[{"id":363,"title":"Ransomware'\u0131n Yeni Cephesi: Tedarik Zinciri Sald\u0131r\u0131lar\u0131 ve Kritik Altyap\u0131n\u0131n Hedef Al\u0131nmas\u0131","content":"<h1><strong>Ransomware'\u0131n Yeni Cephesi: Tedarik Zinciri Sald\u0131r\u0131lar\u0131 ve Kritik Altyap\u0131n\u0131n Hedef Al\u0131nmas\u0131<\/strong><\/h1>\n<p>Ransomware uzun y\u0131llar boyunca bireysel kullan\u0131c\u0131lar\u0131, k&uuml;&ccedil;&uuml;k i\u015fletmeleri ve eri\u015fimi kolay a\u011flar\u0131 hedef alarak ilerledi. Ancak son y\u0131llarda tehdit akt&ouml;rleri stratejik bir k\u0131r\u0131lma ya\u015fad\u0131: <strong>art\u0131k sadece do\u011frudan sistemlere s\u0131zmak yerine tedarik zincirlerini, geni\u015f ekosistem ba\u011f\u0131ml\u0131l\u0131klar\u0131n\u0131 ve kritik altyap\u0131 bile\u015fenlerini hedef al\u0131yorlar.<\/strong><\/p>\n<p>Bu de\u011fi\u015fim, sald\u0131r\u0131lar\u0131n teknik karma\u015f\u0131kl\u0131\u011f\u0131n\u0131 art\u0131rmakla kalm\u0131yor, ayn\u0131 zamanda yaratt\u0131\u011f\u0131 hasar\u0131n &ouml;l&ccedil;e\u011fini de dramatik bi&ccedil;imde y&uuml;kseltiyor. Art\u0131k bir sald\u0131r\u0131 yaln\u0131zca tek bir kurulu\u015fu de\u011fil; <strong>onunla ba\u011flant\u0131l\u0131 y&uuml;zlerce, hatta binlerce sistemi<\/strong> etkileyebiliyor.<\/p>\n<p>Bu yaz\u0131da g&uuml;ncel ransomware ekosisteminin nas\u0131l evrildi\u011fini, sald\u0131rganlar\u0131n neden bu yeni stratejiye y&ouml;neldi\u011fini ve bu sald\u0131r\u0131lar\u0131n neden t&uuml;m dijital d&uuml;nyay\u0131 derinden etkileyen zincirleme sonu&ccedil;lar do\u011furdu\u011funu ele alaca\u011f\u0131z.<\/p>\n<p><iframe style=\"width: 658px; height: 370px;\" src=\"https:\/\/www.youtube.com\/embed\/L2g1uZW44KA\" width=\"658\" height=\"370\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<hr>\n<h2>\ud83d\udd25 <strong>1. Sald\u0131rganlar Neden Tedarik Zincirlerine Y&ouml;neldi?<\/strong><\/h2>\n<p>Tedarik zinciri, bir kurulu\u015fun kulland\u0131\u011f\u0131 yaz\u0131l\u0131m, donan\u0131m, hizmet ve 3. taraf sa\u011flay\u0131c\u0131lar\u0131n tamam\u0131n\u0131 kapsayan geni\u015f bir ekosistemdir. Bu da sald\u0131rganlar i&ccedil;in &ccedil;ok &ouml;nemli bir avantaj sa\u011flar:<\/p>\n<h3><strong>\ud83d\udccc 1.1. Tek Vuru\u015fta Y&uuml;zlerce Hedef<\/strong><\/h3>\n<p>SolarWinds, MOVEit ve Kaseya sald\u0131r\u0131lar\u0131nda g&ouml;r&uuml;ld&uuml;\u011f&uuml; gibi, bir yaz\u0131l\u0131m bile\u015fenini ele ge&ccedil;irmek <strong>&ccedil;arpan etkisi<\/strong> yarat\u0131r.