated":"2026-10-07T10:52:04+03:00","title":"SGB TR-26-1260: Amazon Bedrock AgentCore Starter Toolkit Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Amazon Bedrock AgentCore Starter Toolkit","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1260","cve":["CVE-2026-106032","CVE-2026-105812"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Amazon Bedrock AgentCore Starter Toolkit'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Amazon Bedrock AgentCore Starter Toolkit","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1260","kev":false},{"id":"sgb:TR-26-1259","first_seen":"2026-10-07T07:03:37+03:00","updated":"2026-10-07T10:52:04+03:00","title":"SGB TR-26-1259: HPE Networking ClearPass Policy Manager Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"HPE Networking ClearPass Policy Manager","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1259","cve":["CVE-2026-76750","CVE-2026-79818","CVE-2026-79817","CVE-2026-79816","CVE-2026-79815","CVE-2026-79814","CVE-2026-79813","CVE-2026-79812","CVE-2026-79811","CVE-2026-79810","CVE-2026-79809","CVE-2026-79808","CVE-2026-79807","CVE-2026-79806","CVE-2026-79805","CVE-2026-79803","CVE-2026-79802","CVE-2026-79801","CVE-2026-79800","CVE-2026-79799","CVE-2026-79798","CVE-2026-79797","CVE-2026-79796","CVE-2026-79794","CVE-2026-76754","CVE-2026-76753","CVE-2026-76752","CVE-2026-76751"],"cvss":null,"actor":[],"sgh_url":null,"summary":"HPE Networking ClearPass Policy Manager'da güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"HPE Networking ClearPass Policy Manager","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1259","kev":false},{"id":"ou-health-insider-breach-2026-10-07","first_seen":"2026-10-07T06:50:00+03:00","updated":"2026-10-07T06:50:00+03:00","title":"OU Health (Oklahoma, ABD) — eski çalışan kaynaklı hasta verisi ihlali bildirimi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":"OU Health","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"US","sgb_id":null,"kev":false},{"id":"jefferson-county-mo-cyberattack-2026-10-06","first_seen":"2026-10-07T06:20:00+03:00","updated":"2026-10-07T06:20:00+03:00","title":"Jefferson County (Missouri, ABD) — şüpheli siber saldırı ilçe işlemlerini aksattı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","desk_skipped"],"entity":"Jefferson County","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"irhythm-holdings-data-breach-lawfirm-2026-10-06","first_seen":"2026-10-07T03:49:50+03:00","updated":"2026-10-17T13:29:40+03:00","title":"iRhythm (Zio) hasta verisi ihlali — şirket bildirimi + Oregon AG 8.179.772 (Haz 3–8 2026 erişim; bildirim 2 Eki)","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://justice.oregon.gov/consumer/databreach/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/irhythm-zio-hasta-verisi-ihlali-8-2-milyon-oregon-2026.html","summary":null,"tags":["country:US","desk_skipped","origin_x_tip","sgh_related"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"live-nation-vermont-ag-2026-10-01","first_seen":"2026-10-07T00:35:12+03:00","updated":"2026-10-08T14:56:29+03:00","title":"Live Nation Entertainment, Vermont Başsavcılığı'na veri ihlali bildirdi (1 Eki 2026; 2 Vermont sakini; SSN, resmi kimlik no, sağlık kayıtları)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://ago.vermont.gov/categories/security-breach-notices","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"idcf-softbank-bulut-yetkisiz-erisim-2026-10-07","first_seen":"2026-10-07T00:00:00+03:00","updated":"2026-10-09T13:30:26+03:00","title":"SoftBank'ın IDC Frontier bulutunda yetkisiz erişim: Japonya'da siteler açılmıyor","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.idcf.jp/news/topics/20261007001","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/softbank-idc-frontier-bulut-yetkisiz-erisim-kesinti-2026.html","summary":"SoftBank Corp.'un tamamına sahip olduğu IDC Frontier, IDCF bulutuna yetkisiz erişim olduğunu duyurdu. Doğu Japonya 1. bölgedeki kesinti kurum ve şirket sitelerini etkiledi.","tags":["country:JP","partially_confirmed","sgh_published","sgh_shared_on_x"],"entity":"SoftBank","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"JP","sgb_id":null,"kev":false},{"id":"aivd-mivd-edge-devices-advies-2026-10-07","first_seen":"2026-10-07T00:00:00+03:00","updated":"2026-10-07T15:41:12+03:00","title":"Hollanda istihbaratından uyarı: Çinli hackerların uç cihaz saldırıları artacak","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.aivd.nl/actueel/nieuws/2026/10/07/mivd-en-aivd-verwachten-toename-chinese-cyberaanvallen-via-edge-devices","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/hollanda-aivd-mivd-cin-edge-cihaz-uyarisi-2026.html","summary":"Hollanda istihbarat servisleri MIVD ve AIVD, Çinli hackerların güvenlik duvarı ve VPN gibi uç cihazlar üzerinden saldırılarının artmasını bekliyor.","tags":["country:NL","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"NL","sgb_id":null,"kev":false},{"id":"idcf-fidye-495-resmi-2026-10-08","first_seen":"2026-10-07T00:00:00+03:00","updated":"2026-10-09T13:57:46+03:00","title":"SoftBank'a bağlı IDC Frontier fidye yazılımı saldırısını doğruladı: 495 kurum etkilendi","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.idcf.jp/news/topics/20261007002","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/idc-frontier-fidye-yazilimi-dogrulandi-495-kurum-2026.html","summary":"SoftBank Corp.'a bağlı IDC Frontier, IDCF bulutundaki arızanın fidye yazılımı saldırısından kaynaklandığını doğruladı. Şirkete göre saldırı 495 şirketi ve yerel yönetimi etkiliyor.","tags":["country:JP","sgh_published","sgh_shared_on_x"],"entity":"SoftBank","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"JP","sgb_id":null,"kev":false},{"id":"south-carolina-school-choice-program-cyberattack-2026-10-06","first_seen":"2026-10-06T23:19:16+03:00","updated":"2026-10-06T23:19:16+03:00","title":"Güney Carolina okul seçimi (ESTF burs) programına siber saldırı iddiası (The 74)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"ey-goldman-man-group-ft-report-2026-10-06","first_seen":"2026-10-06T23:04:34+03:00","updated":"2026-10-07T16:49:47+03:00","title":"EY'deki veri ihlali Goldman Sachs ve Man Group müşterilerini de etkiledi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://oag.ca.gov/ecrime/databreach/reports/sb24-626542","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ey-goldman-man-group-veri-ihlali-2026.html","summary":"EY'nin vergi işlerinde kullandığı destek platformundaki ihlal, Goldman Sachs'ın servet yönetimi müşterilerini ve Man Group bağlantılı kişileri de etkiledi.","tags":["sgh_published","sgh_shared_on_x"],"entity":"EY","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"royale-apuestas-royal-ve-terroahgroup-claim-2026-10-06","first_seen":"2026-10-06T23:04:34+03:00","updated":"2026-10-06T23:04:34+03:00","title":"Venezuela bahis sitesi «Royale» (Apuestas Royal) kullanıcı verisi sızıntısı iddiası — TerroahGroup","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":"Küçük e-posta:parola + telefon örneği (Venezuela mobil önekleri). Toplam kayıt/dosya boyutu yok; operatör adı «Royale» dışında net değil.","tags":["country:VE","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"VE","sgb_id":null,"kev":false},{"id":"metrea-commuter-air-480gb-claim-2026-10-06","first_seen":"2026-10-06T22:25:00+03:00","updated":"2026-10-06T22:25:00+03:00","title":"Metrea ve Commuter Air Technology (ABD savunma yüklenicileri) 480 GB / ~64 bin dosya çalındı iddiası (SOCOM bağlantılı içerik iddiası)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Metrea ve Commuter Air Technology","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"480 GB","sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"medcred-ie-274k-claim-2026-10-06-412c02","first_seen":"2026-10-06T21:30:00+03:00","updated":"2026-10-06T21:30:00+03:00","title":"MedCred (İrlanda) 274.534 kullanıcı veri seti iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":"MedCred","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"274.534 kullanıcı","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"flydubai-everest-claim-20261006","first_seen":"2026-10-06T20:30:00+03:00","updated":"2026-10-10T16:47:52+03:00","title":"Flydubai — Everest fidye sızıntı sitesi iddiası (4,36 GB, 16.517 dosya; operasyon/personel verisi)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["Everest"],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Flydubai","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"4,36 GB","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgh:asos-musteri-bilgilerine-erisilmis-olabilir-aciklama-2026","first_seen":"2026-10-06T19:40:56+03:00","updated":"2026-10-06T19:40:56+03:00","title":"ASOS'tan borsa açıklaması: Müşteri bilgilerine erişilmiş olabilir","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.londonstockexchange.com/news-article/ASC/update-regarding-cyber-incident/17822931","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/asos-musteri-bilgilerine-erisilmis-olabilir-aciklama-2026.html","summary":"ASOS, Londra Borsası'na açıklama yaparak müşteri ad ve iletişim bilgilerine erişilmiş olabileceğini, kart ve şifrelerin etkilenmediğini bildirdi.","tags":["sgh_published","sgh_shared_on_x"],"entity":"ASOS","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"sgh:asahi-kasei-pharma-digital-veri-sizintisi-2026","first_seen":"2026-10-06T19:40:22+03:00","updated":"2026-10-06T19:40:22+03:00","title":"Asahi Kasei Therapeutics'in Pharma DIGITAL sitesinde veri sızıntısı olasılığı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.asahi-kasei.co.jp/pharma/oshirase_20261006.html","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/asahi-kasei-pharma-digital-veri-sizintisi-2026.html","summary":"Asahi Kasei Therapeutics'in Pharma DIGITAL sitesi siber saldırıya uğradı. Binlerce sağlık çalışanı ve personelin bilgileri görüntülenmiş olabilir.","tags":["sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"b-20261006-1839-armurerie-douillet-fr-claim","first_seen":"2026-10-06T18:56:52+03:00","updated":"2026-10-06T18:56:52+03:00","title":"Armurerie Douillet (Fransa, silah satıcısı) 7.546 dosya — silah ruhsatı ve kimlik belgeleri satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261006-1809-cipc-blacknet00-claim","first_seen":"2026-10-06T18:31:00+03:00","updated":"2026-10-06T18:31:00+03:00","title":"BLACKNET-00, Güney Afrika şirket ve fikri mülkiyet sicili CIPC'nin ana veritabanlarını çaldığını iddia ediyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261006-1809-panama-css-700k-claim","first_seen":"2026-10-06T18:31:00+03:00","updated":"2026-10-06T18:31:00+03:00","title":"Panama Sosyal Güvenlik Kurumu (CSS) ~700 bin randevu kaydının forumda paylaşıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"a-20261006-1739-github-vxunderground","first_seen":"2026-10-06T18:01:52+03:00","updated":"2026-10-06T18:03:16+03:00","title":"vx-underground'a göre GitHub hesabı ve zararlı yazılım arşivi kapatıldı","category":"malware","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://github.com/vxunderground/MalwareSourceCode","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/github-vx-underground-hesabini-kapatti-2026.html","summary":"vx-underground'a göre GitHub, hesabı ve zararlı yazılım kaynak kodu arşivini kaldırdı. Hesap ve depo sayfaları 404 veriyor; GitHub'dan açıklama yok.","tags":["malware","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"sagawa-express-onimotsu-toiawase-yetkisiz-erisim-2026-10-01","first_seen":"2026-10-06T17:50:22+03:00","updated":"2026-10-06T17:50:22+03:00","title":"Sagawa Express «Onimotsu toiawase» (kargo sorgulama) yetkisiz erişim — ~100 günlük gönderici/alıcı ad-adres-telefon, Smart Club üyeleri; 9 web hizmeti durduruldu (şirket 30 Eyl/1 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.itmedia.co.jp/news/article/2610/01/2000001933/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"transport","country":null,"sgb_id":null,"kev":false},{"id":"cia-fbi-data-sale-claim-2026-10-06-27bd6d","first_seen":"2026-10-06T17:50:22+03:00","updated":"2026-10-06T17:50:22+03:00","title":"Yeraltı forumunda CIA ve FBI verisi satış iddiası ( 6 Eki 14:39Z)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"chile-mineduc-portal-anotate-claim-2026-10-06-55fbea","first_seen":"2026-10-06T17:50:22+03:00","updated":"2026-10-06T17:50:22+03:00","title":"Şili Eğitim Bakanlığı «Portal Anotate» veritabanı ihlali iddiası (aktör zfo$; 6 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"uninter-brazil-7tb-claim-2026-10-06-f2ac69","first_seen":"2026-10-06T17:50:22+03:00","updated":"2026-10-08T21:18:00+03:00","title":"Brezilya UNINTER uzaktan eğitim platformu 7,34 TB ihlal iddiası ( 6 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"7,34 TB","sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"b-20261006-1609-b-accountants-everest-claim","first_seen":"2026-10-06T16:23:00+03:00","updated":"2026-10-06T16:23:00+03:00","title":"accountants — Everest fidye grubu iddiası (SOCRadar, 6 Eki)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["Everest"],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"a-20261006-1439-kr-banka-ai-hack-polis","first_seen":"2026-10-06T15:08:09+03:00","updated":"2026-10-08T07:09:40+03:00","title":"Güney Kore'de Yapay Zekâ Şüpheli Banka Sızıntılarına Polis Soruşturması","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://en.yna.co.kr/view/AEN20261006004000315","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/guney-kore-bankalar-yapay-zeka-hack-polis-sorusturma-2026.html","summary":"Güney Kore polisi yapay zekâ şüpheli banka sızıntıları için 28 soruşturmacı görevlendirdi. Lee 6 Ekim'de denetim istedi; bütçe 520 milyar wona çıkıyor.","tags":["sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"b-20261006-1439-tamaulipas-gob-mx-claim","first_seen":"2026-10-06T14:55:00+03:00","updated":"2026-10-06T14:55:00+03:00","title":"Tamaulipas eyalet hükümeti (Meksika) veritabanı sızıntı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261006-1409-hanning-bnd-espionage-arrest","first_seen":"2026-10-06T14:20:00+03:00","updated":"2026-10-06T14:20:00+03:00","title":"Eski BND başkanı August Hanning casusluk/vatana ihanet şüphesiyle gözaltında; eski büro şefi Manfred D. ~2.000 belge aktarmakla suçlanıyor","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.presseportal.de/blaulicht/pm/14981/6365655","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261006-1409-ox-mcp-marketplace-15465","first_seen":"2026-10-06T14:20:00+03:00","updated":"2026-10-06T14:20:00+03:00","title":"OX Security: 5 kayıt defterinde 15.465 MCP sunucusu, pazar yeri denetimi yok (süresi dolmuş alan adları vb.)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"OX Security","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"a-20261006-1339-scala-i-ask-citizen","first_seen":"2026-10-06T14:05:00+03:00","updated":"2026-10-06T14:36:46+03:00","title":"Citizen Watch Müşteri Bilgileri Sızmış Olabilir: Taşeron Scala i-ask Sistemine Yetkisiz Erişim","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://scalagrp.jp/pdf/ir/news/2026_IRnews1006.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/scala-i-ask-citizen-veri-sizintisi-2026.html","summary":"Citizen Watch, 6 Ekim'de Scala Communications i-ask sistemine yetkisiz erişim nedeniyle yaklaşık 100 bin kişinin bilgilerinin sızmış olabileceğini açıkladı.","tags":["sgh_published","sgh_shared_on_x"],"entity":"Citizen Watch Müşteri Bilgileri Sızmış Olabilir","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"100 bin kişinin","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261006-1339-ixigo-11m-claim","first_seen":"2026-10-06T14:05:00+03:00","updated":"2026-10-06T14:05:00+03:00","title":"ixigo (Hindistan seyahat platformu) 11 milyon kayıt satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"11 milyon kayıt","sector":"hospitality","country":null,"sgb_id":null,"kev":false},{"id":"b-20261006-1339-att-176m-mr-raccoonn-claim","first_seen":"2026-10-06T14:05:00+03:00","updated":"2026-10-06T14:05:00+03:00","title":"AT&T 176 milyon kayıt iddiası — 'Mr_Raccoonn' forum ilanı (ThreatMon)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"176 milyon kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1258","first_seen":"2026-10-06T13:50:25+03:00","updated":"2026-10-06T13:50:25+03:00","title":"SGB TR-26-1258: Felisify Bilişim - SambaBox Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Felisify Bilişim Sanayi ve Ticaret A.Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1258","cve":["CVE-2026-85523"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Felisify Bilişim Sanayi ve Ticaret A.Ş. tarafından geliştirilen SambaBox ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 5.4.1 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Felisify Bilişim Sanayi ve Ticaret A.Ş.","affected_products":["SambaBox"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":"TR-26-1258","kev":false},{"id":"sgb:TR-26-1257","first_seen":"2026-10-06T13:27:20+03:00","updated":"2026-10-06T13:27:20+03:00","title":"SGB TR-26-1257: Pusula İletişim - Uzman Posta Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Pusula İletişim Bilişim İnternet Sanayi ve Ticaret Ltd. Şti.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1257","cve":["CVE-2026-82924"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Pusula İletişim Bilişim İnternet Sanayi ve Ticaret Ltd. Şti. tarafından geliştirilen Uzman Posta ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 18.09.2026 tarihli yama sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Pusula İletişim Bilişim İnternet Sanayi ve Ticaret Ltd. Şti.","affected_products":["Uzman Posta"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":"TR-26-1257","kev":false},{"id":"b-20261006-1309-princeton-city-breach","first_seen":"2026-10-06T13:23:02+03:00","updated":"2026-10-06T13:23:02+03:00","title":"Princeton (ABD) şehir yönetimi veri ihlalinde bilgi alındığını doğruladı (Princeton Herald)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":"Princeton","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"a-20261006-1239-asos-app-push-snowflake","first_seen":"2026-10-06T13:03:19+03:00","updated":"2026-10-08T17:03:53+03:00","title":"ASOS mobil uygulamasından \"ASOS HACKED\" bildirimi: Snowflake iddiası","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.gbnews.com/tech/asos-hack-notification-snowflake-instance","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/asos-uygulama-bildirimi-snowflake-iddiasi-2026.html","summary":"ASOS'un mobil uygulamasından bildirim gitti; gönderenler bulut veri platformu Snowflake'i ele geçirdiğini iddia ediyor. Şirketten açıklama yok.","tags":["partially_confirmed","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1256","first_seen":"2026-10-06T12:57:19+03:00","updated":"2026-10-06T12:57:19+03:00","title":"SGB TR-26-1256: Akıllı Ticaret Yazılım - E-Ticaret Paketi Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Akıllı Ticaret Yazılım Teknolojileri Ltd. Şti.