From e05e0ac6ad6eb167cceb424ca51cb39ba5050534 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Yusuf=20=C4=B0pek?= Date: Thu, 30 Dec 2021 16:43:17 +0300 Subject: [PATCH] =?UTF-8?q?Aral=C4=B1k=202021=20ba=C4=9Flant=C4=B1lar?= =?UTF-8?q?=C4=B1=20eklendi.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- gizlilikraporu/2021/12-Aralık 2021.md | 172 ++++++++++++++++++++++++++ 1 file changed, 172 insertions(+) create mode 100644 gizlilikraporu/2021/12-Aralık 2021.md diff --git a/gizlilikraporu/2021/12-Aralık 2021.md b/gizlilikraporu/2021/12-Aralık 2021.md new file mode 100644 index 0000000..cb62c99 --- /dev/null +++ b/gizlilikraporu/2021/12-Aralık 2021.md @@ -0,0 +1,172 @@ +# Gizlilik Raporu Temmuz 2021 + +## Veri İhlalleri +https://www.theregister.com/2021/12/07/line_pay_leaks_around_133000/ + +https://www.bleepingcomputer.com/news/security/gumtree-classifieds-site-leaked-personal-info-via-the-f12-key/ + +https://www.bleepingcomputer.com/news/security/uk-govt-shares-585-million-passwords-with-have-i-been-pwned/ + +https://www.zdnet.com/article/ubisoft-confirms-just-dance-data-breach-amid-developer-exodus/ + +https://www.bleepingcomputer.com/news/security/microsoft-azure-app-service-flaw-exposed-customer-source-code/ + + +## Şirket + +https://themarkup.org/privacy/2021/12/06/the-popular-family-safety-app-life360-is-selling-precise-location-data-on-its-tens-of-millions-of-user + +https://www.msn.com/en-us/money/other/google-says-bug-with-teams-and-android-can-cause-911-calls-to-fail/ar-AAREVFK + +https://www.theverge.com/2021/12/4/22817758/broken-google-pixel-phone-privacy-leak + +https://www.macrumors.com/2021/12/08/users-continue-to-be-tracked-by-facebook/ + +https://apple.slashdot.org/story/21/12/08/1223230/apple-reaches-quiet-truce-over-iphone-privacy-changes + +https://www.theverge.com/2021/6/3/22516178/apple-airtags-tracking-devices-update-play-sound-privacy-android-app + +https://www.techradar.com/news/google-drive-could-soon-start-locking-your-personal-files + +https://www.macrumors.com/2021/12/15/apple-nixes-csam-references-website/ + +https://www.zdnet.com/article/ios-15-2s-app-privacy-report-how-to-turn-it-on-and-what-it-all-means/ + +https://www.bleepingcomputer.com/news/microsoft/microsoft-rolls-out-end-to-end-encryption-for-teams-calls/ + +https://www.bleepingcomputer.com/news/microsoft/microsoft-december-2021-patch-tuesday-fixes-6-zero-days-67-flaws/ + +https://www.howtogeek.com/774542/windows-11-officially-shuts-down-firefoxs-default-browser-workaround/ + +https://9to5mac.com/2021/12/15/pegasus-spyware-maker-nso-running-out-of-cash/ + +https://9to5google.com/2021/12/24/google-fit-iphone-camera-heart/ + +https://www.bleepingcomputer.com/news/microsoft/windows-10-21h2-adds-ransomware-protection-to-security-baseline/ + +https://www.kamudanhaber.net/turk-telekom-internet-fiyatlarina-zam-yapti + +https://www.xda-developers.com/windows-11-ssd-performance-downgrade/ + +## Araştırma + +https://www.lunasec.io/docs/blog/log4j-zero-day/ + +https://www.zdnet.com/article/log4j-rce-activity-began-on-december-1-as-botnets-start-using-vulnerability/ + +https://www.wired.com/story/log4j-log4shell/ + +https://www.zdnet.com/article/second-log4j-vulnerability-found-apache-log4j-2-16-0-released/ + +https://www.bleepingcomputer.com/news/security/log4j-list-of-vulnerable-products-and-vendor-advisories/ + +https://threatpost.com/third-log4j-bug-dos-apache-patch/177159/ + +https://www.zdnet.com/article/apache-releases-new-2-17-0-patch-for-log4j-to-solve-denial-of-service-vulnerability/ + +https://www.zdnet.com/article/belgian-defense-ministry-confirms-cyberattack-through-log4j-exploitation/ + +https://www.bleepingcomputer.com/news/security/cisa-releases-apache-log4j-scanner-to-find-vulnerable-apps/ + +https://www.bleepingcomputer.com/news/security/nvidia-discloses-applications-impacted-by-log4j-vulnerability/ + +https://www.zdnet.com/article/cisa-orders-federal-civilian-agencies-to-patch-log4j-vulnerability-by-december-24/ + +https://portswigger.net/research/ublock-i-exfiltrate-exploiting-ad-blockers-with-css + +https://www.bleepingcomputer.com/news/security/large-scale-phishing-study-shows-who-bites-the-bait-more-often/ + +https://scribe.rip/geekculture/an-iframe-from-googlesyndication-com-tries-to-access-the-camera-and-microphone-3a3d95c5f1a7 + +https://www.searchenginejournal.com/all-in-one-seo-vulnerability-2021/430230/ + +https://www.nbcnews.com/tech/internet/internet-tricking-brains-rcna7193 + +## Siyasi + +https://www.bleepingcomputer.com/news/technology/eurostar-tests-facial-recognition-system-on-london-train-station/ + +https://www.bbc.com/news/uk-59608641 + +https://news.itsfoss.com/eu-open-source-software/ + +https://therecord.media/new-german-government-coalition-promises-not-to-buy-exploits/ + +https://www.wgbh.org/news/local-news/2021/12/15/worcester-bans-use-of-controversial-facial-recognition-technology + +https://www.wbur.org/news/2021/12/17/massachusetts-cell-site-simulator-civil-forfeitures + +https://www.bleepingcomputer.com/news/security/dhs-announces-hack-dhs-bug-bounty-program-for-vetted-researchers/ + +https://www.zdnet.com/article/cisa-expands-bug-bounty-program-to-include-log4j/ + +https://www.cbc.ca/news/canada/clearview-ai-facial-recognition-1.6286016 + +https://techcrunch.com/2021/12/16/clearview-gdpr-breaches-france/ + +https://www.reuters.com/world/asia-pacific/skorea-test-ai-powered-facial-recognition-track-covid-19-cases-2021-12-13/ + +https://torontosun.com/news/national/feds-admit-tracking-33-million-mobile-phone-devices-during-lockdowns + +https://iapp.org/news/a/new-eu-data-blockage-as-german-court-would-ban-many-cookie-management-providers/ + +https://tutanota.com/blog/posts/belgian-encryption-backdoor-law-stopped/ + +## Özgür Yazılım ve Açık Kaynak + +https://blog.torproject.org/tor-censorship-in-russia/ + +https://www.neowin.net/news/firefox-95-will-include-rlbox-sandboxing-for-added-security/ + +https://www.ghacks.net/2021/12/06/firefox-monitor-may-remove-personal-information-now-from-the-internet/ + +https://www.zdnet.com/article/mozilla-rolls-out-gpc-for-all-firefox-users-but-enforcement-limited-to-two-states/ + +https://www.bleepingcomputer.com/news/security/malicious-notepad-plus-plus-installers-push-strongpity-malware/ + +https://signal.org/blog/how-to-build-encrypted-group-calls/ + +https://github.com/signalapp/Signal-Desktop/issues/4461#issuecomment-993914337 + +https://therecord.media/firefox-fixes-password-leak-via-windows-cloud-clipboard-feature/ + +https://www.bleepingcomputer.com/news/security/attackers-can-get-root-by-crashing-ubuntu-s-accountsservice/ + +https://github.com/Chocobozzz/PeerTube/releases/tag/v4.0.0 + +https://spreadprivacy.com/duckduckgo-2021-review/ + +https://nitter.sethforprivacy.com/session_app/status/1472811078992076804 + +https://nextcloud.com/blog/use-case-sib-delivering-nextcloud-to-2500-teachers-and-33000-pupils-in-brittany-france/ + +https://www.ghacks.net/2021/12/21/75-of-steams-top-1000-games-work-on-linux-now/ + +https://twitter.com/Naaackers/status/1471494415306788870 + +https://techcrunch.com/2021/12/13/mozilla-expects-to-generate-more-than-500m-in-revenue-this-year/ + +https://www.youtube.com/watch?v=QRqY_20ti9A&t=2s + +https://kdenlive.org/en/2021/12/kdenlive-21-12-is-out/ + +https://www.gamingonlinux.com/2021/12/playstation-3-emulator-rpcs3-shows-off-big-game-fixes/ + +https://www.gamingonlinux.com/2021/12/minecraft-30-percent-faster-on-linux-with-mesa-drivers/ + +https://www.gamingonlinux.com/2021/12/more-battleye-titles-for-proton-on-linux-including-dayz-arma-3-now-supported/ + +https://www.gamingonlinux.com/2021/12/amazon-hiring-for-proton-wine-and-linux-developers-for-streaming-service-luna/ + +https://i.redd.it/nne9uzhyjn581.png + +## Diğer + +https://www.bleepingcomputer.com/news/security/phishing-attacks-use-qr-codes-to-steal-banking-credentials/ + +https://protonmail.com/blog/https/ + +https://www.theverge.com/2021/12/14/22834264/ps4-ps5-jailbreak-playstation-poobs4 + +https://www.theverge.com/2021/12/23/22851585/lick-taste-the-tv-screen-snozzberries-flavor-chemicals-menu +