{"id":32762,"date":"2022-05-25T19:06:04","date_gmt":"2022-05-25T16:06:04","guid":{"rendered":"https:\/\/kutaybilen.com.tr\/?p=32762"},"modified":"2022-05-25T19:06:04","modified_gmt":"2022-05-25T16:06:04","slug":"google-bir-windows-acigini-duyurdu","status":"publish","type":"post","link":"https:\/\/kutaybilen.com.tr\/?p=32762","title":{"rendered":"Google Bir Windows A\u00e7\u0131\u011f\u0131n\u0131 Duyurdu"},"content":{"rendered":"<p>Teknoloji firmalar\u0131 daima olarak yeni eserler geli\u015ftirdikleri \u00fczere var olan eserlerini de <strong>daha geli\u015fmi\u015f hale <\/strong>getirmeye \u00e7al\u0131\u015f\u0131yor. Bu gayeyle da pek \u00e7ok <strong>g\u00fcvenlik <\/strong>ve geli\u015ftirme \u00e7al\u0131\u015fmas\u0131 durmaks\u0131z\u0131n devam ediyor.\u00a0<\/p>\n<p><strong>Google\u2019\u0131n <\/strong>g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 bulmaya odaklanan <strong>The Project Zero<\/strong> grubu, ge\u00e7ti\u011fimiz hafta bir <strong>Windows Kernel\u2019<\/strong>inde sorun oldu\u011funu ortaya \u00e7\u0131karm\u0131\u015ft\u0131. Bu durum Microsoft tak\u0131m\u0131na de bildirilmi\u015fti. A\u00e7\u0131\u011f\u0131n hackerlar taraf\u0131ndan kullan\u0131lmas\u0131 \u00fczerine Google, bilgiyi kamuoyuyla payla\u015ft\u0131.<\/p>\n<p><b>S\u0131f\u0131r-G\u00fcn a\u00e7\u0131\u011f\u0131<\/b><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.webtekno.com\/images\/editor\/default\/0002\/88\/18bc4f6f4847d0ff4320ee29ceb17092a5d98f8e.jpeg\"\/><\/p>\n<p>S\u0131f\u0131r g\u00fcn g\u00fcvenlik a\u00e7\u0131\u011f\u0131 olan bu kernel sorunu, <strong>hackerlar taraf\u0131ndan <\/strong>da kullan\u0131l\u0131yor. <strong>CVE-2020-117087<\/strong> ismiyle takip edilen a\u00e7\u0131k, yak\u0131n vakitte <strong>Microsoft <\/strong>taraf\u0131ndan da d\u00fczeltilebilecek \u00fczere durmuyor.<\/p>\n<p>Project Zero sayfas\u0131nda yer alan a\u00e7\u0131klamaya nazaran <strong>Windows Kernel Kriptografi \u015eof\u00f6r\u00fc (cng.sys)<\/strong>, bir Cihaz\/CNG a\u00e7\u0131\u011f\u0131 yarat\u0131yor. Bu a\u00e7\u0131k da kullan\u0131c\u0131 modundaki programlar taraf\u0131ndan kullan\u0131labiliyor ve \u00e7e\u015fitli girdi \u00e7\u0131kt\u0131 datalar\u0131n\u0131n <strong>denetimi <\/strong>sa\u011flayabiliyor. Bu da lokal olarak eri\u015filebilir taarruz alan\u0131 olu\u015fturuyor.<\/p>\n<p>The Project Zero ekibibu ya\u015fanan sorunu\u00a0asl\u0131nda <strong>22 Ekim\u2019de <\/strong>Microsoft\u2019a bildirmi\u015fti. Ola\u011fan ko\u015fullar alt\u0131nda tak\u0131m bir a\u00e7\u0131\u011f\u0131n giderilmesi i\u00e7in geli\u015ftiricilere <strong>90 g\u00fcn<\/strong> veriyor. Bu a\u00e7\u0131\u011f\u0131n ise k\u0131sa m\u00fcddette a\u00e7\u0131klanmas\u0131n\u0131n nedeni, \u015fimdiden makus niyetli \u015fah\u0131slarca istismar edilmesi oldu.<\/p>\n<p><b>A\u00e7\u0131k 10 Kas\u0131m\u2019da giderilebilir<\/b><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.webtekno.com\/images\/editor\/default\/0002\/88\/8c12aa441e696415a6e327547f188d2fd0b93c9f.jpeg\"\/><\/p>\n<p>Project Zero tak\u0131m\u0131ndan <strong>Ben Hawkes <\/strong>bu a\u00e7\u0131\u011fa dair ayr\u0131nt\u0131lar\u0131 Twitter\u2019dan payla\u015f\u0131rken, Google\u2019\u0131 da haberdar ettiklerini tabir etti. Ayr\u0131yeten bu a\u00e7\u0131\u011f\u0131n <strong>10 Kas\u0131m<\/strong> tarihinde yay\u0131nlanacak bir yama ile<strong> giderilmesini beklediklerini <\/strong>de s\u00f6yledi.<\/p>\n<p>Mevzuyla ilgili bir a\u00e7\u0131klama da <strong>Microsoft\u2019tan <\/strong>geldi. Firman\u0131n a\u00e7\u0131klamas\u0131nda belirtilen g\u00fcvenlik probleminin incelenece\u011fi belirtildi. Ara\u015ft\u0131rmac\u0131lar\u0131n verdi\u011fi son tarihlere yeti\u015fmek istediklerini lakin g\u00fcncellemenin bir <strong>zaman-kalite istikrar\u0131 gerekti\u011fi <\/strong>tabir edildi. Microsoft, en son gayesini ise en y\u00fcksek d\u00fczeyde m\u00fc\u015fteri m\u00fcdafaas\u0131 ve asgar\u00ee kullan\u0131c\u0131 rahats\u0131zl\u0131\u011f\u0131 olarak belirtti.<\/p>\n<div> <\/div>\n","protected":false},"excerpt":{"rendered":"<p>Teknoloji firmalar\u0131 daima olarak yeni eserler geli\u015ftirdikleri \u00fczere var olan eserlerini de daha geli\u015fmi\u015f hale getirmeye \u00e7al\u0131\u015f\u0131yor. Bu gayeyle da &#8230;<\/p>\n","protected":false},"author":1,"featured_media":32763,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[854],"tags":[1532],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/32762"}],"collection":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=32762"}],"version-history":[{"count":1,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/32762\/revisions"}],"predecessor-version":[{"id":32764,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/32762\/revisions\/32764"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/media\/32763"}],"wp:attachment":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=32762"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=32762"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=32762"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}