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1256","cve":["CVE-2026-12380"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Akıllı Ticaret Yazılım Teknolojileri Ltd. Şti. tarafından geliştirilen E-Ticaret Paketi ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, üretici tarafından ilgili zafiyetin giderilmemesinden dolayı E-Ticaret Paketi ürününü kullananlara muadil başka bir ürün kullanmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Akıllı Ticaret Yazılım Teknolojileri Ltd. Şti.","affected_products":["E-Ticaret Paketi"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"retail","country":null,"sgb_id":"TR-26-1256","kev":false},{"id":"b-20261006-1239-zoho-crm-237m-claim","first_seen":"2026-10-06T12:49:31+03:00","updated":"2026-10-06T12:49:31+03:00","title":"Zoho CRM 237 milyon kayıt sızıntısı iddiası (BellaSwanLeak, darkweb forum; ThreatMon)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"237 milyon kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgh:ldlc-musteri-verisi-yetkisiz-erisim-2026","first_seen":"2026-10-06T12:09:15+03:00","updated":"2026-10-06T12:09:15+03:00","title":"Fransız perakendeci LDLC'de yetkisiz erişim: Müşteri verileri görüntülenmiş olabilir","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://next.ink/brief-article/fuite-de-donnees-et-de-quatre-pour-ldlc/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ldlc-musteri-verisi-yetkisiz-erisim-2026.html","summary":"Lyon merkezli perakendeci Groupe LDLC, sistemlerine yetkisiz erişim sağlandığını ve bazı müşteri verilerinin görüntülenmiş olabileceğini duyurdu.","tags":["sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"retail","country":null,"sgb_id":null,"kev":false},{"id":"dubai-smart-travel-gdrfa-12m-claim-2026-10-06-f13a15","first_seen":"2026-10-06T11:55:00+03:00","updated":"2026-10-06T11:55:00+03:00","title":"Dubai Smart Travel (GDRFA sınır ücreti voucher) 12M+ kayıt satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"12M+ kayıt","sector":"hospitality","country":null,"sgb_id":null,"kev":false},{"id":"siberay-sahte-dogrulama-ekrani-uyarisi-2026-10-05","first_seen":"2026-10-06T11:55:00+03:00","updated":"2026-10-06T11:55:00+03:00","title":"SİBERAY: sahte güvenlik doğrulama ekranları (ClickFix tarzı) uyarısı — İGFA/yerel basın","category":"fraud","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://uluhaber.net/sahte-dogrulama-ekranlarina-dikkat/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"princeton-tx-city-pii-exfiltrated-2026-10-05","first_seen":"2026-10-06T11:55:00+03:00","updated":"2026-10-06T11:55:00+03:00","title":"Princeton (Teksas) belediyesi: siber olayda kişisel veri dışarı çıkarıldı (5 Eki teyit)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://princetonherald.com/2026/10/05/city-confirms-information-taken-during-data-breach/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"ldlc-customer-data-incident-2026-10","first_seen":"2026-10-06T11:25:00+03:00","updated":"2026-10-06T11:55:00+03:00","title":"LDLC (Fransa, PC perakendecisi) müşteri verisine yetkisiz erişim — şirket müşterilere uyardı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":"LDLC","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"retail","country":null,"sgb_id":null,"kev":false},{"id":"atlassian-cve-2026-21589-dc-2026-10-06","first_seen":"2026-10-06T11:25:00+03:00","updated":"2026-10-18T12:20:00+03:00","title":"Atlassian CVE-2026-21589 (CVSS 9.3) 8 Data Center ürününde kimliksiz dosya okuma","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html","cve":["CVE-2026-21589"],"cvss":9.3,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev"],"entity":"Atlassian","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"slate-valley-vermont-kairos-2026-10","first_seen":"2026-10-06T11:25:00+03:00","updated":"2026-10-06T11:25:00+03:00","title":"Slate Valley (Vermont) okul bölgesi fidye saldırısı — Kairos sızıntı tehdidi, kurul ödemeyi reddetti","category":"ransomware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"sgh:gmo-research-infoq-uye-verisi-sizintisi-2026","first_seen":"2026-10-06T11:07:57+03:00","updated":"2026-10-06T11:07:57+03:00","title":"GMO Research & AI infoQ'da Yaklaşık 950 Bin Kayıt Sızdırıldı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://gmo-research.ai/pressroom/notice/notice-20261005","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/gmo-research-infoq-uye-verisi-sizintisi-2026.html","summary":"GMO Research & AI, infoQ anket sitesinde en fazla 948.498 kayıt dışarı çıkarıldığını ve 611 kayıtta puanların izinsiz harcandığını açıkladı.","tags":["sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"950 Bin Kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"citilink-indonesia-claim-2026-10-06","first_seen":"2026-10-06T09:50:00+03:00","updated":"2026-10-06T09:50:00+03:00","title":"Citilink (Endonezya, Garuda grubu) müşteri verisi sızıntısı iddiası — yeraltı forumu ilanı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":"Citilink","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgh:atb-siber-saldiri-datasuckers-2026","first_seen":"2026-10-06T08:39:25+03:00","updated":"2026-10-06T08:39:25+03:00","title":"ATB siber saldırıyı doğruladı, saldırganlar 400 bin dolar istedi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://suspilne.media/1419911-u-atb-zaavili-so-personalni-dani-ne-postrazdali-vnaslidok-kiberataki/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/atb-siber-saldiri-datasuckers-2026.html","summary":"Ukrayna market zinciri ATB, sunucularına siber saldırı yapıldığını doğruladı fakat kişisel verilerin etkilenmediğini bildirdi. Saldırıyı üstlenen DataSuckers grubu 400 bin dolar talep ederken, 7,9 milyon müşterinin verisini ele geçirdiğini öne sürdü.","tags":["sgh_published"],"entity":"ATB","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"7,9 milyon müşterinin","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"mrmax-173m-member-data-unauthorized-access-2026-10-06","first_seen":"2026-10-06T08:22:00+03:00","updated":"2026-10-06T17:50:22+03:00","title":"MrMax Veri Sızıntısı: 1,7 Milyondan Fazla Üyenin Bilgisi Sızdı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.mrmax.co.jp/info/incident_20261006/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/mrmax-veri-sizintisi-1-7-milyon-uye-2026.html","summary":"MrMax, uygulama ve çevrim içi mağaza sunucularına yetkisiz erişimde 1,7 milyondan fazla üyenin ad, e-posta ve telefon numarasının sızdığını açıkladı.","tags":["sgh_published"],"entity":"MrMax Veri Sızıntısı","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"atlassian-cve-2026-21589-dc-path-traversal-2026-10-05","first_seen":"2026-10-06T08:22:00+03:00","updated":"2026-10-18T12:20:00+03:00","title":"Atlassian CVE-2026-21589 (CVSS 9.3) Data Center ürünlerinde kimlik doğrulamasız dosya erişimi ( 04:38Z; Atlassian 5 Eki)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-21589"],"cvss":9.3,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev","origin_x_tip"],"entity":"Atlassian","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"sgb:TR-26-1255","first_seen":"2026-10-06T07:24:33+03:00","updated":"2026-10-06T07:24:33+03:00","title":"SGB TR-26-1255: Zabbix Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Zabbix","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1255","cve":["CVE-2026-59783","CVE-2026-59787","CVE-2026-59786","CVE-2026-59782"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Zabbix bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine Zabbix tarafından yayınlanan güvenlik önerisini inceleyerek gerekli güncellemeleri yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Zabbix","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1255","kev":false},{"id":"sgb:TR-26-1254","first_seen":"2026-10-06T07:21:46+03:00","updated":"2026-10-06T07:21:46+03:00","title":"SGB TR-26-1254: Progress Telerik Fiddler Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Progress Telerik Fiddler","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1254","cve":["CVE-2026-77805","CVE-2026-77804","CVE-2026-77803","CVE-2026-77802"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Progress Telerik Fiddler ürününde tespit edilen güvenlik zafiyetleri için güncelleme yayınlanmıştır. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Progress Telerik Fiddler","affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1254","kev":false},{"id":"sgb:TR-26-1253","first_seen":"2026-10-06T07:18:49+03:00","updated":"2026-10-06T07:18:49+03:00","title":"SGB TR-26-1253: Android Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Android","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1253","cve":["CVE-2026-28648","CVE-2026-28647","CVE-2026-28641","CVE-2026-28640","CVE-2026-28625","CVE-2026-58880","CVE-2026-58865","CVE-2026-58859","CVE-2026-58856","CVE-2026-58854","CVE-2026-58841","CVE-2026-58835","CVE-2026-58834","CVE-2026-58815","CVE-2026-55286","CVE-2026-55280","CVE-2026-55270","CVE-2026-55269","CVE-2026-55266","CVE-2026-55265","CVE-2026-49937","CVE-2026-49933","CVE-2026-49885","CVE-2026-49880","CVE-2026-49878","CVE-2026-45524","CVE-2026-28667"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Android'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanları inceleyerek gerekli güncellemeleri ivedilikle yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Android","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1253","kev":false},{"id":"sgb:TR-26-1252","first_seen":"2026-10-06T07:14:20+03:00","updated":"2026-10-06T07:14:20+03:00","title":"SGB TR-26-1252: LibreOffice Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"LibreOffice","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1252","cve":["CVE-2026-63269","CVE-2026-63268","CVE-2026-63267","CVE-2026-63266","CVE-2026-63277"],"cvss":null,"actor":[],"sgh_url":null,"summary":"LibreOffice'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanları inceleyerek gerekli güncellemeleri ivedilikle yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"LibreOffice","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1252","kev":false},{"id":"sgb:TR-26-1250","first_seen":"2026-10-06T07:09:14+03:00","updated":"2026-10-06T07:09:14+03:00","title":"SGB TR-26-1250: AMD Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"AMD","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1250","cve":["CVE-2026-0482","CVE-2026-0461"],"cvss":null,"actor":[],"sgh_url":null,"summary":"AMD ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili dokümanları gözden geçirmelerini ve gerekli tedbirlerin alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"AMD","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1250","kev":false},{"id":"reussir-fr-3-3m-leak-claim-2026-10-06-1636b5","first_seen":"2026-10-06T06:50:00+03:00","updated":"2026-10-06T06:50:00+03:00","title":"Réussir.fr (Groupe Réussir, FR tarım/gıda meslek basını) ~3,3M satır veri sızdırıldı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":"Réussir.fr","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"3,3M satır","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"alegeus-data-breach-ssn-2026-10-06","first_seen":"2026-10-06T06:50:00+03:00","updated":"2026-10-06T06:50:00+03:00","title":"Alegeus (ABD yan hak/sağlık hesabı yönetimi) veri ihlali — SSN etkilendi (Claim Depot ikincil)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":"Alegeus","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"fbi-accenture-yuklenici-peoplesoft-2026-10-06","first_seen":"2026-10-06T05:30:23+03:00","updated":"2026-10-06T05:35:00+03:00","title":"FBI, Yayımlanan Yamayı Uygulamayan Yükleniciyi Görevden Aldı","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.reuters.com/technology/accenture-contractor-removed-fbi-following-damaging-data-breach-sources-say-2026-10-06/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/fbi-accenture-yuklenici-peoplesoft-ihlali-2026.html","summary":"FBI siber biriminin başı Brett Leatherman, kurum çalışanlarının hassas kişisel bilgilerini açığa çıkaran ihlalin, bir yüklenicinin yayımlanmış güvenlik yamasını uygulamamasından kaynaklandığını açıkladı. FBI yükleniciyi görevden alırken, Reuters'a konuşan kaynaklar platformun Oracle PeopleSoft, üçüncü taraf şirketin ise Accenture olduğunu belirtti.","tags":["sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ai-agent-mcp-hijack-research-google-jpmc-2026-10-06","first_seen":"2026-10-06T04:20:39+03:00","updated":"2026-10-06T04:20:39+03:00","title":"Araştırmacı: ele geçirilen tek AI ajanı MCP üzerinden diğer iç ajanlara zararlı talimat aktarabiliyor (Google, JPMorgan, Rapid7, DINUM, ABD hükümeti; )","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"daraghmeh-jordan-45k-records-sale-claim-2026-10-05","first_seen":"2026-10-06T03:41:18+03:00","updated":"2026-10-06T03:41:18+03:00","title":"Daraghmeh (Ürdün, giyim perakende) 45 bin kayıt satış iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Daraghmeh","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"45 bin kayıt","sector":"retail","country":null,"sgb_id":null,"kev":false},{"id":"motos-del-oriente-colombia-207k-sale-claim-2026-10-05","first_seen":"2026-10-06T03:41:18+03:00","updated":"2026-10-06T03:41:18+03:00","title":"Motos del Oriente (Kolombiya) 207 bin kayıt satış iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"207 bin kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgh:bromcom-okul-yazilimi-sso-veri-ihlali-2026","first_seen":"2026-10-06T01:28:46+03:00","updated":"2026-10-06T01:28:46+03:00","title":"Bromcom, eski tek oturum açma kayıt hizmetinde veri ihlali doğruladı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://docs.bromcom.com/knowledge-base/sso-personal-data-breach-faqs/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/bromcom-okul-yazilimi-sso-veri-ihlali-2026.html","summary":"Birleşik Krallık'ta okullara yazılım sağlayan Bromcom, eski tek oturum açma kayıt hizmetinde veri ihlali yaşandığını açıkladı. Okul yönetim sistemine erişim kanıtı bulunmuyor.","tags":["sgh_published"],"entity":"Bromcom","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"trump-mobile-byod-3615-customers-leak-2026-10-05","first_seen":"2026-10-06T00:39:00+03:00","updated":"2026-10-06T00:56:45+03:00","title":"BYOD, Trump Mobile müşterilerine ait olduğunu söylediği verileri yayımladı","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://trumpmobile.com/terms-of-use","cve":[],"cvss":null,"actor":["BYOD"],"sgh_url":"https://siberguvenlikhaber.com/haber/trump-mobile-musteri-verisi-sizdi-byod-2026.html","summary":"BYOD grubu, 3.615 Trump Mobile müşterisine ait olduğunu söylediği bilgileri sızıntı sitesinde yayımladı. Straight Arrow News verileri inceledi; ulaşılan kişiler bilgilerin doğru olduğunu söyledi.","tags":["country:US","origin_leak_tracker","origin_x_tip","partially_confirmed","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"ifapme-belgium-700k-records-claim-2026-10-05-17777d","first_seen":"2026-10-06T00:39:00+03:00","updated":"2026-10-06T00:52:57+03:00","title":"IFAPME (Belçika, Valonya mesleki eğitim kurumu) ~700 bin kayıt / 85 bin IBAN satış/sızıntı iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"IFAPME","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"700 bin kayıt","sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"poppins-payroll-breach-2026-09-30","first_seen":"2026-10-06T00:22:00+03:00","updated":"2026-10-06T00:22:00+03:00","title":"Poppins Payroll (ABD, bakıcı bordro hizmeti) veri ihlali: \"yüzlerce\" kişi etkilendi, finansal bilgiler","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"qilin-core-member-japan-extradited-germany-2026-10-06","first_seen":"2026-10-06T00:00:00+03:00","updated":"2026-10-12T11:59:00+03:00","title":"Japonya, Qilin'in kilit üyesi olduğu belirtilen Rus'u Almanya'ya iade etti","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.asahi.com/articles/ASVB541QYVB5UTIL01CM.html","cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":"https://siberguvenlikhaber.com/haber/qilin-uyesi-japonya-almanya-iade-2026.html","summary":"Asahi Shimbun ve Japon basınına göre Japonya, fidye yazılımı grubu Qilin'in kilit üyesi olduğu belirtilen 28 yaşındaki bir Rus vatandaşını Osaka'da gözaltına alarak 2 Ekim 2026'da Almanya'ya iade etti.","tags":["partially_confirmed","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"okul-guvenligi-tr-claim-2026-10-06","first_seen":"2026-10-06T00:00:00+03:00","updated":"2026-10-07T02:10:49+03:00","title":"Okul Güvenliği'ne ait olduğu ileri sürülen 2 milyondan fazla kayıt satışa çıkarıldı iddiası","category":"leak","severity":"critical","turkey_signal":true,"tr_entity":"Okul Güvenliği","status":"claim_only","source_type":"official","primary_source_url":"https://www.kvkk.gov.tr/veri-ihlali-bildirimi","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/okul-guvenligi-2-milyon-kayit-satis-iddiasi-2026.html","summary":"Bursa merkezli Sekizdesekiz Bilgisayar'ın geliştirdiği Okul Güvenliği sistemine ait olduğu ileri sürülen veri seti bir yeraltı forumunda satışa çıkarıldı.","tags":["country:TR","origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":"Okul Güvenliği","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":"TR","sgb_id":null,"kev":false},{"id":"cctld-registry-hijack-google-2026-10-06","first_seen":"2026-10-06T00:00:00+03:00","updated":"2026-10-07T02:27:21+03:00","title":"Google: Üç ülke uzantısı ele geçirildi, yetkisiz sertifika alındı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://blog.google/security/chromes-response-to-recent-cctld-registry-hijacks/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/cctld-ele-gecirme-google-sahte-sertifika-2026.html","summary":"Google, Gana, Sierra Leone ve Amerikan Samoası ülke uzantılarını işleten altyapının ele geçirilmesiyle yetkisiz HTTPS sertifikaları alındığını açıkladı.","tags":["country:GLOBAL","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"kr-yoido-sarang-kilise-ihlali-2026-10-06","first_seen":"2026-10-06T00:00:00+03:00","updated":"2026-10-07T03:38:30+03:00","title":"Güney Kore'de iki büyük kiliseye siber saldırı: Yoido ve Sarang verileri yurt dışı sunucuda","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://news.sbs.co.kr/news/endPage.do?news_id=N1008785629","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/guney-kore-yoido-sarang-kilise-veri-ihlali-2026.html","summary":"Güney Kore'nin en büyük kiliselerinden Yoido ve Sarang siber saldırıya uğradı. Oasis Security, çalınan kayıtları yurt dışındaki bir sunucuda buldu.","tags":["country:KR","partially_confirmed","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"KR","sgb_id":null,"kev":false},{"id":"advantest-kisisel-veri-calindi-2026-10-07","first_seen":"2026-10-06T00:00:00+03:00","updated":"2026-10-07T14:38:00+03:00","title":"Advantest: Şubattaki siber saldırıda kişisel veriler çalındı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://oag.ca.gov/system/files/Advantest%20Corporation%20-%20Notice%20of%20Data%20Breach%20-%20Individual%20Letter.