Microsoft<\/a> \u00fcr\u00fcnleriyle iyi \u00e7al\u0131\u015ft\u0131\u011f\u0131 d\u00fc\u015f\u00fcn\u00fcl\u00fcyor.<\/p>\nMicrosoft, sald\u0131r\u0131lar\u0131n 7 Temmuz’da ba\u015flad\u0131\u011f\u0131n\u0131 bildirdi.<\/p>\n
400 KURULU\u015e HEDEF OLDU
<\/h3>\n
G\u00fcvenlik a\u00e7\u0131\u011f\u0131, ilk olarak cuma g\u00fcn\u00fc Hollanda merkezli siber g\u00fcvenlik firmas\u0131 Eye Security taraf\u0131ndan tespit edildi.<\/p>\n
Microsoft, sald\u0131r\u0131da yaln\u0131zca kurulu\u015f b\u00fcnyesinde bar\u0131nd\u0131r\u0131lan sunucular\u0131n tehlikeye at\u0131ld\u0131\u011f\u0131n\u0131, Microsoft 365’teki SharePoint Online’\u0131n etkilenmedi\u011fini vurgulad\u0131.<\/p>\n
Eye Security, bilgisayar korsanlar\u0131n\u0131n Sharepoint sistemlerine girdikten sonra, bu sistemlerdeki t\u00fcm i\u00e7eri\u011fe eri\u015febilecekleri konusunda uyard\u0131.<\/p>\n
Siber g\u00fcvenlik firmas\u0131, “SharePoint genellikle Outlook, Teams ve OneDrive gibi temel hizmetlere ba\u011fland\u0131\u011f\u0131ndan, bir ihlal h\u0131zla veri h\u0131rs\u0131zl\u0131\u011f\u0131na, parola ele ge\u00e7irmeye ve a\u011f genelinde yatay hareketlere yol a\u00e7abilir” a\u00e7\u0131klamas\u0131nda bulundu.<\/p>\n
“Bu, h\u0131zla geli\u015fen, hedefli bir sald\u0131r\u0131d\u0131r. Yama uygulanmam\u0131\u015f SharePoint sunucular\u0131na sahip kurulu\u015flar d\u00fczeltme beklememeli. Hemen bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 de\u011ferlendirmesi yapmal\u0131 ve uygun \u015fekilde yan\u0131t vermeli.\u201d<\/p>\n
Bahsi ge\u00e7en g\u00fcvenlik a\u00e7\u0131klar\u0131, sald\u0131rganlar\u0131n kimlik do\u011frulama bilgilerini taklit ederek sunucularda uzaktan k\u00f6t\u00fc ama\u00e7l\u0131 kod \u00e7al\u0131\u015ft\u0131rmalar\u0131na olanak tan\u0131yor. Microsoft, sald\u0131rganlar\u0131n bir SharePoint sunucusuna “anahtar materyalin \u00e7al\u0131nmas\u0131n\u0131 sa\u011flayan” bir istek g\u00f6nderdi\u011fi sald\u0131r\u0131lar g\u00f6zlemledi.<\/p>\n
Eye Security’nin ba\u015f bilgisayar korsan\u0131 Vaisha Bernard, Reuters’a yapt\u0131\u011f\u0131 a\u00e7\u0131klamada, hafta sonu ger\u00e7ekle\u015fen sald\u0131r\u0131dan yakla\u015f\u0131k 100 kurulu\u015fun etkilendi\u011fini s\u00f6ylemi\u015fti. Yeni g\u00fcncellemeye g\u00f6re bu say\u0131 400’e \u00e7\u0131kt\u0131.<\/p>\n
SALDIRIDAN NASIL KORUNMALI?<\/h3>\n
Microsoft, SharePoint kullanan m\u00fc\u015fterilerine en son g\u00fcvenlik g\u00fcncellemelerini uygulamalar\u0131n\u0131 ve Antimalware Tarama Aray\u00fcz\u00fc’n\u00fcn etkin ve do\u011fru \u015fekilde \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olmalar\u0131n\u0131 tavsiye etti.<\/p>\n
Teknoloji devi, konuyla ilgili g\u00fcvenlik g\u00fcncellemelerini yay\u0131nlad\u0131\u011f\u0131n\u0131 ve \u015firket i\u00e7i SharePoint sistemlerini kullanan herkesin bunlar\u0131 y\u00fcklemesi gerekti\u011fini belirtiyor. Ayr\u0131ca, hacker gruplar\u0131n\u0131n yama uygulanmam\u0131\u015f, yani \u00f6nlem al\u0131nmam\u0131\u015f \u015firket i\u00e7i SharePoint sistemlerine sald\u0131rmaya devam edece\u011fi uyar\u0131s\u0131nda bulundu.<\/p>\n
ABD Siber G\u00fcvenlik ve Altyap\u0131 G\u00fcvenlik Ajans\u0131 da m\u00fc\u015fterilerin sald\u0131r\u0131yla ili\u015fkili riskleri azaltmak i\u00e7in Antivir\u00fcs Tarama Aray\u00fcz\u00fc’n\u00fc (Antimalware Scan Interface) yap\u0131land\u0131rmas\u0131n\u0131 \u00f6nerdi. Ajans ayr\u0131ca, kullan\u0131c\u0131lardan Microsoft Defender Antivirus program\u0131n\u0131 etkinle\u015ftirmelerini de istedi. <\/p>\n
Bunun yan\u0131 s\u0131ra sald\u0131rganlar\u0131n, eri\u015fimi s\u00fcrd\u00fcrmek (“kriptografik anahtarlar\u0131 \u00e7almak”) i\u00e7in ASP.NET makine anahtarlar\u0131n\u0131 hedef ald\u0131\u011f\u0131 belirtildi. Ajans, yama uygulamadan \u00f6nce ve sonra bu anahtarlar\u0131n d\u00f6nd\u00fcr\u00fclmesini \u00f6neriyor.<\/p>\n
