{"id":39497,"date":"2026-09-23T06:39:15","date_gmt":"2026-09-23T03:39:15","guid":{"rendered":"https:\/\/kibrisayna.com\/index.php\/2026\/09\/23\/metanin-yapay-zeka-asistaninda-kritik-acik-saldirganlar-bilgisayarin-kontrolu-ele-gecirdi\/"},"modified":"2026-09-23T06:39:15","modified_gmt":"2026-09-23T03:39:15","slug":"metanin-yapay-zeka-asistaninda-kritik-acik-saldirganlar-bilgisayarin-kontrolu-ele-gecirdi","status":"publish","type":"post","link":"https:\/\/kibrisayna.com\/index.php\/2026\/09\/23\/metanin-yapay-zeka-asistaninda-kritik-acik-saldirganlar-bilgisayarin-kontrolu-ele-gecirdi\/","title":{"rendered":"Meta\u2019n\u0131n yapay zeka asistan\u0131nda kritik a\u00e7\u0131k: Sald\u0131rganlar bilgisayar\u0131n kontrol\u00fc ele ge\u00e7irdi"},"content":{"rendered":"


\n<\/p>\n

\n

Meta<\/svg><\/a>\u2019n\u0131n kullan\u0131c\u0131 ad\u0131na i\u015flemler ger\u00e7ekle\u015ftirebilen ki\u015fisel yapay zeka<\/svg><\/a> asistan\u0131 Muse, ciddi bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131yla g\u00fcndeme geldi.<\/p>\n

\u00a0<\/p>\n

MacOS g\u00fcvenli\u011fi \u00fczerine \u00e7al\u0131\u015fan Patrick Wardle taraf\u0131ndan ke\u015ffedilen a\u00e7\u0131k, bilgisayarda \u00e7al\u0131\u015fan k\u00f6t\u00fc ama\u00e7l\u0131 bir yaz\u0131l\u0131m\u0131n Muse\u2019un kimlik do\u011frulama bilgilerini ele ge\u00e7irmesine ve yapay zeka ajan\u0131n\u0131 kullan\u0131c\u0131 ad\u0131na y\u00f6nlendirmesine olanak tan\u0131d\u0131.\u00a0<\/p>\n

\u00a0<\/p>\n

Wardle\u2019\u0131n haz\u0131rlad\u0131\u011f\u0131 kan\u0131tlama sald\u0131r\u0131lar\u0131nda Muse kullan\u0131larak kullan\u0131c\u0131ya belirgin bir uyar\u0131 g\u00f6sterilmeden foto\u011fraf \u00e7ekilebildi\u011fi ve bilgisayara zararl\u0131 dosyalar eklenebildi\u011fi aktar\u0131ld\u0131. Meta, a\u00e7\u0131\u011f\u0131n kamuoyuna duyurulmas\u0131n\u0131n ard\u0131ndan macOS uygulamas\u0131 i\u00e7in bir acil d\u00fczeltme yay\u0131mlad\u0131.<\/p>\n

\u00a0<\/p>\n

A\u00c7IK SESL\u0130 YAZMA S\u0130STEM\u0130NDE BULUNDU<\/strong><\/p>\n

\u00a0<\/p>\n

G\u00fcvenlik sorununun temelinde Muse\u2019un sesli komutlar\u0131 Mac \u00fczerinde i\u015flemek yerine Meta\u2019n\u0131n sunucular\u0131na g\u00f6ndermesi bulunuyor.<\/p>\n

\u00a0<\/p>\n

Uygulama i\u00e7erisinde ses kay\u0131tlar\u0131n\u0131n ve konu\u015fma d\u00f6k\u00fcmlerinin g\u00f6nderilece\u011fi sunucuyu belirleyen, kullan\u0131c\u0131ya g\u00f6sterilmeyen bir geli\u015ftirme ayar\u0131 yer al\u0131yordu. Bu ayar normalde Meta\u2019ya ait sunucuyu i\u015faret ediyordu.<\/p>\n

\u00a0<\/p>\n

Ancak bilgisayarda oturum a\u00e7m\u0131\u015f kullan\u0131c\u0131 hesab\u0131 alt\u0131nda \u00e7al\u0131\u015fan herhangi bir uygulama veya terminal komutu, ek bir macOS izni almadan bu adresi de\u011fi\u015ftirebiliyordu.<\/p>\n