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/advantest-fidye-yazilimi-kisisel-veri-calindi-2026.html","summary":"Yarı iletken test ekipmanı üreten Advantest, şubatta fidye yazılımı içerdiğini açıkladığı saldırıda sunucularından kişisel veri çalındığını doğruladı.","tags":["country:JP","sgh_published","sgh_shared_on_x"],"entity":"Advantest","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"ciftay-insaat-qilin-tr-2026-10-06-6c6dea","first_seen":"2026-10-06T00:00:00+03:00","updated":"2026-10-09T13:57:46+03:00","title":"Çiftay İnşaat Taahhüt ve Ticaret A.Ş. (ciftay.com.tr; BIST'teki Batıçim'in hakim ortağı, Batıçim–Çiftay birleşmesi sürüyor) — Qilin sızıntı sitesi iddiası","category":"ransomware","severity":"medium","turkey_signal":true,"tr_entity":"Çiftay İnşaat Taahhüt ve Ticaret A.Ş.","status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":"Qilin fidye yazılımı grubu, Çiftay İnşaat Taahhüt ve Ticaret A.Ş. kurumunu kurbanları arasında listelediğini iddia ediyor; iddia bağımsız olarak doğrulanmadı.","tags":["country:TR","origin_leak_tracker","origin_x_tip"],"entity":"Çiftay İnşaat Taahhüt ve Ticaret A.Ş.","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":null,"kev":false},{"id":"kr-acrc-integrity-edu-100k-leak-2026-10-06","first_seen":"2026-10-06T00:00:00+03:00","updated":"2026-10-07T03:30:09+03:00","title":"Güney Kore: Yolsuzlukla Mücadele ve Sivil Haklar Komisyonu (ACRC, 국민권익위원회) çevrim içi dürüstlük eğitimi platformunu işleten yüklenicinin veritabanı hacklendi — 100 bini aşkın kullanıcı (ad, doğum tari","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.donga.com/news/Economy/article/all/20261007/134798126/2","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:KR","desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":"KR","sgb_id":null,"kev":false},{"id":"yakiniku-king-monogatari-10-8m-app-members-breach-2026-10-05-c5d77c","first_seen":"2026-10-05T23:25:00+03:00","updated":"2026-10-05T23:42:06+03:00","title":"Yakiniku King Uygulamasında 10,8 Milyon Üye Verisi Sızdı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.monogatari.co.jp/news/261005_news/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/yakiniku-king-uygulamasi-10-milyon-uye-verisi-sizdi-2026.html","summary":"Japon restoran zinciri Yakiniku King'in işletmecisi Monogatari Corporation, resmi uygulamasına yapılan yetkisiz erişim sonucunda yaklaşık 10,8 milyon üyenin ad, e-posta, telefon ve üyelik numarası bilgilerinin sızdığını duyurdu.","tags":["sgh_published"],"entity":"Yakiniku King Uygulamasında 10","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"10,8 Milyon Üye","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"vypr-new-ransomware-group-2026-10-05-f24042","first_seen":"2026-10-05T23:25:00+03:00","updated":"2026-10-16T22:49:06+03:00","title":"Yeni fidye grubu VYPR (, onion; kurban adı yok)","category":"ransomware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"jlr-q2-wholesales-cyberattack-recovery-2026-10-05","first_seen":"2026-10-05T22:53:00+03:00","updated":"2026-10-05T22:53:00+03:00","title":"JLR Q2 toptan satışları %25 arttı — Tata Motors kolu siber saldırıdan toparlanıyor (tek ikincil kaynak)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgh:georgia-power-alabama-power-musteri-portali-veri-ihlali-2026","first_seen":"2026-10-05T22:28:00+03:00","updated":"2026-10-05T22:28:00+03:00","title":"Southern Company Müşteri Portalında Veri İhlali: Yaklaşık 400 Bin Hesap Etkilendi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.wsbtv.com/news/local/atlanta/cyberattack-georgia-power-exposed-info-400000-customers/HPJVDLIRENDPDJHPVS3HGUGWGA/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/georgia-power-alabama-power-musteri-portali-veri-ihlali-2026.html","summary":"Georgia Power ve Alabama Power çatı şirketi Southern Company, müşteri portalına yetkisiz erişimde yaklaşık 400 bin hesabın etkilendiğini açıkladı.","tags":["sgh_published"],"entity":"Southern Company Müşteri Portalında Veri İhlali","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"400 Bin Hesap","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"osaka-metropolitan-university-ransomware-500-servers-2026-10-05","first_seen":"2026-10-05T22:25:49+03:00","updated":"2026-10-06T21:53:00+03:00","title":"Osaka Metropolitan Üniversitesi: Sistem Çöküşü Fidye Yazılımı Saldırısından Kaynaklandı","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.omu.moe/news/2026-10-06-7fb5a624.html","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/osaka-metropolitan-universitesi-fidye-yazilimi-saldirisi-2026.html","summary":"Osaka Metropolitan Üniversitesi, 2 Ekim'deki büyük sistem çöküşünün fidye yazılımı saldırısından kaynaklandığını açıkladı. Kişisel veri sızıntısı olup olmadığı araştırılıyor.","tags":["country:JP","sgh_published","sgh_shared_on_x"],"entity":"Osaka Metropolitan Üniversitesi","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":"JP","sgb_id":null,"kev":false},{"id":"onsemi-qilin-us-2026-10-05-64d4d8","first_seen":"2026-10-05T22:25:49+03:00","updated":"2026-10-05T22:25:49+03:00","title":"Onsemi (onsemi.com, ABD yarı iletken) — Qilin fidye grubu sızıntı sitesi iddiası","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":"Qilin fidye yazılımı grubu, Onsemi kurumunu kurbanları arasında listelediğini iddia ediyor; iddia bağımsız olarak doğrulanmadı.","tags":["country:US","origin_leak_tracker"],"entity":"Onsemi","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"atb-ukraine-cyberattack-website-2026-10-05","first_seen":"2026-10-05T19:40:00+03:00","updated":"2026-10-06T22:25:00+03:00","title":"ATB (Ukrayna perakende) siber saldırı sonrası site kapalı (UA.NEWS)","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["partially_confirmed"],"entity":"ATB","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"retail","country":null,"sgb_id":null,"kev":false},{"id":"bacon-county-health-breach-2026-10-05","first_seen":"2026-10-05T19:40:00+03:00","updated":"2026-10-05T19:40:00+03:00","title":"Bacon County Health Services veri ihlali (ClassAction.org)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Bacon County Health Services","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"sgh:enka-okullari-doommageddon-fidye-iddiasi-2026","first_seen":"2026-10-05T19:32:47+03:00","updated":"2026-10-05T19:32:47+03:00","title":"Doommageddon, ENKA Okulları'nı sızıntı listesine ekledi; okuldan açıklama yok","category":"ransomware","severity":"medium","turkey_signal":true,"tr_entity":"ENKA Okulları","status":"claim_only","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/enka-okullari-doommageddon-fidye-iddiasi-2026.html","summary":"Doommageddon fidye grubu, İstanbul'daki ENKA Okulları'nı sızıntı listesine ekleyerek 15 Ekim için süre verdi. Okul yönetiminden henüz bir teyit yok.","tags":["sgh_published"],"entity":"ENKA Okulları","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"sgh:alabama-hemsirelik-kurulu-fidye-saldirisi-2026","first_seen":"2026-10-05T18:54:31+03:00","updated":"2026-10-05T18:54:31+03:00","title":"Alabama Hemşirelik Kurulu: Fidye saldırısında hemşire verileri ele geçirilmiş olabilir","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.abn.alabama.gov/wp-content/uploads/2026/10/Final-Press-Release.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/alabama-hemsirelik-kurulu-fidye-saldirisi-2026.html","summary":"Alabama Hemşirelik Kurulu, fidye saldırısında hemşire ve başvuru sahiplerine ait kimlik ve sağlık verilerinin ele geçirilmiş olabileceğini açıkladı.","tags":["sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261005-1639-south-africa-insurers-ransomware-threat","first_seen":"2026-10-05T17:26:31+03:00","updated":"2026-10-05T17:26:31+03:00","title":"Güney Afrika: fidye grubu büyük sigorta şirketlerinin müşteri verisini sızdırmakla tehdit ediyor (MyBroadband/TechCentral)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"insurance","country":null,"sgb_id":null,"kev":false},{"id":"dread-conclave-takeover-claim-2026-10-05-4d87fe","first_seen":"2026-10-05T16:30:00+03:00","updated":"2026-10-15T09:18:53+03:00","title":"Dread darknet forumu ele geçirildi iddiası — Conclave onion alanı/anahtarlar","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"zachxbt-chinese-laundering-syndicate-lazarus-2026-10-05","first_seen":"2026-10-05T16:30:00+03:00","updated":"2026-10-15T09:18:53+03:00","title":"ZachXBT: Lazarus için 1 milyar $+ aklayan Çin suç şebekesine sızma araştırması","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["Lazarus"],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"200m-email-leak-mashable-reindex-2026-10-05-d56f75","first_seen":"2026-10-05T16:30:00+03:00","updated":"2026-10-05T16:30:00+03:00","title":"X (Twitter) 200 milyon e-posta sızıntısı iddiası (Mashable 5 Eki indeks)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261005-1539-daiichi-life-hr","first_seen":"2026-10-05T15:58:00+03:00","updated":"2026-10-05T15:58:00+03:00","title":"Dai-ichi Life İK sistemi ihlali ~120 bin çalışan","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":"Dai-ichi Life İK","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261005-1539-strakonice-hospital","first_seen":"2026-10-05T15:58:00+03:00","updated":"2026-10-05T15:58:00+03:00","title":"Nemocnice Strakonice (CZ) 437 bin hasta kaydı satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgh:daiwa-securities-veri-ihlali-110-bin-musteri-2026","first_seen":"2026-10-05T11:56:04+03:00","updated":"2026-10-05T11:56:04+03:00","title":"Daiwa Securities'in Taşeronuna Yetkisiz Erişim: 110 Bin Müşterinin Bilgileri Sızmış Olabilir","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://ssl4.eir-parts.net/doc/8601/tdnet/2891437/00.pdf","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/daiwa-securities-veri-ihlali-110-bin-musteri-2026.html","summary":"Daiwa Securities, taşeronu Scala Communications'ın sunucusuna yetkisiz erişim olduğunu ve 110 bin müşterinin bilgilerinin sızmış olabileceğini açıkladı.","tags":["sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"110 Bin Müşterinin","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"skt-23m-satis-iddiasi-2026-10","first_seen":"2026-10-05T11:40:00+03:00","updated":"2026-10-05T11:40:00+03:00","title":"SK Telecom (Güney Kore) 23,21M müşteri kaydı satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"SK Telecom","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"23,21M müşteri","sector":"telecom","country":null,"sgb_id":null,"kev":false},{"id":"kirey-group-mediolanum-iddiasi-2026-10","first_seen":"2026-10-05T11:40:00+03:00","updated":"2026-10-05T11:40:00+03:00","title":"Kirey Group (İtalya MSP) tam ele geçirme / Banca Mediolanum erişimi iddiası (ThreatMon)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":"Kirey Group","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"peru-tahsilat-platformu-root-iddiasi-2026-10","first_seen":"2026-10-05T11:40:00+03:00","updated":"2026-10-05T11:40:00+03:00","title":"Peru borç tahsilat/robocall altyapısı root erişim iddiası (ThreatMon)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"danimarka-cpr-8-8-milyon-kisi-veri-ihlali-2026","first_seen":"2026-10-05T10:45:00+03:00","updated":"2026-10-16T22:18:37+03:00","title":"Danimarka'da 8,8 Milyon Kişinin CPR Bilgilerine Yetkisiz Erişim","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://ufm.dk/aktuelt/pressemeddelelser/2026/oktober/omfattende-uautoriseret-adgang-til-borgeres-cpr-oplysninger/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/danimarka-cpr-8-8-milyon-kisi-veri-ihlali-2026.html","summary":"Danimarka nüfus kaydı CPR'de özel bir şirketin yasal sorgu erişimi kötüye kullanıldı; yaklaşık 8,8 milyon kişinin adı, adresi ve CPR numarasına erişildi.","tags":["sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"8,8 Milyon Kişinin","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"hankyu-travel-jp-742k-claim-2026-10-05-071f3f","first_seen":"2026-10-05T09:24:00+03:00","updated":"2026-10-05T09:24:00+03:00","title":"Hankyu Travel (Japonya) 742 bin müşteri verisi satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"742 bin müşteri","sector":"hospitality","country":null,"sgb_id":null,"kev":false},{"id":"kr-finance-wave-online-lenders-pfct-mouda-2026-10-05","first_seen":"2026-10-05T08:30:00+03:00","updated":"2026-10-05T08:30:00+03:00","title":"Güney Kore finans saldırıları çevrim içi yatırım/kredi firmalarına sıçradı (PFC Technologies, Mouda); denetim son tarihleri 6/8 Eki","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.ajupress.com/view/20261005100502280","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"tower-insurance-nz-ransomware-claim-investigation-2026-10-03","first_seen":"2026-10-05T08:30:00+03:00","updated":"2026-10-05T08:30:00+03:00","title":"Tower Insurance (NZ/ASX-NZX) fidye grubu sızıntı sitesinde; şirket doğrulanmamış iddiayı araştırıyor","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":"Tower Insurance","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"insurance","country":null,"sgb_id":null,"kev":false},{"id":"coregistros-spain-8m-claim-2026-10-04-47479b","first_seen":"2026-10-05T08:30:00+03:00","updated":"2026-10-05T08:30:00+03:00","title":"CoRegistros (İspanya) ~8,2M kayıt satış iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":"CoRegistros","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"8,2M kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cikleak-russia-election-infra-claim-2026-10-03","first_seen":"2026-10-05T08:30:00+03:00","updated":"2026-10-09T06:29:42+03:00","title":"CikLeak: Rusya seçim altyapısına sızma iddiası (SiberHavadis 3 Eki)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":"CikLeak","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgh:citrix-netscaler-cve-2026-88779-saml-aktif-somuru-2026","first_seen":"2026-10-05T08:29:22+03:00","updated":"2026-10-05T08:29:22+03:00","title":"Citrix NetScaler SAML Açığı Saldırılarda Kullanılıyor: CISA Acil Yama İstedi","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","cve":["CVE-2026-88779"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/citrix-netscaler-cve-2026-88779-saml-aktif-somuru-2026.html","summary":"Citrix, NetScaler ADC ve Gateway cihazlarında SAML kimlik doğrulamasını hedefleyen ve aktif olarak sömürülen CVE-2026-88779 açığını yamaladı. CISA, federal kurumlara 7 Ekim'e kadar süre verdi.","tags":["cisa_kev","sgh_published"],"entity":"Citrix NetScaler SAML Açığı Saldırılarda Kullanılıyor","affected_products":[],"patch_status":"available","exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"sgb:TR-26-1248","first_seen":"2026-10-05T07:17:00+03:00","updated":"2026-10-05T07:17:00+03:00","title":"SGB TR-26-1248: React Next.js Framework Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1248","cve":["CVE-2026-94484","CVE-2026-94485","CVE-2026-94483","CVE-2026-94543"],"cvss":null,"actor":[],"sgh_url":null,"summary":"React Next.js Framework'de güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1248","kev":false},{"id":"sgb:TR-26-1247","first_seen":"2026-10-05T07:10:26+03:00","updated":"2026-10-05T07:10:26+03:00","title":"SGB TR-26-1247: Apache Thrift Güvnelik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1247","cve":["CVE-2026-66081","CVE-2026-94639","CVE-2026-94635","CVE-2026-91135","CVE-2026-91137","CVE-2026-93925","CVE-2026-90440","CVE-2026-87117","CVE-2026-86537","CVE-2026-86536","CVE-2026-86535","CVE-2026-85088","CVE-2026-85087","CVE-2026-85086","CVE-2026-82459","CVE-2026-82458","CVE-2026-96288","CVE-2026-66331","CVE-2026-66837","CVE-2026-66858","CVE-2026-66859","CVE-2026-83632","CVE-2026-83663","CVE-2026-83745"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Apache Thrift ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1247","kev":false},{"id":"sgb:TR-26-1246","first_seen":"2026-10-05T07:05:26+03:00","updated":"2026-10-08T10:57:49+03:00","title":"SGB TR-26-1246: WordPress Eklenti Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"WordPress