<br>Yamalanmam\u0131\u015f bir bile\u015fen &rarr; yaz\u0131l\u0131m g&uuml;ncellemesi &rarr; y&uuml;zlerce m&uuml;\u015fteriye otomatik bula\u015fma.<\/p>\n<h3><strong>\ud83d\udccc 1.2. G&uuml;ven Zincirinin S&ouml;m&uuml;r&uuml;lmesi<\/strong><\/h3>\n<p>&Ouml;zellikle kod imzalama sertifikalar\u0131yla da\u011f\u0131t\u0131lan g&uuml;ncellemeler \"g&uuml;venilir\" kabul edilir.<br>Sald\u0131rganlar bu g&uuml;veni k\u0131rarak:<\/p>\n<ul>\n<li>\n<p>me\u015fru g&uuml;ncellemeleri k&ouml;t&uuml; ama&ccedil;l\u0131 payload ile de\u011fi\u015ftiriyor,<\/p>\n<\/li>\n<li>\n<p>sistemin kendi g&uuml;ven mekanizmas\u0131n\u0131 ona kar\u015f\u0131 kullan\u0131yor.<\/p>\n<\/li>\n<\/ul>\n<h3><strong>\ud83d\udccc 1.3. Savunman\u0131n En Zay\u0131f Halkas\u0131<\/strong><\/h3>\n<p>Bir \u015firket ne kadar g&uuml;&ccedil;l&uuml; olursa olsun, tedarik&ccedil;ilerinin g&uuml;venlik seviyesi &ccedil;o\u011fu zaman ayn\u0131 d&uuml;zeyde de\u011fildir.<br>Bu da sald\u0131rganlara d&uuml;\u015f&uuml;k maliyetli, y&uuml;ksek getirili bir sald\u0131r\u0131 y&uuml;zeyi sa\u011flar.<\/p>\n<hr>\n<h2>\ud83c\udfed <strong>2. Kritik Altyap\u0131 Neden Ransomware \u0130&ccedil;in Yeni Alt\u0131n Madenine D&ouml;nd&uuml;?<\/strong><\/h2>\n<p>Kritik altyap\u0131lar (enerji, su, ula\u015f\u0131m, sa\u011fl\u0131k, &uuml;retim tesisleri) modern ya\u015fam\u0131n temelini olu\u015fturur. Bu sistemlerdeki kesintiler sadece finansal zarar de\u011fil, <strong>toplumsal kaos<\/strong> da yaratabilir.<\/p>\n<h3><strong>\ud83d\udccc 2.1. OT (Operational Technology) Sistemlerinin Savunmas\u0131zl\u0131\u011f\u0131<\/strong><\/h3>\n<p>SCADA ve PLC gibi OT sistemleri:<\/p>\n<ul>\n<li>\n<p>y\u0131llarca internete kapal\u0131 kald\u0131,<\/p>\n<\/li>\n<li>\n<p>g&uuml;ncel g&uuml;venlik standartlar\u0131na g&ouml;re tasarlanmad\u0131,<\/p>\n<\/li>\n<li>\n<p>yama uygulamas\u0131 &ccedil;o\u011fu zaman m&uuml;mk&uuml;n de\u011fil (&ccedil;&uuml;nk&uuml; durdurulmalar\u0131 milyonlarca dolar kay\u0131p demek).<\/p>\n<\/li>\n<\/ul>\n<p>Bu da onlar\u0131 ransomware i&ccedil;in ideal hedef h&acirc;line getiriyor.<\/p>\n<h3><strong>\ud83d\udccc 2.2. Yedekleme Sorunlar\u0131<\/strong><\/h3>\n<p>Bir&ccedil;ok kritik altyap\u0131 operat&ouml;r&uuml;:<\/p>\n<ul>\n<li>\n<p>ger&ccedil;ek zamanl\u0131 yedekleme yapam\u0131yor,<\/p>\n<\/li>\n<li>\n<p>offline yedeklemeleri d&uuml;zenli test etmiyor,<\/p>\n<\/li>\n<li>\n<p>operasyonu durdurmamak i&ccedil;in g&uuml;venlik kontrollerini gev\u015fetiyor.