\u00a0<\/p>\n

Sald\u0131rgan ayar\u0131 kendi kontrol\u00fcndeki sunucuya y\u00f6nlendirdi\u011finde, kullan\u0131c\u0131n\u0131n Muse\u2019a verdi\u011fi sesli komutlar \u00f6nce sald\u0131rgana g\u00f6nderilebiliyordu. Daha \u00f6nemlisi, bu i\u015flem s\u0131ras\u0131nda Muse hesab\u0131n\u0131 kontrol etmek i\u00e7in kullan\u0131lan kimlik do\u011frulama anahtar\u0131n\u0131n da ele ge\u00e7irilmesi m\u00fcmk\u00fcn hale geliyordu.<\/p>\n

Kimlik do\u011frulama anahtar\u0131n\u0131 ele ge\u00e7iren sald\u0131rgan, yeni izinler istemek yerine Muse\u2019a daha \u00f6nce verilmi\u015f yetkilerden yararlanabiliyordu. B\u00f6ylece ger\u00e7ekle\u015ftirilen i\u015flemler i\u015fletim sistemi a\u00e7\u0131s\u0131ndan g\u00fcvenilir Muse uygulamas\u0131ndan geliyormu\u015f gibi g\u00f6r\u00fcnebiliyordu.<\/p>\n

Meta da yapt\u0131\u011f\u0131 a\u00e7\u0131klamada bunun uzaktan ger\u00e7ekle\u015ftirilebilen ba\u011f\u0131ms\u0131z bir sald\u0131r\u0131 olmad\u0131\u011f\u0131n\u0131 ve bilgisayarda \u00f6nceden zararl\u0131 kod \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131n\u0131 gerektirdi\u011fini vurgulad\u0131.<\/p>\n

META’DAN AC\u0130L G\u00dcNCELLEME<\/strong><\/p>\n

\u00a0<\/p>\n

Patrick Wardle a\u00e7\u0131\u011f\u0131 ve haz\u0131rlad\u0131\u011f\u0131 sald\u0131r\u0131 \u00f6rne\u011fini kamuoyuna a\u00e7\u0131klad\u0131. Meta, haberlerin yay\u0131mlanmas\u0131n\u0131n ard\u0131ndan macOS uygulamas\u0131na bir acil d\u00fczeltme g\u00f6nderdi.<\/p>\n

\u00a0<\/p>\n

\u015eirket, g\u00fcvenlik sorununun ger\u00e7ek hayatta kullan\u0131labilmesi i\u00e7in kullan\u0131c\u0131n\u0131n cihaz\u0131nda \u00f6nceden k\u00f6t\u00fc ama\u00e7l\u0131 kod bulunmas\u0131 gerekti\u011fini belirterek riskin s\u0131n\u0131rl\u0131 oldu\u011funu savundu. Buna ra\u011fmen gizli sunucu ayar\u0131n\u0131n k\u00f6t\u00fcye kullan\u0131lmas\u0131n\u0131 engelleyen g\u00fcncelleme k\u0131sa s\u00fcrede yay\u0131mland\u0131.<\/p>\n<\/div>\n


\n
<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Meta\u2019n\u0131n kullan\u0131c\u0131 ad\u0131na i\u015flemler ger\u00e7ekle\u015ftirebilen ki\u015fisel yapay zeka asistan\u0131 Muse, ciddi bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131yla g\u00fcndeme geldi. \u00a0 MacOS g\u00fcvenli\u011fi \u00fczerine \u00e7al\u0131\u015fan Patrick Wardle taraf\u0131ndan ke\u015ffedilen a\u00e7\u0131k, bilgisayarda \u00e7al\u0131\u015fan k\u00f6t\u00fc ama\u00e7l\u0131 bir yaz\u0131l\u0131m\u0131n Muse\u2019un kimlik do\u011frulama bilgilerini ele ge\u00e7irmesine ve yapay zeka ajan\u0131n\u0131 kullan\u0131c\u0131 ad\u0131na y\u00f6nlendirmesine olanak tan\u0131d\u0131.\u00a0 \u00a0 Wardle\u2019\u0131n haz\u0131rlad\u0131\u011f\u0131 kan\u0131tlama sald\u0131r\u0131lar\u0131nda Muse kullan\u0131larak kullan\u0131c\u0131ya […]<\/p>\n","protected":false},"author":908,"featured_media":39498,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_seo_schema_type":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[12],"tags":[],"class_list":["post-39497","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/kibrisayna.com\/wp-content\/uploads\/2026\/09\/meta-ai-352055.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/posts\/39497","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/users\/908"}],"replies":[{"embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/comments?post=39497"}],"version-history":[{"count":0,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/posts\/39497\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/media\/39498"}],"wp:attachment":[{"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/media?parent=39497"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/categories?post=39497"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kibrisayna.com\/index.php\/wp-json\/wp\/v2\/tags?post=39497"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}