Eklenti","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1246","cve":["CVE-2026-17005","CVE-2026-97637","CVE-2026-94432","CVE-2026-97338","CVE-2026-97634","CVE-2026-96647","CVE-2026-95670","CVE-2026-93756","CVE-2026-100107","CVE-2026-96871","CVE-2026-97342","CVE-2026-103426","CVE-2026-96566","CVE-2026-102002","CVE-2026-12951","CVE-2026-100182","CVE-2026-97641","CVE-2026-102772","CVE-2026-95817","CVE-2026-97336","CVE-2026-93880","CVE-2026-96567","CVE-2026-96578","CVE-2026-97663","CVE-2026-97652","CVE-2026-85492","CVE-2026-87920","CVE-2026-94541","CVE-2026-19652","CVE-2026-93875","CVE-2026-19856","CVE-2026-93428","CVE-2026-92243","CVE-2026-94539","CVE-2026-94378","CVE-2026-100180","CVE-2026-96270","CVE-2026-95865","CVE-2026-92727","CVE-2026-92538","CVE-2026-92826","CVE-2026-97644","CVE-2026-92977","CVE-2026-92551","CVE-2026-92536","CVE-2026-103888","CVE-2026-103909","CVE-2026-96575","CVE-2026-100148","CVE-2026-101357","CVE-2026-89417","CVE-2026-82212","CVE-2026-82211","CVE-2026-105322","CVE-2026-86833","CVE-2026-17538","CVE-2026-94154","CVE-2026-82627"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/wordpress-eklenti-guvenlik-bildirimi-tr-26-1269-sgb.html","summary":"Bazı WordPress eklentilerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli önlemlerin ivedilikle alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","sgh_shared_on_x","tr_official"],"entity":"WordPress Eklenti","affected_products":[],"patch_status":"not_available","exploited":null,"records_claimed":null,"sector":null,"country":"TR","sgb_id":"TR-26-1246","kev":false},{"id":"kepco-24k-employee-data-exposed-2026-10-04","first_seen":"2026-10-05T05:14:00+03:00","updated":"2026-10-05T05:14:00+03:00","title":"KEPCO (Korea Electric Power) 24 bin çalışan kişisel verisi internette açığa çıktı; müşteri verisi etkilenmedi (biggo, ikincil)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"internlm-mindsearch-cve-2026-105135-cvss10-2026-10-05","first_seen":"2026-10-05T04:48:47+03:00","updated":"2026-10-05T04:48:47+03:00","title":"InternLM MindSearch açık kaynak AI ajan çerçevesinde CVSS 10 kod enjeksiyonu (CVE-2026-105135)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-105135"],"cvss":10,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"terrebonne-parish-la-cyberattack-2026-10-04","first_seen":"2026-10-05T03:52:00+03:00","updated":"2026-10-05T03:52:00+03:00","title":"Terrebonne Parish (LA): şüpheli siber saldırı sonrası hizmetler geri yükleniyor (WWLTV)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ahsaycbs-cve-2026-105134-cvss10-2026-10-05","first_seen":"2026-10-05T03:52:00+03:00","updated":"2026-10-17T11:23:10+03:00","title":"AhsayCBS yedekleme sunucusunda CVSS 10 kimlik doğrulamasız komut enjeksiyonu (CVE-2026-105134)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/ahsaycbs-flaws-exploited-to-deploy-web.html","cve":["CVE-2026-105134"],"cvss":10,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"byod-ransomware-royal-selangor-claim-2026-10-05","first_seen":"2026-10-05T03:20:00+03:00","updated":"2026-10-05T03:20:00+03:00","title":"Yeni fidye grubu BYOD: Royal Selangor (MY) iddiası","category":"ransomware","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"frontline-education-ssn-breach-2026-10","first_seen":"2026-10-05T02:55:00+03:00","updated":"2026-10-17T13:21:44+03:00","title":"Frontline Education: çalışan SSN verisi ifşa olan veri ihlali (SC Media)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.bleepingcomputer.com/news/security/frontline-education-data-breach-impacts-school-district-employees/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","partially_confirmed"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"military-data-breach-yahoo-2026-10-04","first_seen":"2026-10-05T02:55:00+03:00","updated":"2026-10-05T02:55:00+03:00","title":"Yahoo: \"Askeri veri ihlali milyonlarca kişiyi riske atıyor\"","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Yahoo","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"virustotal-enterprise-api-key-sale-claim-2026-10-04-ea0f12","first_seen":"2026-10-05T01:25:00+03:00","updated":"2026-10-05T01:25:00+03:00","title":"VirusTotal Enterprise API anahtarı (55K/ay) 450$'a satılıyor iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"treasury-beyondtrust-abc30-recirc-2026-10-03","first_seen":"2026-10-05T01:25:00+03:00","updated":"2026-10-05T01:25:00+03:00","title":"ABC30: Treasury China-sponsored cyberbreach (Ara 2024 BeyondTrust olayı yeniden dolaşımda)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.reuters.com/technology/cybersecurity/us-treasurys-workstations-hacked-cyberattack-by-china-afp-reports-2024-12-30/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"ABC30","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgh:nikkei-microsoft-365-google-workspace-ihlal-2026","first_seen":"2026-10-05T00:08:10+03:00","updated":"2026-10-05T00:08:10+03:00","title":"Nikkei, İki Ayrı Hesap İhlali ve Sahte E-Posta Vakasını Açıkladı","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.nikkei.co.jp/nikkeiinfo/news/information/1554.html","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/nikkei-microsoft-365-google-workspace-ihlal-2026.html","summary":"Japon ekonomi gazetesi Nikkei, bir çalışanın Microsoft 365 hesabının ele geçirilmesiyle 9.000 sahte e-posta gönderildiğini ve bir Google Workspace hesabında da veri sızıntısı yaşandığını açıkladı.","tags":["sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"double-counter-discord-veri-ihlali-2026-10-07","first_seen":"2026-10-05T00:00:00+03:00","updated":"2026-10-08T14:23:40+03:00","title":"Discord botu Double Counter, 28 milyon hesabın verisini açığa çıkmış sayıyor","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://doublecounter.gg/blog/security-incident-october-2026","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/double-counter-discord-veri-ihlali-2026.html","summary":"Discord botu Double Counter'a göre 4 Ekim 2026 saldırısında yaklaşık 28 milyon hesabın verisi açığa çıkmış sayılıyor. Discord'un sistemleri ihlal edilmedi.","tags":["origin_x_tip","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"28 milyon hesabın","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"369cinemas-uae-12m-claim-2026-10-05","first_seen":"2026-10-05T00:00:00+03:00","updated":"2026-10-05T06:47:00+03:00","title":"369 Cinemas (BAE) 12M+ kayıt satış iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":"369 Cinemas","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"12M+ kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"tiaa-data-breach-ssn-claimdepot-2026-10-05","first_seen":"2026-10-05T00:00:00+03:00","updated":"2026-10-05T08:24:00+03:00","title":"TIAA: yeni veri ihlali bildirimi iddiası (SSN) — yalnız Claim Depot dava/lead sayfası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"official","primary_source_url":"https://www.mass.gov/doc/2026-1626-tiaa/download","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped"],"entity":"TIAA","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"keller-williams-agent-db-claim-2026-10-05-c42990","first_seen":"2026-10-05T00:00:00+03:00","updated":"2026-10-05T08:24:00+03:00","title":"Keller Williams (KW.com) ABD acente veritabanı forumda satışta iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"nikkei-m365-gws-breach-9000-phishing-1646-2026-10-04","first_seen":"2026-10-04T23:52:00+03:00","updated":"2026-10-16T21:24:18+03:00","title":"Nikkei: Microsoft 365 hesabı ele geçirildi (~9.000 sahte e-posta, 30 Eyl) + Google Workspace sızıntısı (1.646 kişi) — şirket açıklaması","category":"fraud","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.nikkei.co.jp/nikkeiinfo/news/information/1554.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:JP"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1.646 kişi","sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"thai-airways-200m-records-claim-2026-10-04-76a0e6","first_seen":"2026-10-04T23:52:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Thai Airways — 200M+ kayıt satış/yayın iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:TH","origin_x_tip"],"entity":"Thai Airways International","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"200M+ kayıt","sector":null,"country":"TH","sgb_id":null,"kev":false},{"id":"israel-imod-5tb-claim-2026-10-04-fc3e52","first_seen":"2026-10-04T22:48:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"İsrail Savunma Bakanlığı (IMOD): 5 TB verinin yeraltı forumunda satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:IL","origin_x_tip"],"entity":"Israeli Ministry of Defense","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"5 TB","sector":"government","country":"IL","sgb_id":null,"kev":false},{"id":"cisa-kev-citrix-netscaler-cve-2026-88779-2026-10-04","first_seen":"2026-10-04T22:09:00+03:00","updated":"2026-10-05T22:25:49+03:00","title":"CISA KEV: Citrix NetScaler CVE-2026-88779 (buffer DoS) — catalog 2026.10.04","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","cve":["CVE-2026-88779"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev"],"entity":"Citrix NetScaler","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"basefex-usa-crypto-investor-leads-90k-claim-2026-10-04-efcfc4","first_seen":"2026-10-04T15:50:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Basefex — alleged USA crypto investor-leads DB ~90k lines offered for sale ( iddiası)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":"Basefex","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"90k lines","sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"guney-kore-baskan-lee-finans-sektoru-veri-ihlali-sorusturma-2026-10-04","first_seen":"2026-10-04T14:25:00+03:00","updated":"2026-10-05T08:30:00+03:00","title":"Güney Kore Cumhurbaşkanı Lee’den Finans Sektörü Veri İhlali Soruşturma Emri","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.koreaherald.com/article/10892927","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/guney-kore-baskan-lee-finans-sektoru-veri-ihlali-sorusturma-2026-10-04.html","summary":"Güney Kore Cumhurbaşkanı Lee Jae-myung, 4 Ekim 2026’da finans ve kamu kurumlarındaki kişisel veri sızıntıları için kapsamlı soruşturma ve önlem…","tags":["country:KR","origin_x_tip","sgh_published"],"entity":"Güney Kore Cumhurbaşkanı Lee","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"KR","sgb_id":null,"kev":false},{"id":"elbaite-australia-crypto-17k-claim-2026-10-04-fe7b36","first_seen":"2026-10-04T13:50:00+03:00","updated":"2026-10-16T10:18:00+03:00","title":"Elbaite Australia crypto exchange ~17.5k PII sale iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:AU","origin_x_tip"],"entity":"Elbaite","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"AU","sgb_id":null,"kev":false},{"id":"cgt-france-77k-scrape-claim-2026-10-04-a3eb3d","first_seen":"2026-10-04T11:45:00+03:00","updated":"2026-10-16T10:18:00+03:00","title":"CGT France (cgt.fr) ~77k user scrape iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","origin_x_tip"],"entity":"CGT France","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"credit-libanais-customer-data-claim-2026-10-04-f2cbc9","first_seen":"2026-10-04T09:44:48+03:00","updated":"2026-10-16T10:18:00+03:00","title":"Credit Libanais müşteri verilerinin satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:LB","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"LB","sgb_id":null,"kev":false},{"id":"ukraine-mfa-visa-platform-404crew-claim-2026-10-04-16a282","first_seen":"2026-10-04T07:48:24+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Ukrayna Dışişleri Bakanlığı vize platformunun 404Crew Cyber Team tarafından hedef alındığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["404Crew Cyber Team"],"sgh_url":null,"summary":null,"tags":["country:UA","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":"UA","sgb_id":null,"kev":false},{"id":"nhs-england-app-38m-claim-2026-10-04-6d993a","first_seen":"2026-10-04T04:39:00+03:00","updated":"2026-10-16T10:18:00+03:00","title":"NHS England uygulama kullanıcıları — ~38 milyon kaydın satışa çıkarıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GB","origin_x_tip"],"entity":"NHS England","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"GB","sgb_id":null,"kev":false},{"id":"crespo-mayor-venezuela-300k-claim-2026-10-04-ecccde","first_seen":"2026-10-04T04:39:00+03:00","updated":"2026-10-16T10:18:00+03:00","title":"Crespo Belediye Başkanlığı (Venezuela): ~300 bin kayıt/belge sızıntısı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:VE","origin_x_tip"],"entity":"Alcaldía Bolivariana de Crespo","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"300 bin kayıt","sector":"government","country":"VE","sgb_id":null,"kev":false},{"id":"giggles-siaga-pii-claim-2026-10-04-6359b9","first_seen":"2026-10-04T04:09:00+03:00","updated":"2026-10-16T10:18:00+03:00","title":"Giggles / Siaga: kişisel veri içeren veri seti sızıntısı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:US","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"tcs-source-code-credentials-claim-2026-10-04-75e973","first_seen":"2026-10-04T04:09:00+03:00","updated":"2026-10-16T10:18:00+03:00","title":"Tata Consultancy Services (TCS): yeraltında kaynak kod/kimlik bilgisi iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:IN","origin_x_tip"],"entity":"Tata Consultancy Services","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"IN","sgb_id":null,"kev":false},{"id":"hauts-de-france-carte-generation-partners-claim-2026-10-04-bb2b51","first_seen":"2026-10-04T03:41:00+03:00","updated":"2026-10-16T10:18:00+03:00","title":"Hauts-de-France Carte Génération iş ortakları portalı: ~48 GB verinin yeraltında satışa çıkarıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:FR","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"48 GB","sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"vercel-vm-escape-zeroday-bounty-2026-10-03","first_seen":"2026-10-04T02:40:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Araştırmacı tam sanal makine kaçışı sağlayan sıfırıncı gün açığı bulduğunu iddia ediyor; Vercel 50 bin $ ödül","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"shinyhunters-rey-jordan-detention-reuters-2026-10-03","first_seen":"2026-10-03T19:16:00+03:00","updated":"2026-10-05T05:14:00+03:00","title":"Reuters: ShinyHunters şüphelisi Khader’ın Ürdün’de alıkonulduğu öne sürüldü","category":"apt","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.streetinsider.com/Reuters/Exclusive-ShinyHunters+hacker+in+FBI+data+theft+detained+in+Jordan%2C+cooperating+with+bureau%2C+sources+say/27144292.html","cve":[],"cvss":null,"actor":["ShinyHunters"],"sgh_url":"https://siberguvenlikhaber.com/haber/shinyhunters-rey-khader-urdun-gozalti-2026.html","summary":"Reuters’a konuşan üç kaynak, Saif al-Din Khader’ın (Rey) Ürdün’de alıkonulduğunu ve FBI ile iş birliği yaptığını söyledi; FBI bu gözaltıyı doğrulamadı.","tags":["country:JO","origin_x_tip","partially_confirmed","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JO","sgb_id":null,"kev":false},{"id":"warlock-sharepoint-symantec-longlegs-2026-10-03","first_seen":"2026-10-03T18:42:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Warlock/Longlegs/Storm-2603 continues SharePoint exploitation (Symantec; PT/ES-speaking critical infra)","category":"ransomware","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/warlock-exploits-sharepoint-flaws-to.html","cve":[],"cvss":null,"actor":["Storm-2603","warlock"],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"flink-de-1m-customers-claim-2026-10-02-0a9c6a","first_seen":"2026-10-02T23:41:00+03:00","updated":"2026-10-16T21:24:18+03:00","title":"Flink (Almanya/Hollanda, teslimat) ihlal iddiası: ~1 milyon müşteri + 13,8 bin çalışan (LPG_Group)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["LPG_Group"],"sgh_url":null,"summary":"LPG_Group, Flink ile ilişkili veri ele geçirdiğini iddia ediyor; iddia bağımsız olarak doğrulanmadı.","tags":["country:DE","origin_x_tip"],"entity":"Flink","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1 milyon müşteri","sector":null,"country":"DE","sgb_id":null,"kev":false},{"id":"cnam-france-882k-records-claim-2026-10-02-b8e083","first_seen":"2026-10-02T23:20:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"CNAM (Conservatoire National des Arts et Métiers): ~882.918 kayıtlık veri iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"CNAM","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"882.918 kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"turkiye-sigorta-11m-pii-claim-2026-10-02-9c74f6","first_seen":"2026-10-02T20:27:31+03:00","updated":"2026-10-04T15:50:00+03:00","title":"Türkiye Sigorta veri satışı iddiası: 11 milyon satır; teyit yok","category":"leak","severity":"critical","turkey_signal":true,"tr_entity":"Türkiye Sigorta","status":"claim_only","source_type":"sgh","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/turkiye-sigorta-11m-pii-iddiasi-2026.html","summary":"Yeraltı ilanında Türkiye Sigorta’ya ait ~11 milyon satır kişisel veri satıldığı ileri sürüldü; CSV örnek isteniyor. Kurum teyidi yok.","tags":["origin_x_tip","sgh_published"],"entity":"Türkiye Sigorta","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"11 milyon satır","sector":"insurance","country":null,"sgb_id":null,"kev":false},{"id":"waltio-crypto-leads-claim-2026-10-02-2090b4","first_seen":"2026-10-02T18:49:29+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Waltio (Fransa, kripto vergi) müşteri adaylarına ait verilerin yeraltı forumunda satışta olduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"transluce-ai-agents-sql-ed-canada-lac-2026-10-02","first_seen":"2026-10-02T18:23:02+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Transluce/Corridor: Yapay zekâ ajanları ABD Eğitim Bakanlığı ile Kanada Kütüphane ve Arşivleri'ni yokladı (SQL/XSS denemeleri; doğrulanmış ele geçirme yok)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.securityweek.com/ai-agents-aimed-sql-injection-at-us-and-canadian-government-sites/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["partially_confirmed"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"cecyte-jalisco-600k-students-claim-2026-10-02-b88025","first_seen":"2026-10-02T18:23:02+03:00","updated":"2026-10-04T23:52:00+03:00","title":"CECyTE Jalisco: ~600 bin öğrencilik veri setinin satışa sunulduğu iddiası (~2 GB)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"CECyTE Jalisco","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"2 GB","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sony-ps5-relapse-jailbreak-security-update-2026-10-02","first_seen":"2026-10-02T18:23:02+03:00","updated":"2026-10-12T12:18:00+03:00","title":"Sony PS5 security update after Relapse jailbreak release","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cisa-armatura-one-icsa-26-274-01-2026-10-01","first_seen":"2026-10-02T17:50:45+03:00","updated":"2026-10-04T23:52:00+03:00","title":"CISA ICSA-26-274-01 Armatura One physical access-control vulns (ActiveMQ CVE-2023-46604 chain)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01","cve":["CVE-2023-46604"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"carmax-pii-claim-2026-10-02-3f73d8","first_seen":"2026-10-02T17:23:30+03:00","updated":"2026-10-04T23:52:00+03:00","title":"CarMax alleged customer PII dump on underground forum ( iddiası)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"chimera-airtel-initial-access-claim-2026-10-02","first_seen":"2026-10-02T17:23:30+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Chimera Group, Bharti Airtel'e ilk erişim sağladığını iddia ediyor (belgeler/kişisel veri/kimlik bilgileri)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"coinbase-1.27m-claim-2026-10-02-d39834","first_seen":"2026-10-02T14:20:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Coinbase: ~1,27 milyon kaydın darkweb forumunda satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Coinbase","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"indmoney-21m-claim-2026-10-02-42dbd8","first_seen":"2026-10-02T14:20:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"INDmoney: darkweb forumunda ~21 milyon kayıtlık ihlal iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"INDmoney","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"21 milyon kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1245","first_seen":"2026-10-02T14:07:52+03:00","updated":"2026-10-05T15:59:41+03:00","title":"SGB TR-26-1245: MRV Teknoloji - TurkHotspot Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"MRV Teknoloji Dış Ticaret Ltd. Şti.