<\/p>\n<\/li>\n<\/ul>\n<p>Bu durum fidye &ouml;demeye zorlanmalar\u0131n\u0131 kolayla\u015ft\u0131r\u0131yor.<\/p>\n<h3><strong>\ud83d\udccc 2.3. Fiziksel Etki Yaratan Dijital Sald\u0131r\u0131lar<\/strong><\/h3>\n<p>Bir ransomware sald\u0131r\u0131s\u0131n\u0131n OT ortam\u0131nda yaratabilece\u011fi sonu&ccedil;lar:<\/p>\n<ul>\n<li>\n<p>elektrik kesintisi<\/p>\n<\/li>\n<li>\n<p>yak\u0131t da\u011f\u0131t\u0131m\u0131n\u0131n durmas\u0131<\/p>\n<\/li>\n<li>\n<p>hastanelerin operasyon d\u0131\u015f\u0131 kalmas\u0131<\/p>\n<\/li>\n<li>\n<p>havaalan\u0131 operasyonlar\u0131n\u0131n aksamas\u0131<\/p>\n<\/li>\n<li>\n<p>su ar\u0131tma tesislerinin durmas\u0131<\/p>\n<\/li>\n<\/ul>\n<p>Bu t&uuml;r sonu&ccedil;lar, sald\u0131rganlar\u0131n fidye talebinin <strong>&ccedil;ok daha h\u0131zl\u0131 kar\u015f\u0131lanmas\u0131n\u0131<\/strong> sa\u011fl\u0131yor.<\/p>\n<hr>\n<h2>\ud83e\uddec <strong>3. Sald\u0131r\u0131lar Nas\u0131l Ger&ccedil;ekle\u015fiyor? Mekanizma Ad\u0131m Ad\u0131m<\/strong><\/h2>\n<p>Tedarik zinciri ve kritik altyap\u0131 odakl\u0131 ransomware kampanyalar\u0131 geleneksel sald\u0131r\u0131lardan daha karma\u015f\u0131kt\u0131r. Genellikle \u015fu a\u015famalardan olu\u015fur:<\/p>\n<h3><strong>1\ufe0f\u20e3 \u0130lk Bula\u015fma<\/strong><\/h3>\n<p>Sald\u0131rganlar genellikle \u015fu yollar\u0131 kullan\u0131r:<\/p>\n<ul>\n<li>\n<p>G&uuml;ncelleme mekanizmas\u0131n\u0131 ele ge&ccedil;irmek<\/p>\n<\/li>\n<li>\n<p>Tedarik&ccedil;i hesab\u0131n\u0131 ele ge&ccedil;irme (credential stuffing, MFA bypass)<\/p>\n<\/li>\n<li>\n<p>CI\/CD pipeline&rsquo;a s\u0131zma<\/p>\n<\/li>\n<li>\n<p>A&ccedil;\u0131k kaynak ba\u011f\u0131ml\u0131l\u0131klar\u0131na zafiyet enjekte etme<\/p>\n<\/li>\n<\/ul>\n<h3><strong>2\ufe0f\u20e3 Yay\u0131l\u0131m<\/strong><\/h3>\n<p>Kompromize olan bile\u015fen, hedef ortamlara g&uuml;venilir bir paket gibi yay\u0131l\u0131r ve:<\/p>\n<ul>\n<li>\n<p>arka kap\u0131 b\u0131rak\u0131r,<\/p>\n<\/li>\n<li>\n<p>imzal\u0131 gibi g&ouml;r&uuml;n&uuml;r,<\/p>\n<\/li>\n<li>\n<p>telemetriyi manip&uuml;le eder,<\/p>\n<\/li>\n<li>\n<p>sald\u0131rganlar\u0131n uzaktan komut vermesine izin verir.<\/p>\n<\/li>\n<\/ul>\n<h3><strong>3\ufe0f\u20e3 OT\/ICS Ortam\u0131na S\u0131&ccedil;rama (Bozulmu\u015f Segmentasyon)<\/strong><\/h3>\n<p>OT ve IT a\u011flar\u0131n\u0131n zay\u0131f segmentasyonu nedeniyle sald\u0131rganlar:<\/p>\n<ul>\n<li>\n<p>Domain Controller &rarr; m&uuml;hendis istasyonu &rarr; PLC zincirine ilerleyebilir,<\/p>\n<\/li>\n<li>\n<p>&uuml;retim hatlar\u0131n\u0131 durdurabilir,<\/p>\n<\/li>\n<li>\n<p>fiziksel cihaz davran\u0131\u015f\u0131n\u0131 manip&uuml;le edebilir.