Eye Security ise sald\u0131r\u0131n\u0131n hedefi oldu\u011funu fark eden m\u00fc\u015fterilere “etkilenen SharePoint sunucular\u0131n\u0131 kapatmalar\u0131n\u0131”, “if\u015fa olmu\u015f olabilecek t\u00fcm kimlik bilgilerini ve sistem s\u0131rlar\u0131n\u0131 de\u011fi\u015ftirmelerini” ve “olay m\u00fcdahale ekibiyle veya g\u00fcvenilir bir siber g\u00fcvenlik firmas\u0131yla ileti\u015fime ge\u00e7melerini” sal\u0131k veriyor.<\/p>\n
SALDIRININ ARKASINDAK\u0130 GRUPLAR<\/h3>\n
Microsoft, sald\u0131r\u0131n\u0131n arkas\u0131nda oldu\u011fu iddia edilen Linen Typhoon grubunun 2012’den bu yana “\u00f6ncelikle h\u00fck\u00fcmet, savunma, stratejik planlama ve insan haklar\u0131yla ilgili kurulu\u015flar\u0131 hedef alarak fikri m\u00fclkiyeti \u00e7almaya odakland\u0131\u011f\u0131n\u0131” s\u00f6yledi.<\/p>\n
A\u00e7\u0131klamada, Violet Typhoon’un da 2015\u2019ten bu yana “esas olarak ABD, Avrupa ve Do\u011fu Asya’daki eski h\u00fck\u00fcmet ve askeri personel, sivil toplum kurulu\u015flar\u0131, d\u00fc\u015f\u00fcnce kurulu\u015flar\u0131, y\u00fcksek\u00f6\u011fretim, dijital ve bas\u0131l\u0131 medya, finans ve sa\u011fl\u0131k sekt\u00f6rlerini hedef alan casusluk faaliyetleri y\u00fcr\u00fctt\u00fc\u011f\u00fc” belirtildi.<\/p>\n
\u00dc\u00e7\u00fcnc\u00fc grup Storm-2603’\u00fcn \u00c7in merkezli oldu\u011funa dairse kesin bir bilgi yok. Teknoloji devi bundan “orta d\u00fczeyde emin olduklar\u0131n\u0131”, ancak ancak grup ile di\u011fer \u00c7inli akt\u00f6rler aras\u0131nda ba\u011flant\u0131 tespit etmedi\u011fini bildirdi.<\/p>\n
Ayr\u0131ca g\u00fcvenlik g\u00fcncellemeleri y\u00fcklenmemi\u015fse, “ba\u015fka akt\u00f6rlerin” de \u015firket i\u00e7i SharePoint sistemlerini hedef alarak g\u00fcvenlik a\u00e7\u0131klar\u0131ndan yararlanabilece\u011fi konusunda uyard\u0131.<\/p>\n<\/div>\n
\n
<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Teknoloji devi Microsoft, aralar\u0131nda devlet destekli bilgisayar korsanlar\u0131n\u0131n da bulundu\u011fu \u00c7inli “tehdit akt\u00f6rlerinin” SharePoint belge payla\u015f\u0131m yaz\u0131l\u0131m\u0131 sunucular\u0131ndaki g\u00fcvenlik a\u00e7\u0131klar\u0131ndan yararland\u0131\u011f\u0131n\u0131 ve bu hizmeti kullanan i\u015fletmelerin verilerini hedef ald\u0131\u011f\u0131n\u0131 \u00f6ne s\u00fcr\u00fcyor. ABD’li teknoloji \u015firketinin a\u00e7\u0131klamas\u0131na g\u00f6re \u00c7in devlet destekli Linen Typhoon ve Violet Typhoon ile yine \u00c7in merkezli oldu\u011fu d\u00fc\u015f\u00fcn\u00fclen Storm-2603 adl\u0131 \u00fc\u00e7 grup, platformu […]<\/p>\n","protected":false},"author":908,"featured_media":31880,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_seo_schema_type":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[12],"tags":[],"class_list":["post-31879","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/kibrisayna.com\/wp-content\/uploads\/2025\/07\/nC8MCI-7dUq6ZBcpMMQ-OQ.jpg","_links":{"self":[{"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/posts\/31879","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/users\/908"}],"replies":[{"embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/comments?post=31879"}],"version-history":[{"count":0,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/posts\/31879\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/media\/31880"}],"wp:attachment":[{"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/media?parent=31879"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/categories?post=31879"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/tags?post=31879"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}