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1245","cve":["CVE-2026-5782"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/loglama-turkhotspot-cve-sgb.html","summary":"MRV Teknoloji Dış Ticaret Ltd. Şti. tarafından geliştirilen TurkHotspot ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, üretici firmanın ilgili ürüne desteğini sonlandırmasından dolayı kullanıcı ve sistem yöneticilerine muadil başka bir uygulama kullanmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"MRV Teknoloji Dış Ticaret Ltd. Şti.","affected_products":["TurkHotspot"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":"TR-26-1245","kev":false},{"id":"sgh:microsoft-x-hesap-clippy-kripto-2026","first_seen":"2026-10-02T13:15:57+03:00","updated":"2026-10-02T15:57:46+03:00","title":"Microsoft X hesabı ele geçirildi: Clippy kripto sahtekarlığı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.bleepingcomputer.com/news/security/microsofts-x-account-hacked-in-crypto-token-pump-and-dump-scheme/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/microsoft-x-hesap-clippy-kripto-2026.html","summary":"Microsoft, resmi X hesabının yetkisiz erişimle ele geçirilip Clippy temalı bir kripto tokenını tanıtmak için kullanıldığını doğruladı; hesap güvenceye alındı.","tags":["sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1244","first_seen":"2026-10-02T12:52:13+03:00","updated":"2026-10-04T15:50:00+03:00","title":"SGB TR-26-1244: GG Soft Yazılım - Paperwork Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"GG Soft Yazılım Hizmetleri A.Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1244","cve":["CVE-2026-85215"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/gg-soft-paperwork-cve-sgb.html","summary":"GG Soft Yazılım Hizmetleri A.Ş. tarafından geliştirilen Paperwork ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 09.09.2026 tarihli sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"GG Soft Yazılım Hizmetleri A.Ş.","affected_products":["Paperwork"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":"TR-26-1244","kev":false},{"id":"sgb:TR-26-1243","first_seen":"2026-10-02T12:30:52+03:00","updated":"2026-10-04T15:50:00+03:00","title":"SGB TR-26-1243: Softtr Bilişim - E-Ticaret Paketi Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Softtr Bilişim Ticaret Limited Şirketi","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1243","cve":["CVE-2026-11795"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/softtr-eticaret-paketi-cve-sgb.html","summary":"Softtr Bilişim Ticaret Limited Şirketi tarafından geliştirilen E-Ticaret Paketi ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 5.03.01.54 sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Softtr Bilişim Ticaret Limited Şirketi","affected_products":["E-Ticaret Paketi"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"retail","country":null,"sgb_id":"TR-26-1243","kev":false},{"id":"sgb:TR-26-1242","first_seen":"2026-10-02T11:49:37+03:00","updated":"2026-10-04T15:50:00+03:00","title":"SGB TR-26-1242: AVEZ Elektronik - LMS Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"AVEZ Elektronik İletişim Eğitim Danışmanlığı Ticaret Anonim Şirketi","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1242","cve":["CVE-2026-85209"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/avez-elektronik-lms-cve-sgb.html","summary":"AVEZ Elektronik İletişim Eğitim Danışmanlığı Ticaret Anonim Şirketi tarafından geliştirilen Öğrenme Yönetim Sistemi (Learning Management System, \"LMS\") ürününde zafiyet tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın en az 18.09.2026 tarihli sürümü ve sonrasına yükseltilmesini tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"AVEZ Elektronik İletişim Eğitim Danışmanlığı Ticaret Anonim Şirketi","affected_products":["Öğrenme Yönetim Sistemi (Learning Management System, \"LMS\")","Öğrenme Yönetim Sistemi (LMS)"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":"TR-26-1242","kev":false},{"id":"rbfa-346k-claim-2026-10-02-4fe519","first_seen":"2026-10-02T11:18:55+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Belçika Kraliyet Futbol Federasyonu (RBFA): ~346 bin verinin satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"china-railway-12306-221m-claim-2026-10-02-f37bd8","first_seen":"2026-10-02T11:18:55+03:00","updated":"2026-10-05T11:40:00+03:00","title":"China Railway 12306: ~221 milyon kullanıcı kaydının satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"China Railway 12306","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"221 milyon kullanıcı","sector":"transport","country":null,"sgb_id":null,"kev":false},{"id":"finfrog-320k-claim-2026-10-02-ceee4e","first_seen":"2026-10-02T10:20:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Finfrog (Fransa, fintek): ~320 bin müşteri verisinin satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"320 bin müşteri","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"jettly-458k-claim-2026-10-02-0e8fbb","first_seen":"2026-10-02T10:20:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Jettly özel havacılık pazaryeri: ~458 bin kullanıcı verisinin satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"458 bin kullanıcı","sector":"transport","country":null,"sgb_id":null,"kev":false},{"id":"kb-kookmin-bank-119-veri-ihlali-2026-10-02","first_seen":"2026-10-02T10:20:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"KB Kookmin Bank, çalışan mobil iş destek sistemi üzerinden 119 müşterinin kişisel verisinin sızdığını doğruladı (ad/telefon/adres/şifreli kimlik no) — banka duyurusu 2 Eki 2026, Shinhan'daki ~25 binlik olayın ardından","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://en.yna.co.kr/view/AEN20261002004951320","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"KB Kookmin Bank CONFIRMED 119-customer PII","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"china-mobile-850m-saotome-20260921","first_seen":"2026-10-02T09:55:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"China Mobile 850 milyon abone kaydı satış iddiası (saotome)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"opinion-space-888-leak-claim-2026-09-24-0159","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"Opinion Space — aktör 888 ~142K üye veri seti iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"142K üye","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"foremost-mfg-qilin-2026","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"Foremost Mfg / Qilin iddiası","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"winston-contracting-qilin-2026","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"Winston Contracting, LLC / Qilin iddiası","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"roadex-america-qilin-2026","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"RoadEx America / Qilin iddiası","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":null,"tags":["country:US"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"minmer-global-qilin-2026","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"Minmer Global / Qilin iddiası","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["Qilin"],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"tpi-tw-lockbit5-2026","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"tpi.tw / LockBit5 iddiası","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["LockBit"],"sgh_url":null,"summary":null,"tags":["country:TW"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"TW","sgb_id":null,"kev":false},{"id":"robecco-naviglio-lockbit5-2026","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"comune.robeccosulnaviglio.mi.it / LockBit5 iddiası","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["LockBit"],"sgh_url":null,"summary":null,"tags":["country:IT"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"IT","sgb_id":null,"kev":false},{"id":"httoy-fi-lockbit5-2026","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"httoy.fi / LockBit5 iddiası","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["LockBit"],"sgh_url":null,"summary":null,"tags":["country:FI"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"FI","sgb_id":null,"kev":false},{"id":"kvkk-otomotiv-430bin-lockbit-bha-2026","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"KVKK otomotiv yan sanayi 430 bin TL LockBit","category":"ransomware","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"claim_only","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":["LockBit"],"sgh_url":null,"summary":null,"tags":["country:TR"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"manufacturing","country":"TR","sgb_id":null,"kev":false},{"id":"autobacs-france-34k-iddiasi-2026-09-23-2326","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"Autobacs France ~34K müşteri kaydı sızıntı iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["desk_skipped","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"34K müşteri","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ubuntu-afunix-cve-2026-80521-2026-09-23-2326","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"Ubuntu LTS: CVE-2026-80521 AF_UNIX kaçış PoC (DepthFirst/THN); yama yok","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/09/exploit-released-for-unpatched-ubuntu.html","cve":["CVE-2026-80521"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Ubuntu LTS","affected_products":[],"patch_status":"not_available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ibm-ftm-openshift-cve-2026-18163-2326","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"IBM FTM for OpenShift kritik bülten (CVE-2026-18163/18162)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-18163"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"defender-bigdiskbuster-naceri-2026-09-23-2326","first_seen":"2026-10-02T08:48:42+03:00","updated":"2026-10-04T15:50:00+03:00","title":"Naceri BigDiskBuster: Defender güncelleme engelleme PoC (BC)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.bleepingcomputer.com/news/security/new-windows-defender-zero-day-blocks-microsoft-antivirus-updates/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1241","first_seen":"2026-10-02T08:43:58+03:00","updated":"2026-10-04T15:50:00+03:00","title":"SGB TR-26-1241: HAVELSAN - Sef - AI Chatbot Platform Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"HAVELSAN A.Ş.","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1241","cve":["CVE-2026-80298","CVE-2026-80337","CVE-2026-80443","CVE-2026-80464"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/havelsan-sef-ai-chatbot-cve-sgb.html","summary":"HAVELSAN A.Ş. tarafından geliştirilen Sef - AI Chatbot Platform ürününde zafiyetler tespit edilmiştir. Siber Güvenlik Başkanlığı, uygulamanın 2.1 sürümüne yükseltilmesi ve bundan sonraki süreçte üretici firmanın ilgili ürüne desteğini sonlandırmasından dolayı kullanıcı ve sistem yöneticilerine muadil başka bir uygulama kullanmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"HAVELSAN A.Ş.","affected_products":["Sef - AI Chatbot Platform"],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1241","kev":false},{"id":"sgb:TR-26-1240","first_seen":"2026-10-02T07:50:28+03:00","updated":"2026-10-02T07:50:28+03:00","title":"SGB TR-26-1240: Wind River VxWorks 7 Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Wind River VxWorks 7","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1240","cve":["CVE-2026-104018"],"cvss":null,"actor":[],"sgh_url":null,"summary":"Wind River VxWorks 7 ürününde güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bildirimini incelemelerini ve gerekli güvenlik güncellemelerini yapmalarını tavsiye etmektedir.","tags":["sgb","tr_official"],"entity":"Wind River VxWorks 7","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1240","kev":false},{"id":"sgb:TR-26-1239","first_seen":"2026-10-02T07:44:42+03:00","updated":"2026-10-02T10:51:48+03:00","title":"SGB TR-26-1239: JohnsonControls Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"JohnsonControls Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1239","cve":["CVE-2026-27873","CVE-2026-64893","CVE-2026-64892","CVE-2026-34494","CVE-2026-34493","CVE-2026-71449","CVE-2026-71448"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/johnson-controls-coklu-urun-cve-sgb.html","summary":"Bazı JohnsonControls ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bildirimini incelemelerini ve gerekli güvenlik güncellemelerini yapmalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"JohnsonControls Çoklu Ürün","affected_products":["Johnson Controls ürünleri"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1239","kev":false},{"id":"sgb:TR-26-1237","first_seen":"2026-10-02T07:40:26+03:00","updated":"2026-10-02T10:51:48+03:00","title":"SGB TR-26-1237: Apache HTTP Server Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Apache HTTP Server","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1237","cve":["CVE-2026-63686","CVE-2026-93546","CVE-2026-79768","CVE-2026-73637","CVE-2026-73636","CVE-2026-63718"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/apache-http-server-zafiyet-sgb.html","summary":"Apache HTTP Server ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı kullanıcı ve sistem yöneticilerine yayınlanan dokümanları incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Apache HTTP Server","affected_products":["Apache HTTP Server"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":"TR-26-1237","kev":false},{"id":"sgb:TR-26-1236","first_seen":"2026-10-02T07:37:54+03:00","updated":"2026-10-02T10:51:48+03:00","title":"SGB TR-26-1236: Red Hat Keycloak Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Red Hat Keycloak","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1236","cve":["CVE-2026-103884"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/redhat-keycloak-cve-sgb.html","summary":"Red Hat Keycloak'da güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, sistem yöneticilerine Keycloak güncellemelerini ivedilikle yapmalarını önermektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Red Hat Keycloak","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1236","kev":false},{"id":"sgb:TR-26-1235","first_seen":"2026-10-02T07:35:31+03:00","updated":"2026-10-02T10:51:48+03:00","title":"SGB TR-26-1235: cPanel WHM Mass Modify Accounts/Multilang adminbin Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"cPanel WHM Mass Modify Accounts/Multilang adminbin","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1235","cve":["CVE-2026-93697","CVE-2026-93029","CVE-2026-93698"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/cpanel-whm-mass-modify-cve-sgb.html","summary":"cPanel WHM Mass Modify Accounts ve Multilang adminbin bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, ilgili güvenlik bülteninin incelenmesi ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"cPanel WHM Mass Modify Accounts/Multilang adminbin","affected_products":["cPanel WHM Mass Modify Accounts / Multilang adminbin"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1235","kev":false},{"id":"sgb:TR-26-1234","first_seen":"2026-10-02T07:27:38+03:00","updated":"2026-10-06T07:10:39+03:00","title":"SGB TR-26-1234: Ghost Platformu Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Ghost Platformu","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1234","cve":["CVE-2026-103266","CVE-2026-103292","CVE-2026-103291","CVE-2026-103290","CVE-2026-103289","CVE-2026-103288","CVE-2026-103287","CVE-2026-103286","CVE-2026-103285","CVE-2026-103284","CVE-2026-103283","CVE-2026-103282","CVE-2026-103281","CVE-2026-103280","CVE-2026-103279","CVE-2026-103278","CVE-2026-103277","CVE-2026-103276","CVE-2026-103275","CVE-2026-70590","CVE-2026-103274","CVE-2026-103273","CVE-2026-103272","CVE-2026-103271","CVE-2026-103269","CVE-2026-103268","CVE-2026-103267","CVE-2026-105642","CVE-2026-105682","CVE-2026-105681","CVE-2026-105680","CVE-2026-105679","CVE-2026-105678","CVE-2026-105677","CVE-2026-105676"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/ghost-cms-platform-cve-sgb.html","summary":"Ghost platformunda güvenlik zafiyetleri tespit edilmiştir. Sibver Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güvenlik önerilerini inceleyerek gerekli önlemlerin alınmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Ghost Platformu","affected_products":["Ghost