<\/p>\n<\/li>\n<\/ul>\n<h3><strong>4\ufe0f\u20e3 Veri \u015eifreleme + &Ccedil;ift \u015eantaj<\/strong><\/h3>\n<p>Art\u0131k standart h&acirc;le geldi:<\/p>\n<ul>\n<li>\n<p>\u015eifreleme<\/p>\n<\/li>\n<li>\n<p>Veri h\u0131rs\u0131zl\u0131\u011f\u0131<\/p>\n<\/li>\n<li>\n<p>S\u0131z\u0131nt\u0131 tehditleri<\/p>\n<\/li>\n<li>\n<p>Reputasyon ve reg&uuml;lasyon bask\u0131s\u0131 (GDPR, KVKK)<\/p>\n<\/li>\n<\/ul>\n<h3><strong>5\ufe0f\u20e3 Zincirleme Etkiler<\/strong><\/h3>\n<p>En kritik a\u015fama: bir sald\u0131r\u0131 sadece hedefi de\u011fil; onun m&uuml;\u015fterilerini ve onlar\u0131n m&uuml;\u015fterilerini de etkiler.<\/p>\n<hr>\n<h2>\ud83c\udf10 <strong>4. Etkileri: Sald\u0131r\u0131lar\u0131n &Ccedil;arpan Etkisi ve K&uuml;resel Sonu&ccedil;lar\u0131<\/strong><\/h2>\n<p>Tedarik zinciri sald\u0131r\u0131lar\u0131nda ya\u015fanan en b&uuml;y&uuml;k problem <strong>belirsizliktir<\/strong>.<\/p>\n<ul>\n<li>\n<p>Hangi paketler bozuldu?<\/p>\n<\/li>\n<li>\n<p>Ka&ccedil; sistem etkilendi?<\/p>\n<\/li>\n<li>\n<p>Ne kadar s&uuml;re fark edilmeden &ccedil;al\u0131\u015ft\u0131?<\/p>\n<\/li>\n<li>\n<p>Hangi veriler s\u0131zd\u0131r\u0131ld\u0131?<\/p>\n<\/li>\n<li>\n<p>Sald\u0131r\u0131 hala devam ediyor mu?<\/p>\n<\/li>\n<\/ul>\n<p>Bu sorular g&uuml;nlerce, hatta aylarca cevaps\u0131z kalabilir.<br>Bu belirsizlik bile operasyonlar\u0131 durdurmak i&ccedil;in yeterlidir.<\/p>\n<h3><strong>&Ouml;rnek Etkiler:<\/strong><\/h3>\n<ul>\n<li>\n<p>&Uuml;retim hatlar\u0131n\u0131n durmas\u0131 &rarr; tedarik zincirinde gecikmeler<\/p>\n<\/li>\n<li>\n<p>Sa\u011fl\u0131k hizmetlerinde kesinti &rarr; hastalar\u0131n riske girmesi<\/p>\n<\/li>\n<li>\n<p>Enerji altyap\u0131s\u0131nda kesinti &rarr; b&ouml;lgesel elektrik problemleri<\/p>\n<\/li>\n<li>\n<p>Bankac\u0131l\u0131k ve finans sistemlerinde aksama &rarr; ekonomik kay\u0131plar<\/p>\n<\/li>\n<li>\n<p>Devlet kurumlar\u0131nda veri s\u0131z\u0131nt\u0131s\u0131 &rarr; ulusal g&uuml;venlik riski<\/p>\n<\/li>\n<\/ul>\n<p>Bu nedenle modern ransomware art\u0131k sadece <strong>siber sald\u0131r\u0131 de\u011fil<\/strong>, bir <strong>ulusal g&uuml;venlik problemi<\/strong> h&acirc;line gelmi\u015ftir.<\/p>\n<hr>\n<h2>\ud83d\udee1\ufe0f <strong>5. Organizasyonlar Bu Yeni Tehditlere Nas\u0131l Haz\u0131rlanmal\u0131?