\n
![](\"https:\/\/cdn1.ntv.com.tr\/gorsel\/OMTkBbAhB06L5ikGtwN67w.jpg?width=1200&mode=crop&scale=both\")
<\/p>\n
\n<\/p>\n
WhatsApp kullanan iPhone sahiplerine kritik uyar\u0131 geldi. Kullan\u0131c\u0131lar\u0131n\u00a0uygulamay\u0131 g\u00fcncellemeleri tavsiye ediliyor.<\/p>\n
Meta\u2019ya ait mesajla\u015fma uygulamas\u0131 WhatsApp\u2019ta ortaya \u00e7\u0131kan bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131, iPhone kullan\u0131c\u0131lar\u0131n\u0131 ki\u015fisel verilerin \u00e7al\u0131nmas\u0131na y\u00f6nelik geli\u015fmi\u015f bir siber sald\u0131r\u0131ya kar\u015f\u0131 savunmas\u0131z b\u0131rakt\u0131. <\/p>\n
Son \u00fc\u00e7 ayd\u0131r devam eden sald\u0131r\u0131da baz\u0131 WhatsApp kullan\u0131c\u0131lar\u0131na, \u201cs\u0131f\u0131r t\u0131klama\u201d (zero-click) ad\u0131 verilen bu hack giri\u015fiminin kurban\u0131 olabileceklerine dair uygulama i\u00e7i uyar\u0131lar g\u00f6nderildi. Ancak sald\u0131r\u0131dan ka\u00e7 ki\u015finin etkilendi\u011fi belirtilmedi.\u00a0 <\/p>\n
G\u00dcNCELLEME \u015eART<\/strong> <\/p>\n WhatsApp, a\u00e7\u0131\u011f\u0131 kapatt\u0131\u011f\u0131n\u0131 duyurdu ancak kullan\u0131c\u0131lar\u0131n uygulamay\u0131 g\u00fcncellemesi gerekiyor. <\/p>\n Amnesty International G\u00fcvenlik Laboratuvar\u0131 Direkt\u00f6r\u00fc Donncha \u00d3 Cearbhaill, X (Twitter) \u00fczerinden yapt\u0131\u011f\u0131 a\u00e7\u0131klamada, WhatsApp\u2019\u0131n son 90 g\u00fcn i\u00e7inde hedef al\u0131nm\u0131\u015f ki\u015filere uyar\u0131 bildirimi g\u00f6nderdi\u011fini belirtti ve \u201cCihazlar\u0131n\u0131z\u0131 g\u00fcncelledi\u011finizden emin olun\u201d \u00e7a\u011fr\u0131s\u0131nda bulundu. <\/p>\n G\u00fcvenlik ekibi taraf\u0131ndan CVE-2025-55177 koduyla duyurulan a\u00e7\u0131k, WhatsApp\u2019\u0131n k\u0131sa blog yaz\u0131s\u0131nda da payla\u015f\u0131ld\u0131. A\u00e7\u0131\u011f\u0131n, hedef cihazda herhangi bir kullan\u0131c\u0131 etkile\u015fimi olmadan zararl\u0131 i\u00e7erik \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131na imkan tan\u0131yabilece\u011fi aktar\u0131ld\u0131. <\/p>\n Resmi a\u00e7\u0131klamada a\u00e7\u0131\u011f\u0131n iOS ve macOS sistemlerini hedef ald\u0131\u011f\u0131 belirtilse de uzmanlar, Android kullan\u0131c\u0131lar\u0131n\u0131n da risk alt\u0131nda olabilece\u011fini ifade ediyor. \u00d6zellikle sivil toplum kurulu\u015flar\u0131nda \u00e7al\u0131\u015fanlar, gazeteciler ve aktivistlerin bu sald\u0131r\u0131lar\u0131n hedefinde olabilece\u011fi vurgulan\u0131yor. <\/p>\n SIFIR TIKLAMA SALDIRISI NED\u0130R?<\/strong> <\/p>\n \u201cS\u0131f\u0131r t\u0131klama\u201d olarak bilinen y\u00f6ntem, kullan\u0131c\u0131n\u0131n hi\u00e7bir i\u015flem yapmas\u0131na gerek kalmadan cihaz\u0131n ele ge\u00e7irilmesine imkan veriyor. <\/p>\n Normalde zararl\u0131 yaz\u0131l\u0131mlar telefona ya da bilgisayara, kullan\u0131c\u0131n\u0131n bir linke t\u0131klamas\u0131, dosya indirmesi ya da e-postay\u0131 a\u00e7mas\u0131yla bula\u015f\u0131r.<\/p>\n Ancak s\u0131f\u0131r t\u0131klama sald\u0131r\u0131lar\u0131nda: <\/p>\n – Sald\u0131rgan, cihaz\u0131n i\u015fletim sisteminde veya kullan\u0131lan bir uygulamada bulunan kritik g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 hedef al\u0131r. <\/p>\n – Kullan\u0131c\u0131ya \u00f6zel haz\u0131rlanm\u0131\u015f bir mesaj, \u00e7a\u011fr\u0131 iste\u011fi, dosya ya da veri paketi g\u00f6nderilir. <\/p>\n – Bu veri cihaz taraf\u0131ndan otomatik i\u015flenirken a\u00e7\u0131k tetiklenir. Kullan\u0131c\u0131n\u0131n mesaj\u0131 a\u00e7mas\u0131, dosyaya dokunmas\u0131 ya da herhangi bir \u015fey yapmas\u0131 gerekmez. <\/p>\n Bu t\u00fcr sald\u0131r\u0131lar, genellikle b\u00fcy\u00fck kaynaklara sahip gruplar taraf\u0131ndan, politikac\u0131lar, avukatlar, gazeteciler ve insan haklar\u0131 savunucular\u0131 gibi \u201cy\u00fcksek de\u011ferli hedefler\u201de kar\u015f\u0131 kullan\u0131l\u0131yor. <\/p>\n Siber g\u00fcvenlik uzman\u0131 Adam Boynton, Daily Mail\u2019e yapt\u0131\u011f\u0131 a\u00e7\u0131klamada, bu a\u00e7\u0131klar\u0131n genellikle casus yaz\u0131l\u0131m y\u00fcklemek, verileri toplamak, kimlik bilgilerini \u00e7almak ve konu\u015fmalar\u0131 dinlemek i\u00e7in kullan\u0131ld\u0131\u011f\u0131n\u0131 belirtti.<\/p>\n Hatta sald\u0131rganlar bu t\u00fcr a\u00e7\u0131klar\u0131, fidye yaz\u0131l\u0131m\u0131 gibi daha b\u00fcy\u00fck sald\u0131r\u0131lar\u0131n ba\u015flang\u0131\u00e7 noktas\u0131 olarak de\u011ferlendirebiliyor. <\/p>\n NE YAPILMALI?<\/strong> <\/p>\n Uzmanlar, kullan\u0131c\u0131lar\u0131n mutlaka WhatsApp\u2019\u0131 son s\u00fcr\u00fcme g\u00fcncellemesini, telefonlar\u0131n\u0131n i\u015fletim sistemini g\u00fcncel tutmas\u0131n\u0131 ve gerekirse fabrika ayarlar\u0131na d\u00f6nmesini \u00f6neriyor. <\/p>\n WhatsApp, sald\u0131r\u0131dan etkilenen kullan\u0131c\u0131lar\u0131 yaln\u0131zca uygulama i\u00e7i bildirim yoluyla bilgilendirece\u011fini a\u00e7\u0131klad\u0131.<\/p>\n