CMS"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1234","kev":false},{"id":"vicksburg-ms-ransomware-mayor-2026-10-02","first_seen":"2026-10-02T06:46:39+03:00","updated":"2026-10-06T22:25:00+03:00","title":"Vicksburg şehri (Mississippi) fidye yazılımı: Belediye Başkanı sistemlerin geçici olarak kapatıldığını doğruladı (911/polis/itfaiye etkilenmedi)","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"City of Vicksburg","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"ofx-group-asx-cyber-incident-2026-10-02","first_seen":"2026-10-02T04:51:21+03:00","updated":"2026-10-06T16:23:00+03:00","title":"OFX Group (ASX:OFX) siber güvenlik olayını inceliyor: bazı müşteri/başvuru sahibi verilerine yetkisiz erişim (ASX, 2 Eki 2026)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"OFX Group","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"tr-iys-302k-claim-2026-10-02-3f7165","first_seen":"2026-10-02T02:22:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Türkiye IYS (İleti Yönetim Sistemi) ~302K veri forumda listelenmiş iddiası","category":"leak","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"swiss-university-rdweb-initial-access-2026-10-01-79caa6","first_seen":"2026-10-02T01:52:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Swiss university RDWeb Local Admin (~2500 hosts, >$5B revenue unnamed) advertised","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"advantage-home-health-care-in-breach-19851-2026-10-01","first_seen":"2026-10-02T01:52:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Advantage Home Health Care (Indiana) sunucu ihlali: 19.851 hasta/çalışanın SSN ve kişisel verisi; haziran olayı, HHS bildirimi/mektuplar ağustos","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://dailyhodl.com/2026/10/01/indiana-home-care-provider-breach-exposes-ssns-with-19851-patients-and-staff-at-risk/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Advantage Home Health Care","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"drivewealth-brokerage-breach-revolut-stake-hatch-2026-09","first_seen":"2026-10-02T01:17:40+03:00","updated":"2026-10-08T22:40:28+03:00","title":"DriveWealth veri ihlali: Teksas kaydına göre 2,5 milyondan fazla kişi etkilendi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://oag.ca.gov/ecrime/databreach/reports/sb24-630619","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/drivewealth-veri-ihlali-teksas-2-5-milyon-2026.html","summary":"ABD'li aracı kurum DriveWealth'in ağına Eylül 2026'da yetkisiz erişim oldu; Teksas bildirimine göre 2.556.688 Teksaslı etkilendi, SSN'ler de var.","tags":["sgh_published","sgh_shared_on_x"],"entity":"DriveWealth","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"redhat-satellite-6-19-5-foreman-rce-cve-2026-96658-2026-10-01","first_seen":"2026-10-02T01:17:40+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Red Hat Satellite 6.19.5 Critical — Foreman safemode bypass → RCE (CVE-2026-96658 CVSS 9.9); RHSA-2026:74503","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-96658"],"cvss":9.9,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Red Hat Satellite 6.19.5 Critical","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"kairos-slate-valley-vt-claim-2026-10-01-986036","first_seen":"2026-10-02T00:55:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Kairos ransomware names Vermont Slate Valley Unified Union School District","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Kairos","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"ransomhouse-terca-br-claim-2026-10-01-3663a6","first_seen":"2026-10-02T00:55:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"RansomHouse, TERCA'yı (Brezilya, lojistik, Espírito Santo) kurbanı olarak iddia ediyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"transport","country":null,"sgb_id":null,"kev":false},{"id":"cisa-kev-fortinet-fortimail-cve-2026-104286-2026-10-01","first_seen":"2026-10-02T00:17:36+03:00","updated":"2026-10-04T23:52:00+03:00","title":"CISA KEV: Fortinet FortiMail CVE-2026-104286 path traversal → unauth file write/RCE (active exploitation)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-104286"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CVE-2026-104286","FortiMail","Fortinet","KEV","cisa_kev","flood-hold","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"google-tig-ai-discovered-cve-weaponized-2026-10-01","first_seen":"2026-10-02T00:17:36+03:00","updated":"2026-10-04T16:20:14+03:00","title":"Google TIG: AI-discovered vulns weaponized within days","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-1731"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["AI-vuln","Google-TIG","cisa_kev","flood-hold","origin_x_tip"],"entity":"Google TIG","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"oracle-health-texas-ag-20m-2026-10-06","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-06T08:22:00+03:00","title":"Oracle Health'in 2025 İhlali 20 Milyon Kişiyi Etkiledi: Teksas Kaydı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/oracle-health-ihlali-20-milyon-kisi-2026.html","summary":"Teksas Başsavcılığı'nın veri ihlali kaydına göre, Oracle Health'in 2025 yılında yaşadığı ihlal 19.929.149 kişiyi etkiledi. Açığa çıkan bilgiler arasında Sosyal Güvenlik numaraları ve tıbbi kayıtlar yer alıyor.","tags":["sgh_published"],"entity":"Oracle Health","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"20 Milyon Kişiyi","sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"beyond-gravity-isvicre-siber-saldiri-cin-suphesi-2026-10-15","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-15T15:02:40+03:00","title":"İsviçre uzay şirketi Beyond Gravity'ye siber saldırı: Çin şüphesi","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.srf.ch/news/schweiz/beyond-gravity-china-im-verdacht-nach-cyberattacke-auf-schweizer-weltraumkonzern","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/isvicre-beyond-gravity-siber-saldiri-cin-suphesi-2026.html","summary":"İsviçre devlet uzay şirketi Beyond Gravity hedefli siber saldırıya uğradı. SRF'ye göre Çin şüphesi var; veri çıkışı anlaşılıyor, resmî doğrulama yok.","tags":["country:CH","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"CH","sgb_id":null,"kev":false},{"id":"fmg-sales-marketing-10343-claim-2026-10-02-948601","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"FMG Sales & Marketing (FR) 10,343-record dataset lists contact + social security fields","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"FMG Sales & Marketing","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"retail","country":null,"sgb_id":null,"kev":false},{"id":"debian-13-trixie-1313-kernel-cves-2026-10-02-0106f5","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T16:20:14+03:00","title":"Debian 13 Trixie tek güncellemede 1.313 Linux çekirdeği CVE'sini yamaladı","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cisa-kev-zammad-cve-2026-102489-102490-2026-10-02","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"CISA KEV 2026.10.02: Zammad session fixation + privilege escalation (CVE-2026-102489/102490)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","cve":["CVE-2026-102489"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev"],"entity":"CISA KEV 2026.10.02","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"lao-gov-digital-workplace-tokens-claim-2026-10-02-5cc8ac","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Laos hükümeti dijital çalışma alanı oturum/yenileme belirteçlerinin ele geçirildiği iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ecuador-military-email-access-claim-2026-10-02-3fe450","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Ekvador ordusuna ait e-posta hesabı erişiminin satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"mexico-secretaria-anticorrupcion-claim-2026-10-02-3f2760","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Meksika Yolsuzlukla Mücadele ve İyi Yönetişim Bakanlığı veri/belgelerinin satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"carrefour-belgium-63k-claim-2026-10-02-963bf0","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Carrefour Belçika: ~63 bin tüketici kaydının sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"retail","country":null,"sgb_id":null,"kev":false},{"id":"youfid-fr-300k-claim-2026-10-02-e74eed","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Youfid (Fransa, sadakat programı): ~300 bin kaydın sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"indonesia-38b-gov-records-claim-2026-10-02-d2045c","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Alleged 38.28B Indonesian government/citizen records dump offered","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":null,"sgb_id":null,"kev":false},{"id":"finland-ncsc-fi-citrix-netscaler-intrusions-2026-10-02","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-05T08:30:00+03:00","title":"Finland NCSC-FI: several intrusions via Citrix NetScaler zero-days; patching alone may not evict","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"gitlab-ai-gateway-critical-99-thn-2026-10-02","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T16:20:14+03:00","title":"GitLab, kendi sunucusunda barındırılan kurulumlarda 9.9 puanlık kritik AI Gateway uzaktan kod çalıştırma açığını yamaladı (THN)","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/gitlab-patches-critical-self-hosted-ai.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":"available","exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"explorest-263900-dataset-claim-2026-10-02-1d8519","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Explorest (ABD, seyahat/fotoğraf): 263.900 kullanıcılık veri seti tek seferlik satışa sunuldu","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Explorest","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"263.900 kullanıcılık","sector":"hospitality","country":null,"sgb_id":null,"kev":false},{"id":"fitnessboutique-1-96m-claim-2026-10-02-dad59b","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"FitnessBoutique (Fransa): ~1,96 milyon kayıtlık müşteri veri seti satışa sunuldu","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"FitnessBoutique","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1,96 milyon kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"jobe-sports-nl-dataset-claim-2026-10-02-f705fd","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Jobe Sports International (Hollanda): müşteri veri setinin satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Jobe Sports International","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"fitnesskpi-fr-dataset-claim-2026-10-02-712d65","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"FitnessKPI (Fransa): üye/ödeme veri setinin forumda sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"FitnessKPI","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"quantum-energy-wellness-33207-claim-2026-10-02-323d00","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"US quantum-energy/wellness platform dataset 33,207 records offered","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"33,207 records","sector":"energy","country":null,"sgb_id":null,"kev":false},{"id":"kev:CVE-2026-102490","first_seen":"2026-10-02T00:00:00+03:00","updated":"2026-10-02T00:00:00+03:00","title":"CISA KEV: Zammad GmbH Zammad (CVE-2026-102490)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102490","cve":["CVE-2026-102490"],"cvss":null,"actor":[],"sgh_url":null,"summary":"CISA, Zammad GmbH Zammad ürünündeki CVE-2026-102490 açığını 2026-10-02 tarihinde bilinen istismar edilen açıklar kataloğuna (KEV) ekledi; ABD federal kurumları için son tarih 2026-10-05.","tags":["cisa_kev","exploited_in_wild"],"entity":"Zammad GmbH","affected_products":["Zammad"],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"ms-defender-exclusions-abuse-2026-10-01-6eaf75","first_seen":"2026-10-01T23:24:04+03:00","updated":"2026-10-04T16:20:14+03:00","title":"Saldırganlar zararlı yazılımı gizlemek için Microsoft Defender istisnalarını kötüye kullanıyor","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["Defender","HOLD","flood-lock","malware","origin_x_tip","partially_confirmed","vuln"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"gtig-ai-discovered-cve-2026-1731-weaponized-2026-10-01","first_seen":"2026-10-01T22:25:00+03:00","updated":"2026-10-04T16:20:14+03:00","title":"Google TIG: Yapay zekânın bulduğu CVE-2026-1731 açığı ~4 gün içinde silaha dönüştürüldü","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":["CVE-2026-1731"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CVE","GTIG","HOLD","X-tip","cisa_kev","origin_x_tip","vuln-flood"],"entity":"Google TIG","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"bombas-suarez-mx-115m-claim-2026-10-01-336d4b","first_seen":"2026-10-01T21:20:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Bombas Suarez (Meksika, imalat): ~115 milyon kayıt / ~140 GB veri setinin sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","MX","X-tip","country:MX","manufacturing","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"115 milyon kayıt","sector":null,"country":"MX","sgb_id":null,"kev":false},{"id":"utilitypay-payment-customer-claim-2026-10-01-90375b","first_seen":"2026-10-01T21:20:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Utilitypay ödeme/müşteri veri setinin sızdırıldığı iddiası (banka/kart bilgileri içerdiği iddia ediliyor)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","X-tip","origin_x_tip","payments"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"peru-dirsapolar-health-5961k-claim-2026-10-01-d02559","first_seen":"2026-10-01T20:50:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Peru DIRSAPOL (Ulusal Polis Sağlık Müdürlüğü): ~5,96 milyon kaydın sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","PE","X-tip","country:PE","health","origin_x_tip","police"],"entity":"Peru DIRSAPOL","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"PE","sgb_id":null,"kev":false},{"id":"dr-veto-fr-31240-claim-2026-10-01-c443a0","first_seen":"2026-10-01T20:13:14+03:00","updated":"2026-10-04T23:52:00+03:00","title":"dr.veto (FR Hubvet veterinary platform) ~31,240 records shared","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","DWI","France","origin_x_tip","veterinary"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"31,240 records","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"gcp-firebase-sa-creds-sale-2730-2026-10-01-7f6e01","first_seen":"2026-10-01T20:13:14+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Google Cloud / Firebase hizmet hesabı kimlik bilgilerinin (~2.730 JSON) satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","DWI","Firebase","GCP","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"zscaler-2cloader-vidar-remcos-2026-10-01","first_seen":"2026-10-01T20:13:14+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Zscaler ThreatLabz: undocumented Windows loader 2CLOADER (Hell's Gate) delivering Vidar/Remcos — first seen Aug 2026","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CTI","HOLD-flood","Zscaler","loader","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"gibson-area-hospital-leak-claim-2026-10-01-e3354c","first_seen":"2026-10-01T20:13:14+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Gibson Area Hospital & Health Services (Illinois, ABD) iç verilerinin sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","DDW","USA","healthcare","origin_x_tip"],"entity":"Gibson Area Hospital & Health Services","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"dodo-pizza-company-confirm-2026-09-29","first_seen":"2026-10-01T19:55:00+03:00","updated":"2026-10-16T21:24:18+03:00","title":"Dodo Pizza (RU chain ~1500 stores) COMPANY_CONFIRMED cyberattack / possible customer PII — Record/Meduza 29 Eyl","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.kvkk.gov.tr/Icerik/9043/kamuoyu-duyurusu-veri-ihlali-bildirimi-dodo-brands-international-fzco","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CONFIRMED","Russia","breach","company","late-find"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"avantagesjeunes-fr-318k-scrape-claim-2026-10-01-40eae0","first_seen":"2026-10-01T19:55:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"AvantagesJeunes (Fransa): ~318 bin kayıt paylaşıldı — aktör verinin kazındığını iddia ediyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","DWI","France","origin_x_tip","scrape-claim"],"entity":"AvantagesJeunes","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"318 bin kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"cisco-talos-uat-11587-antino-m365-2026","first_seen":"2026-10-01T19:25:25+03:00","updated":"2026-10-04T16:20:14+03:00","title":"Cisco Talos: UAT-11587 Antino arka kapısı Microsoft 365 ile C2 kuruyor","category":"malware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://blog.talosintelligence.com/china-nexus-uat-11587-targets-government-and-policy-organizations-across-asia-with-antino-backdoor/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/cisco-talos-uat-11587-antino-m365-2026.html","summary":"Cisco Talos, Asya’daki kamu hedeflerine yönelik Çin bağlantılı UAT-11587’nin Antino arka kapısıyla Microsoft 365 üzerinden komuta kanalı kurduğunu açıkladı.","tags":["malware","sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"distinxion-fr-crm-518k-2026-10-01-398acd","first_seen":"2026-10-01T18:50:09+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Distinxion (Fransa) CRM: 518 bin kişi kaydı satışa sunuldu","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"518 bin kişi","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"us-realtor-1m-profiles-2026-10-01-94a51f","first_seen":"2026-10-01T18:50:09+03:00","updated":"2026-10-04T23:52:00+03:00","title":"ABD'li emlak danışmanlarına ait 1,16 milyon profil satışa sunuldu","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"divd-ai-agent-zammad-breach-2026-10-01","first_seen":"2026-10-01T18:49:26+03:00","updated":"2026-10-04T15:50:00+03:00","title":"DIVD: Yapay zekâ ajanı Zammad sıfırıncı günleriyle içeri