- Home
- News
News
Blog posts, security advisories and announcements from Doğa Network. Up-to-date content on IT infrastructure, cybersecurity and cloud.
KVKK data breaches: ISO 27001 lessons for SMBs
On 30 September 2026, KVKK published data-breach notices for nine companies. At least 1,033,853 people were affected in total. This article covers only the causes stated in public and how they map to ISO/IEC 27001:2022 Annex A controls. Source: [memurlar.net report](https://www.memurlar.net/haber/1179657/kvkk-9-sirketin-veri-ihlalini-yayimladi-1-milyon-kisi-etkileniyor.html).
Read more →
Citrix NetScaler Vulnerability CVE-2026-88779: SAML Zero-Day
CVE-2026-88779 (CVSS 8.7) affects Citrix NetScaler appliances that use SAML and is actively exploited. Fixed versions, the disputed impact and post-exploitation traces from 88771.
Read more →
FortiMail Vulnerability CVE-2026-104286 Exploited as a Zero-Day
FortiMail flaw CVE-2026-104286 (CVSS 9.8) in the IBE web feature is exploited as a zero-day. No fixed release yet. Affected versions, the workaround and IoCs.
Read more →
Yandex business mail has dropped to view-only mode
Organizations that keep their own domain on Yandex 360 see a "view only" warning when they open the mailbox. This is not an outage. Free business mail has ended, and an account without a topped-up balance cannot process new mail.
Read more →
ISO 27001 consulting: where should an SMB start?
An ISO 27001 certificate is not a software licence. ISO/IEC 27001:2022 is a standard that asks you to manage information security in a regular way.
Read more →
Why is a disaster recovery plan necessary?
Having a backup does not mean the business will pick up where it left off. Disaster recovery means writing down who brings which system back, and how soon.
Read more →
Microsoft SharePoint Server Vulnerability: CVE-2026-65660 Is Being Exploited
CVE-2026-65660 lets an authenticated attacker inject and run code on on-premises Microsoft SharePoint Server. The score is CVSS 8.8 under CVSS 3.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability was published on 11 August 2026, and the fix was announced…
Read more →
Citrix NetScaler Vulnerability: CVE-2026-88771 and CVE-2026-88772
On 27 September 2026, Citrix disclosed unauthenticated remote code execution vulnerabilities in NetScaler ADC and NetScaler Gateway. For CVE-2026-88771 and CVE-2026-88772, advisory CTX697096 gives a CVSS v4.0 score of 9.5. Citrix says it has observed exploitation on unpatched…
Read more →
WordPress Vulnerability CVE-2026-87902 Exploited: Update to 7.1.2
Critical WordPress core vulnerability CVE-2026-87902 (CVSS 9.2) was exploited within hours of the patch. Affected versions, how to check your site, IoCs and what to do now.
Read more →