CVE-2026-59310 — Broadcom VMware vCenter Path Traversal Vulnerability
Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.
Knowledge Catalog
Ramon Katalog
Risk, kontrol, araç, politika, evidence, detection, playbook ve diğer yapılandırılmış içerikleri tek katalogda filtreleyin.
Dynamic Catalog440 kayıt
CVE-2026-55040 — Microsoft SharePoint Weak Authentication Vulnerability
Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-65400 — Apple macOS Improper Authentication Vulnerability
Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials.
CVE-2025-62593 — Ray-Project Ray Code Injection Vulnerability
Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to…
CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could allow an unauthenticated, remote…
CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
CVE-2026-72898 — Metabase SQL Injection Vulnerability
Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give…
CVE-2026-8037 — Progress LoadMaster Command Injection Vulnerability
Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input…
CVE-2026-63077 — JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.
CVE-2026-18556 — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.
Phishing Olay Müdahale Playbook
Şüpheli veya doğrulanmış phishing olayında hızlı doğrulama, containment ve kullanıcı koruma akışı.
Ransomware Olay Müdahale Playbook
Şüpheli ransomware olayında izolasyon, kapsam, kimlik, yedek ve recovery kararlarını yöneten akış.
Hesap Ele Geçirme Playbook
Şüpheli kullanıcı veya ayrıcalıklı hesap ele geçirilmesinde containment ve identity investigation akışı.
Veri Sızıntısı / İhlal Playbook
Hassas veri sızıntısında kapsam, containment, kanıt ve uyum değerlendirmesi.
Tedarikçi İhlali Playbook
Kritik üçüncü tarafta ihlal bildirimi geldiğinde erişim, veri, SLA ve sözleşmesel yükümlülükleri yönetme akışı.
Kayıp / Çalıntı Cihaz Playbook
Kurumsal cihaz kaybında hesap, veri ve cihaz yönetimi kontrollerini devreye alma akışı.
SOC Use Case: Windows 4625 Failed Logon
Windows 4625 başarısız oturum açma olaylarını password spray/brute force sinyali için bağlamsal değerlendirme.
Detection Guide: Sysmon Event ID 1
Sysmon Process Creation telemetrisini parent-child süreç, command line ve signer bağlamıyla detection için kullanma.
Zero Trust Access Reference Architecture
Kimlik, cihaz posture, policy decision ve least privilege access katmanlarını ayıran referans yaklaşım.
SIEM Log Flow Reference Architecture
Log source → collector/forwarder → normalization → SIEM → detection → case management veri akışı.
PAM Reference Architecture
Admin identity → approval/JIT → vault → session proxy/recording → target system güven zinciri.
DLP Reference Architecture
Data classification → endpoint/email/web/cloud policy enforcement → incident triage → exception workflow.
Network Segmentation Reference Architecture
User, server, management, backup, security, DMZ ve external zone ayrımıyla trust boundary tasarımı.
Secure Backup Reference Architecture
Production → backup network → immutable repository → isolated management → recovery verification mimarisi.