girdi","category":"vulnerability","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://csirt.divd.nl/cases/DIVD-2026-00014/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/divd-ai-ajan-zammad-ihlal-2026.html","summary":"Hollanda DIVD, Zammad’daki iki sıfırıncı günü zincirleyen yapay zekâ ajanlı saldırıda veri sızıntısı riskini 1 Ekim özetinde duyurdu.","tags":["sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"symantec-warlock-longlegs-critical-infra-2026-10-01","first_seen":"2026-10-01T18:24:07+03:00","updated":"2026-10-04T15:50:00+03:00","title":"Warlock: Symantec su ve telekom hedefli saldırıları açıkladı","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.security.com/blog-post/warlock-ransomware-critical-infrastructure","cve":[],"cvss":null,"actor":["warlock"],"sgh_url":"https://siberguvenlikhaber.com/haber/symantec-warlock-kritik-altyapi-2026.html","summary":"Symantec, Longlegs/Storm-2603’ün Warlock ile son iki ayda su, telekom, kamu ve üniversite hedeflerine saldırdığını açıkladı.","tags":["sgh_published"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"telecom","country":null,"sgb_id":null,"kev":false},{"id":"nigeria-nsipa-35gb-claim-2026-10-01-def656","first_seen":"2026-10-01T18:24:07+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Nijerya NSIPA: 35 GB veritabanı sızıntısı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Nigeria NSIPA 35GB","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"35 GB","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sucuri-wordpress-sc-self-healing-backdoor-2026-10-01","first_seen":"2026-10-01T17:44:30+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Sucuri: WordPress SC self-healing mesh backdoor (files/DB/shared memory)","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["Sucuri","WATCH","WordPress","malware"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"teamviewer-vulns-2026-10-01-9c4afd","first_seen":"2026-10-01T17:44:30+03:00","updated":"2026-10-04T16:20:14+03:00","title":"TeamViewer high-severity vulns / RCE","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://cybersecuritynews.com/teamviewer-vulnerabilities/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["TeamViewer","flood-HOLD","origin_x_tip","vuln"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"jce-dominican-electoral-claim-2026-10-01-e80c49","first_seen":"2026-10-01T17:21:45+03:00","updated":"2026-10-11T22:24:00+03:00","title":"Junta Central Electoral (Dominik Cumhuriyeti) ihlal iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:DO","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"DO","sgb_id":null,"kev":false},{"id":"visa-zombie-card-siberhavadis-2026-10-01","first_seen":"2026-10-01T17:21:45+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Visa temassız ödemede \"Zombie Card\" açığı","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:GLOBAL"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"killsec-europol-op-killswitch-2026-10-01","first_seen":"2026-10-01T17:14:00+03:00","updated":"2026-10-04T16:20:14+03:00","title":"KillSec ransomware: Europol leak sitesini ele geçirdi","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"official","primary_source_url":"https://www.eurojust.europa.eu/news/teenagers-suspected-leading-ransomware-group-arrested-during-international-operation","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/killsec-europol-operasyon-2026.html","summary":"Europol ve Eurojust, KillSec ransomware grubunun leak sitesini ele geçirdiğini duyurdu; en az 110 TB veri güvenceye alındı, üç şüpheli yakalandı.","tags":["sgh_published"],"entity":"KillSec","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"110 TB","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"750-turkish-orgs-data-sale-echo-2026-10-01-5471f2","first_seen":"2026-10-01T16:54:59+03:00","updated":"2026-10-04T10:18:30+03:00","title":"750'den fazla Türk kurumunun verisinin satışta olduğu iddiası","category":"leak","severity":"medium","turkey_signal":true,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"jamf-cloudsyncd-macos-fake-zoom-2026-09-30","first_seen":"2026-10-01T16:50:30+03:00","updated":"2026-10-04T16:20:14+03:00","title":"Jamf: Sahte Zoom ile CloudSyncD macOS arka kapısı","category":"fraud","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.jamf.com/blog/cloudsyncd-macos-backdoor-fake-zoom-installer/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/jamf-cloudsyncd-macos-sahte-zoom-2026.html","summary":"Jamf Threat Labs, sahte Zoom kurulumunda Gatekeeper’ı aşmaya yönlendiren CloudSyncD arka kapısını duyurdu. Parola sıfır genişlikli Unicode ile gizleniyor; canlı C2 örnekleri var.","tags":["CONFIRMED","CloudSyncD","Jamf","LIVE","Zoom","country:US","macOS","malware","origin_x_tip","sgh_published"],"entity":"Jamf","affected_products":["CloudSyncD","macOS"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":"US","sgb_id":null,"kev":false},{"id":"drveto-mobi-fr-vet-claim-2026-10-01-0d20b7","first_seen":"2026-10-01T16:50:30+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Fransız veteriner portalı drveto.mobi veritabanının sızdırıldığı iddiası (~31.240)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","DDW","France","country:FR","leak-claim","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"FR","sgb_id":null,"kev":false},{"id":"nextjs-imageresponse-rce-2026-10-01-9cad6c","first_seen":"2026-10-01T16:50:30+03:00","updated":"2026-10-04T16:20:14+03:00","title":"Next.js ImageResponse / next/og RCE","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["Next.js","RCE","flood-HOLD","origin_x_tip","vuln"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"viva-aerobus-infra-research-2026-10-01-1fca2a","first_seen":"2026-10-01T16:21:01+03:00","updated":"2026-10-04T23:52:00+03:00","title":"ThreatMon: Viva Aerobus tarafındaki saldırı araştırmasıyla bağlantılı açıkta kalmış saldırgan sunucusu","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["B","VivaAerobus","country:MX","origin_x_tip","research"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"MX","sgb_id":null,"kev":false},{"id":"cashx-sri-lanka-loan-claim-2026-10-01-ba2199","first_seen":"2026-10-01T16:21:01+03:00","updated":"2026-10-04T23:52:00+03:00","title":"CashX (Sri Lanka, kredi platformu): ~5,1 GB verinin sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","DDW","SriLanka","country:LK","leak-claim","origin_x_tip"],"entity":"CashX","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"5,1 GB","sector":"finance","country":"LK","sgb_id":null,"kev":false},{"id":"ms-msp360-screenconnect-rmm-phishing-2026-09-29","first_seen":"2026-10-01T15:52:43+03:00","updated":"2026-10-04T16:20:14+03:00","title":"Microsoft: MSP360 kimlik avı sonrası ScreenConnect ikinci kanal","category":"fraud","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/09/attackers-abuse-msp360-to-deploy.html","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/microsoft-msp360-screenconnect-rmm-phishing-2026.html","summary":"Microsoft, Temmuz 2026’da MSP360 RMM kurucusunun kimlik avıyla dağıtıldığını; ardından ScreenConnect’in sessiz kurulduğunu duyurdu. ScreenConnect açığı sömürülmedi; meşru RMM kötüye kullanımı.","tags":["B","MSP360","Microsoft","RMM","ScreenConnect","country:US","sgh_published"],"entity":"Microsoft","affected_products":["ScreenConnect","MSP360 RMM"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"US","sgb_id":null,"kev":false},{"id":"sri-lanka-police-eservices-claim-2026-10-01-78a683","first_seen":"2026-10-01T15:52:43+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Sri Lanka Polisi e-Hizmetler / güvenlik soruşturması sisteminin tamamen ele geçirildiği iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","SriLanka","country:LK","leak-claim","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"LK","sgb_id":null,"kev":false},{"id":"dominican-jce-claim-2026-10-01-e2f4ce","first_seen":"2026-10-01T15:52:43+03:00","updated":"2026-10-11T22:24:00+03:00","title":"Dominik Cumhuriyeti JCE'nin (Merkezi Seçim Kurulu) ele geçirildiği iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","DominicanRepublic","country:DO","leak-claim","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"DO","sgb_id":null,"kev":false},{"id":"proofpoint-ta419-ai-politika-kimlik-avi-2026","first_seen":"2026-10-01T15:24:58+03:00","updated":"2026-10-04T16:20:14+03:00","title":"TA419: Çin bağlantılı aktör AI politika uzmanlarına kimlik avı","category":"apt","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.reuters.com/legal/government/chinese-hackers-impersonated-ex-us-official-steal-emails-ai-experts-2026-10-01/","cve":[],"cvss":null,"actor":["TA419"],"sgh_url":"https://siberguvenlikhaber.com/haber/proofpoint-ta419-ai-politika-kimlik-avi-2026.html","summary":"Proofpoint, Çin’e hizalı TA419’un ABD AI politika uzmanlarına Parker ve Anthropic kimlikleriyle kimlik avı yaptığını açıkladı. Reuters 1 Ekim; AitM OneDrive tuzağı.","tags":["sgh_published"],"entity":"Proofpoint","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"ms-rmm-msp360-screenconnect-phishing-2026-09-29","first_seen":"2026-10-01T15:24:58+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Microsoft: MSP360 RMM phishing → ScreenConnect dual-RMM","category":"fraud","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"unknown","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"huntress-chatgpt-custom-gpt-clickfix-rat-2026-09-28","first_seen":"2026-10-01T15:24:58+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Huntress: ChatGPT Custom GPT → ClickFix RAT","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.huntress.com/blog/chatgpt-custom-gpts-clickfix-rat","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"glow-ai-coding-agents-github-screenshots-2026-09-30","first_seen":"2026-10-01T15:24:58+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Glow: Yapay zekâ kodlama ajanları GitHub'da ~13 bin dahili görüntüyü açığa çıkardı","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.glow.io/blogs/how-ai-agents-exposed-developer-screenshots-from-leading-tech-companies","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"vietnam-betting-es-claim-2026-10-01-8570ba","first_seen":"2026-10-01T15:24:58+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Vietnam'daki bahis operatörlerine ait Elasticsearch veritabanlarının satışta olduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"telecom","country":"VN","sgb_id":null,"kev":false},{"id":"man4-jakarta-school-claim-2026-10-01-9baa20","first_seen":"2026-10-01T15:24:58+03:00","updated":"2026-10-04T23:52:00+03:00","title":"MAN 4 Jakarta okul belgelerinin sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"MAN 4 Jakarta","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":"ID","sgb_id":null,"kev":false},{"id":"b-20261001-1339-zammad-ncsc-nl-0day","first_seen":"2026-10-01T13:47:59+03:00","updated":"2026-10-04T16:20:14+03:00","title":"Zammad zero-days actively abused — NCSC-NL / DIVD alert","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261001-1339-indiamart-claim","first_seen":"2026-10-01T13:47:59+03:00","updated":"2026-10-04T15:20:00+03:00","title":"IndiaMART iş bağlantısı kayıtlarının sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261001-1315-msft-star-blizzard","first_seen":"2026-10-01T13:23:27+03:00","updated":"2026-10-04T16:20:14+03:00","title":"Microsoft: Star Blizzard (FSB-linked) large-scale phishing shift","category":"apt","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/09/russias-star-blizzard-targets-100.html","cve":[],"cvss":null,"actor":["Star Blizzard"],"sgh_url":"https://siberguvenlikhaber.com/haber/microsoft-star-blizzard-redflick-2026.html","summary":null,"tags":["origin_x_tip","sgh_related"],"entity":"Microsoft","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"b-20261001-1315-payback-de-claim","first_seen":"2026-10-01T13:23:27+03:00","updated":"2026-10-04T15:20:00+03:00","title":"Payback.de: ~566 bin kayıtlık sızıntı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Payback.de","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"566 bin kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgh:openai-ajan-kanada-kutuphane-2026","first_seen":"2026-10-01T13:22:16+03:00","updated":"2026-10-01T13:22:16+03:00","title":"OpenAI ajanı Kanada kütüphanesi iddiası; şirket inceliyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.aa.com.tr/tr/bilim-teknoloji/yapay-zeka-ajanlarinin-kanada-devlet-sistemine-sizma-girisiminde-bulundugu-bildirildi/4074466","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/openai-ajan-kanada-kutuphane-2026.html","summary":"Transluce, yapay zeka ajanlarının Kanada Ulusal Kütüphanesi aramasına başarısız sızma girişimi yaptığını duyurdu. OpenAI incelediğini, Kanada siber merkezi sistemlerin ele geçirilmediğini söyledi.","tags":["sgh_published"],"entity":"OpenAI","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"shinyhunters-oreilly-dexcom-2026-10-01-081081","first_seen":"2026-10-01T12:49:38+03:00","updated":"2026-10-16T22:18:37+03:00","title":"ShinyHunters yeni iddialarında O'Reilly Automotive ve DexCom'u listeledi","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["ShinyHunters"],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"manufacturing","country":null,"sgb_id":null,"kev":false},{"id":"thn-apple-coregraphics-poc-kev-2026-10-01","first_seen":"2026-10-01T12:49:38+03:00","updated":"2026-10-04T16:20:14+03:00","title":"Apple CoreGraphics PoC CVE-2026-86950 (KEV)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/apple-coregraphics-poc-emerges-as.html","cve":["CVE-2026-86950"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev"],"entity":"Apple CoreGraphics PoC","affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"uin-jambi-db-claim-2026-10-01-ac8823","first_seen":"2026-10-01T12:22:53+03:00","updated":"2026-10-04T23:52:00+03:00","title":"UIN Jambi university DB allegedly leaked — iddiası (~59k records)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","DDW","Indonesia","country:ID","leak-claim","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"59k records","sector":"education","country":"ID","sgb_id":null,"kev":false},{"id":"france-healthcare-1-7m-claim-2026-10-01-f847c5","first_seen":"2026-10-01T10:49:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Fransız sağlık platformuna ait ~1,7 milyon kaydın sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","FR","RL_adjacent","country:FR","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"FR","sgb_id":null,"kev":false},{"id":"aa-canada-ai-agents-gov-infiltration-2026-10-01","first_seen":"2026-10-01T10:49:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"AA: Yapay zeka ajanlarının Kanada devlet sistemine sızma girişimi bildirildi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.aa.com.tr/tr/bilim-teknoloji/yapay-zeka-ajanlarinin-kanada-devlet-sistemine-sizma-girisiminde-bulundugu-bildirildi/4074466","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["AA","AI","Canada","country:CA"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"government","country":"CA","sgb_id":null,"kev":false},{"id":"argentina-moh-renaper-citizen-db-claim-2026-10-01-30f1dc","first_seen":"2026-10-01T10:17:16+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Arjantin Sağlık Bakanlığı ve RENAPER vatandaş veritabanının sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["Argentina","CLAIM_ONLY","DDW","country:AR","leak-claim","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":"AR","sgb_id":null,"kev":false},{"id":"shinyhunters-oreilly-dexcom-claim-2026-10-01-1b90bd","first_seen":"2026-10-01T09:13:56+03:00","updated":"2026-10-16T22:18:37+03:00","title":"ShinyHunters iddiaları: O'Reilly Automotive ve DexCom (ABD)","category":"apt","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["ShinyHunters"],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"manufacturing","country":null,"sgb_id":null,"kev":false},{"id":"thn-apple-coregraphics-poc-whatsapp-pdf-2026-10-01","first_seen":"2026-10-01T09:13:56+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Apple CoreGraphics PoC emerges; WhatsApp PDF checks hint delivery path (THN)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/10/apple-coregraphics-poc-emerges-as.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"uttt-mexico-db-claim-2026-10-01-70583a","first_seen":"2026-10-01T08:46:36+03:00","updated":"2026-10-04T23:52:00+03:00","title":"UTTT Üniversitesi (Meksika) veritabanının sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"UTTT University Mexico","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"education","country":null,"sgb_id":null,"kev":false},{"id":"thn-metamask-validator-exit-2026-10-01","first_seen":"2026-10-01T08:27:39+03:00","updated":"2026-10-04T16:20:14+03:00","title":"MetaMask: Altyapı olayı, cüzdan tehdidi yok; validator çıkışı","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://metamask.io/news/user-update","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/metamask-guvenlik-olayi-validator-2026.html","summary":"MetaMask altyapı güvenlik olayına müdahale ettiğini duyurdu; cüzdanlara acil tehdit görmediğini yazdı. Etkilenen non-custodial staking doğrulayıcıları çıkarılıyor; Lido 7 Ekim takvimini açıkladı.","tags":["sgh_published"],"entity":"MetaMask","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sgb:TR-26-1233","first_seen":"2026-10-01T08:18:19+03:00","updated":"2026-10-01T11:52:13+03:00","title":"SGB TR-26-1233: Anthropic Claude Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Anthropic Claude","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1233","cve":["CVE-2026-103012"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/anthropic-claude-code-cve-sgb.html","summary":"Anthropic Claude yazılımında güvenlik zafiyeti tespit edilmiştir.","tags":["sgb","sgh_published","tr_official"],"entity":"Anthropic Claude","affected_products":["Claude Code","Anthropic Claude"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1233","kev":false},{"id":"kvkk-30-eylul-2026-veri-ihlali-duyurulari","first_seen":"2026-10-01T08:17:04+03:00","updated":"2026-10-04T16:20:14+03:00","title":"KVKK 30 Eylül: Efece, Unigen, Akkoyunlar ve Papara Menkul","category":"leak","severity":"critical","turkey_signal":true,"tr_entity":"Akkoyunlar Otomotiv","status":"confirmed","source_type":"official","primary_source_url":"https://www.kvkk.gov.tr/veri-ihlali-bildirimi","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/kvkk-30-eylul-2026-veri-ihlali-duyurulari.html","summary":"KVKK’nın 30 Eylül 2026 listesinde Akkoyunlar, Unigen ve Efece duyuruları var; Memurlar.net’e göre aynı gün 9 bildirim ve 1 milyonu aşkın etkilenen kişi sayısı açıklanmış.","tags":["0803","KVKK","LIVE","REGULATOR","TR","country:TR","sgh_published","turkey_signal"],"entity":"Akkoyunlar Otomotiv","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"manufacturing","country":"TR","sgb_id":null,"kev":false},{"id":"sgb:TR-26-1232","first_seen":"2026-10-01T08:08:18+03:00","updated":"2026-10-01T11:15:53+03:00","title":"SGB TR-26-1232: ASUS Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"ASUS","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1232","cve":["CVE-2026-13313","CVE-2026-14157","CVE-2026-93495"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/asus-coklu-urun-cve-sgb.html","summary":"Bazı ASUS ürünlerinde güvenlik açıklıkları tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güncellemeleri incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"ASUS","affected_products":["ASUS ürünleri"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1232","kev":false},{"id":"sgb:TR-26-1231","first_seen":"2026-10-01T08:01:27+03:00","updated":"2026-10-01T11:15:53+03:00","title":"SGB TR-26-1231: Cato Networks SDP Client Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Cato Networks SDP Client","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1231","cve":["CVE-2026-10739","CVE-2026-10726"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/cato-networks-sdp-client-cve-sgb.html","summary":"Cato Networks SDP Client ürününde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine, yayınlanan güvenlik önerilerini incelemeleri ve gerekli önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Cato Networks SDP Client","affected_products":["Cato Networks SDP Client"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1231","kev":false},{"id":"sgb:TR-26-1230","first_seen":"2026-10-01T07:42:03+03:00","updated":"2026-10-01T10:47:19+03:00","title":"SGB TR-26-1230: Deno Runtime Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Deno","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1230","cve":["CVE-2026-103473"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/deno-runtime-cve-sgb.html","summary":"Deno Runtime'da güvenlik zafiyeti tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güncellemeleri incelemelerini ve gerekli önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Deno","affected_products":["Deno Runtime"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1230","kev":false},{"id":"sgb:TR-26-1229","first_seen":"2026-10-01T07:40:15+03:00","updated":"2026-10-05T07:21:19+03:00","title":"SGB TR-26-1229: MISP Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"MISP Project","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1229","cve":["CVE-2026-103388","CVE-2026-103239","CVE-2026-103321","CVE-2026-103389","CVE-2026-104901","CVE-2026-104900"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/misp-guvenlik-zafiyeti-sgb.html","summary":"MISP'in bazı bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine dokümanları gözden geçirmelerini ve gerekli güncellemeleri yapılmasını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"MISP Project","affected_products":["MISP"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"telecom","country":null,"sgb_id":"TR-26-1229","kev":false},{"id":"sgb:TR-26-1227","first_seen":"2026-10-01T07:36:00+03:00","updated":"2026-10-01T10:47:19+03:00","title":"SGB TR-26-1227: Kiteworks Çoklu Bileşen Güvenlik Zafiyeti","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"Kiteworks","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1227","cve":["CVE-2026-102105","CVE-2026-102106","CVE-2026-102107","CVE-2026-102108","CVE-2026-102109","CVE-2026-102111","CVE-2026-102112","CVE-2026-102113","CVE-2026-102114","CVE-2026-102115","CVE-2026-102116","CVE-2026-102118","CVE-2026-102120","CVE-2026-102104","CVE-2026-102122","CVE-2026-102123","CVE-2026-102103","CVE-2026-102124","CVE-2026-102125","CVE-2026-102126"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/kiteworks-coklu-bilesen-cve-sgb.html","summary":"Bazı Kiteworks bileşenlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güvenlik önerilerini incelemelerini ve gerekli önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"Kiteworks","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1227","kev":false},{"id":"sgb:TR-26-1226","first_seen":"2026-10-01T07:29:39+03:00","updated":"2026-10-01T10:47:19+03:00","title":"SGB TR-26-1226: JetBrains Çoklu Ürün Güvenlik Bildirimi","category":"vulnerability","severity":"medium","turkey_signal":true,"tr_entity":"JetBrains Çoklu Ürün","status":"confirmed","source_type":"official","primary_source_url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1226","cve":["CVE-2026-100256","CVE-2026-100280","CVE-2026-100279","CVE-2026-100278","CVE-2026-100277","CVE-2026-100276","CVE-2026-100275","CVE-2026-100274","CVE-2026-100273","CVE-2026-100272","CVE-2026-100271","CVE-2026-100270","CVE-2026-100269","CVE-2026-100268","CVE-2026-100267","CVE-2026-100266","CVE-2026-100265","CVE-2026-100264","CVE-2026-100263","CVE-2026-100262","CVE-2026-100261","CVE-2026-100260","CVE-2026-100259","CVE-2026-100258","CVE-2026-100257","CVE-2026-100255","CVE-2026-100254","CVE-2026-100253"],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/jetbrains-coklu-urun-cve-sgb.html","summary":"Bazı JetBrains ürünlerinde güvenlik zafiyetleri tespit edilmiştir. Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine yayınlanan güvenlik önerilerini incelemelerini ve gerekli önlemleri almalarını tavsiye etmektedir.","tags":["sgb","sgh_published","tr_official"],"entity":"JetBrains Çoklu Ürün","affected_products":["JetBrains ürünleri","JetBrains Çoklu Ürün"],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":"TR-26-1226","kev":false},{"id":"bee-cheng-hiang-pdpc-ai-veri-ihlali-2026","first_seen":"2026-10-01T06:48:53+03:00","updated":"2026-10-04T16:20:14+03:00","title":"Singapur PDPC: Bee Cheng Hiang’ta ilk AI kaynaklı veri ihlali","category":"leak","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://www.channelnewsasia.com/singapore/bee-cheng-hiang-data-breach-ai-pdpc-emails-6421711","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/bee-cheng-hiang-pdpc-ai-veri-ihlali-2026.html","summary":"Singapur Kişisel Verileri Koruma Komisyonu, Bee Cheng Hiang çalışanının AI ile ürettiği toplu e-posta betiğinin 95.364 müşteri adresini ifşa ettiğini; olayın AI arızası değil insan hatası olduğunu açıkladı.","tags":["AI","LIVE","PDPC","REGULATOR_CONFIRMED","SG","country:SG","sgh_published"],"entity":"Singapur PDPC","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"95.364 müşteri","sector":null,"country":"SG","sgb_id":null,"kev":false},{"id":"sharesies-australia-db-sale-claim-2026-10-01-0abf78","first_seen":"2026-10-01T06:48:53+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Sharesies Australia dijital yatırım platformu veritabanının satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["AU","CLAIM_ONLY","DDW","Sharesies","country:AU","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"finance","country":"AU","sgb_id":null,"kev":false},{"id":"justetf-germany-db-sale-claim-2026-10-01-db299c","first_seen":"2026-10-01T05:48:37+03:00","updated":"2026-10-04T23:52:00+03:00","title":"justETF (Almanya): müşteri/kullanıcı veritabanının satışa sunulduğu iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","DDW","DE","country:DE","justETF","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"DE","sgb_id":null,"kev":false},{"id":"japan-times-eclipse-claim-2026-10-01-17ab0c","first_seen":"2026-10-01T05:21:21+03:00","updated":"2026-10-16T17:30:15+03:00","title":"Japan Times Grubu Ransomware Sonrası Veri Yayımını Doğruladı","category":"ransomware","severity":"critical","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://www.japantimes.co.jp/press/2026/10/16/notice-ransomware-incident-second-report-jp/","cve":[],"cvss":null,"actor":[],"sgh_url":"https://siberguvenlikhaber.com/haber/japan-times-ransomware-personel-verisi-ikinci-rapor-2026.html","summary":"Japan Times grubu, 18 Eylül 2026'daki fidye yazılımı saldırısının ardından çalındığı iddia edilen verilerin dış bir sitede yayımlandığını teyit etti.","tags":["CLAIM_ONLY","Eclipse","JP","RL","country:JP","origin_leak_tracker","partially_confirmed","sgh_published","sgh_shared_on_x"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"JP","sgb_id":null,"kev":false},{"id":"nigeria-nsipa-35gb-claim-2026-10-01-4a9b5e","first_seen":"2026-10-01T04:47:04+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Nijerya NSIPA portal veritabanlarının döküldüğü iddiası (~35 GB)","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:NG","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"35 GB","sector":null,"country":"NG","sgb_id":null,"kev":false},{"id":"agrobanco-peru-pii-claim-2026-10-01-1cdcb8","first_seen":"2026-10-01T04:20:04+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Peru Agrobanco müşterilerinin kişisel verilerinin sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["country:PE","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":"PE","sgb_id":null,"kev":false},{"id":"terminalfix-sophos-rhysida-vice-society-2026-10-01-fdba59","first_seen":"2026-10-01T02:50:55+03:00","updated":"2026-10-04T23:52:00+03:00","title":"TerminalFix kampanyası Rhysida/Vice Society aktörüyle ilişkilendirildi: ClickFix→Windows Terminal tuzağı","category":"ransomware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":["rhysida"],"sgh_url":null,"summary":null,"tags":["clickfix","origin_x_tip","rhysida","sophos","terminalfix","x-tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"croatia-gambling-dataset-claim-2026-10-01-efefd3","first_seen":"2026-10-01T01:48:41+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Croatian gambling profiles dataset + alleged RCE/admin access","category":"vulnerability","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","HR","dataset","gambling","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"sdis-66-france-dataset-claim-2026-10-01-e83828","first_seen":"2026-10-01T00:48:30+03:00","updated":"2026-10-04T23:52:00+03:00","title":"SDIS 66 (Fransa): ~118 bin belge satışa sunuldu","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["CLAIM_ONLY","FR","dataset","origin_x_tip"],"entity":"SDIS 66","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"eurofarma-group-vpn-access-claim-2026-10-01-568665","first_seen":"2026-10-01T00:19:40+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Eurofarma Group (BR) VPN access advertised","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["BR","CLAIM_ONLY","access-broker","origin_x_tip"],"entity":"Eurofarma Group","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"jaea-jrr3-research-site-pii-2026-10-01","first_seen":"2026-10-01T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"JAEA (Japonya Atom Enerjisi Ajansı), JRR-3 araştırma destek sitesine yetkisiz erişimi doğruladı: 2.419 dosya / 175 kişinin kişisel verisi (fotoğraflı kimlik, sağlık muayenesi; 6 My Number) — ajans duyurusu 1 Eki 2026","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://weekly.ascii.jp/elem/000/004/439/4439447/","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"JAEA","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"rofim-doctor-fr-1-7m-claim-2026-10-01-19cf30","first_seen":"2026-10-01T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Rofim Doctor (Fransa, sağlık): ~1,7 milyon kayıtlık veri setinin sızdırıldığı iddiası","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Rofim.doctor","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"1,7 milyon kayıt","sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"transparence-sante-fr-9-1m-claim-2026-10-01-bc4f7b","first_seen":"2026-10-01T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Transparence Santé (Fransa): ~9,1 milyon kayıt paylaşıldı — aktör, kamuya açık sağlık şeffaflık verisini kazıdığını iddia ediyor","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Transparence Santé","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"9,1 milyon kayıt","sector":"healthcare","country":null,"sgb_id":null,"kev":false},{"id":"huntress-chatgpt-custom-gpt-clickfix-2026-10-01","first_seen":"2026-10-01T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Huntress: Saldırganlar ClickFix zararlı yazılımı dağıtmak için ChatGPT özel GPT'lerini (ör. Plus 5.6) kötüye kullanıyor","category":"malware","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["malware","origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":"technology","country":null,"sgb_id":null,"kev":false},{"id":"shinhan-bank-25000-veri-ihlali-2026-10-01","first_seen":"2026-10-01T00:00:00+03:00","updated":"2026-10-08T06:58:44+03:00","title":"Shinhan Bank ~25 bin müşteri kredi/kişisel veri ihlali — banka özür + FSS + SEC 6-K","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://en.sedaily.com/finance/2026/10/01/shinhan-bank-data-breach-hits-25000-customers","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":"Shinhan Bank","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"25 bin müşteri","sector":"finance","country":null,"sgb_id":null,"kev":false},{"id":"chrome-154-stable-webgl-cve-2026-103628-2026-10-01","first_seen":"2026-10-01T00:00:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Chrome Stable 154.0.8037.97/.98 — 11 security fixes incl. Critical WebGL CVE-2026-103628 (details now published)","category":"vulnerability","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"confirmed","source_type":"primary","primary_source_url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html","cve":["CVE-2026-103628"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Chrome Stable 154.0.8037.97/.98","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"truffle-github-543699-credentials-2026-09-30-8f3c99","first_seen":"2026-09-30T23:54:04+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Truffle Security: GitHub’da 543.699 hâlâ çalışan sızıntı kimlik bilgisi","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://trufflesecurity.com/blog/github-repos-exposed-543699-credentials-nobody-revoked-them","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"divd-zammad-0day-breach-2026-09-30-313790","first_seen":"2026-09-30T21:49:41+03:00","updated":"2026-10-04T16:20:14+03:00","title":"DIVD: Zammad helpdesk iki 0day ile ihlal","category":"leak","severity":"medium","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"DIVD","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"thailand-princess-mother-foundation-claim-2026-09-30-9663c0","first_seen":"2026-09-30T21:49:41+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Thailand Princess Mother's Medical Volunteer Foundation ~124k records","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"124k records","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"kafiil-user-dataset-claim-2026-09-30-3821fb","first_seen":"2026-09-30T21:19:29+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Kafiil (Arapça serbest çalışma pazaryeri) kullanıcı veri setinin sızdırıldığı iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"thn-zimbra-webshell-cve-2026-73570-2026-09-30","first_seen":"2026-09-30T20:23:38+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Saldırganlar web kabuğu yerleştirmek için Zimbra açığını istismar ediyor (CVE-2026-73570)","category":"vulnerability","severity":"high","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/09/attackers-exploit-zimbra-flaw-to-deploy.html","cve":["CVE-2026-73570"],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["cisa_kev"],"entity":null,"affected_products":[],"patch_status":null,"exploited":true,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":true},{"id":"distinxion-fr-494123-dataset-claim-2026-09-30-04aecb","first_seen":"2026-09-30T19:50:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Distinxion (Fransa, otomotiv): ~494.123 kayıtlık veri setinin forumda paylaşıldığı iddiası","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Distinxion","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"494.123 kayıt","sector":"manufacturing","country":null,"sgb_id":null,"kev":false},{"id":"thn-msp360-screenconnect-dual-rmm-phishing-2026-09-30","first_seen":"2026-09-30T19:50:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Saldırganlar çift RMM'li oltalamada ScreenConnect kurmak için MSP360'ı kötüye kullanıyor","category":"fraud","severity":"low","turkey_signal":false,"tr_entity":null,"status":"unverified","source_type":"primary","primary_source_url":"https://thehackernews.com/2026/09/attackers-abuse-msp360-to-deploy.html","cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":[],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"centre-val-de-loire-6768-iban-claim-2026-09-30-9e2bbc","first_seen":"2026-09-30T19:25:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"Centre-Val de Loire Bölge Konseyi veri iddiası: IBAN içeren 6.768 kayıt","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":"Centre-Val de Loire Regional Council","affected_products":[],"patch_status":null,"exploited":null,"records_claimed":"6.768 kayıt","sector":null,"country":null,"sgb_id":null,"kev":false},{"id":"citrix-us-company-access-advertised-2026-09-30-fc73df","first_seen":"2026-09-30T19:25:00+03:00","updated":"2026-10-04T23:52:00+03:00","title":"ABD'li bir şirkete Citrix erişimi satışa çıkarıldı (Domain User / Win Server 2022)","category":"leak","severity":"low","turkey_signal":false,"tr_entity":null,"status":"claim_only","source_type":"x_tip","primary_source_url":null,"cve":[],"cvss":null,"actor":[],"sgh_url":null,"summary":null,"tags":["origin_x_tip"],"entity":null,"affected_products":[],"patch_status":null,"exploited":null,"records_claimed":null,"sector":null,"country":null,"sgb_id":null,"kev":false}]}