<\/strong><\/h2>\n<h3><strong>\ud83d\udd0d 5.1. Tedarik Zinciri G&ouml;r&uuml;n&uuml;rl&uuml;\u011f&uuml; Art\u0131r\u0131lmal\u0131<\/strong><\/h3>\n<ul>\n<li>\n<p>SBOM (Software Bill of Materials) zorunlu h&acirc;le getirilmeli<\/p>\n<\/li>\n<li>\n<p>Ba\u011f\u0131ml\u0131l\u0131k zinciri otomatik taranmal\u0131<\/p>\n<\/li>\n<li>\n<p>Tedarik&ccedil;i g&uuml;venlik skorlamas\u0131 yap\u0131lmal\u0131<\/p>\n<\/li>\n<\/ul>\n<h3><strong>\ud83d\udd10 5.2. Kod \u0130mzalama ve CI\/CD G&uuml;venli\u011fi G&uuml;&ccedil;lendirilmeli<\/strong><\/h3>\n<ul>\n<li>\n<p>G&uuml;venli pipeline<\/p>\n<\/li>\n<li>\n<p>MFA zorunlulu\u011fu<\/p>\n<\/li>\n<li>\n<p>Sigstore\/Cosign do\u011frulamas\u0131<\/p>\n<\/li>\n<li>\n<p>Secrets management<\/p>\n<\/li>\n<\/ul>\n<h3><strong>\ud83e\uddf1 5.3. OT\/ICS A\u011f Segmentasyonu Kesinlikle Uygulanmal\u0131<\/strong><\/h3>\n<ul>\n<li>\n<p>IT &harr; OT k&ouml;pr&uuml;leri s\u0131k\u0131la\u015ft\u0131r\u0131lmal\u0131<\/p>\n<\/li>\n<li>\n<p>Sadece whitelisting tabanl\u0131 trafik izinleri<\/p>\n<\/li>\n<li>\n<p>Tek y&ouml;nl&uuml; veri diyotlar\u0131 (data diode)<\/p>\n<\/li>\n<\/ul>\n<h3><strong>\ud83d\udce6 5.4. Yedekleme Stratejileri G&uuml;ncellenmeli<\/strong><\/h3>\n<ul>\n<li>\n<p>Offline backup<\/p>\n<\/li>\n<li>\n<p>Immutable storage<\/p>\n<\/li>\n<li>\n<p>D&uuml;zenli restore testleri<\/p>\n<\/li>\n<\/ul>\n<h3><strong>\ud83d\udee1\ufe0f 5.5. Proaktif Tehdit Avc\u0131l\u0131\u011f\u0131 (Threat Hunting)<\/strong><\/h3>\n<ul>\n<li>\n<p>Anomali tespiti<\/p>\n<\/li>\n<li>\n<p>Telemetri korelasyonu<\/p>\n<\/li>\n<li>\n<p>Ransomware davran\u0131\u015f modelleri takibi<\/p>\n<\/li>\n<\/ul>\n<hr>\n<p>&nbsp;<\/p>","excerpt":"Ransomware uzun y\u0131llar boyunca bireysel kullan\u0131c\u0131lar\u0131, k\u00fc\u00e7\u00fck i\u015fletmeleri ve eri\u015fimi kolay a\u011flar\u0131 hedef alarak ilerledi. Ancak son y\u0131llarda tehdit akt\u00f6rleri stratejik bir k\u0131r\u0131lma ya\u015fad\u0131: art\u0131k sadece do\u011frudan sistemlere s\u0131zmak yerine tedarik zincirlerini, geni\u015f ekosistem ba\u011f\u0131ml\u0131l\u0131klar\u0131n\u0131 ve kritik altyap\u0131 bile\u015fenlerini hedef al\u0131yorlar.","created_at":"2025-12-07 19:06:37","updated_at":"2026-09-08 02:16:50","category_id":15,"view_count":708,"reading_time":6,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-12-07 16:06:00","featured_image":"a859403f661ea478c8fcd3bb38fbc59a.png","slug":"ransomware-in-yeni-cephesi-tedarik-zinciri-saldirilari-ve-kritik-altyapinin-hedef-alinmasi","category_name":"Bilgi G\u00fcvenligi","category_slug":"bilgi-guvenligi","category_color":"#894376"},{"id":355,"title":"Unicorn Sosyal M\u00fchendisli\u011fin Sihirli Arac\u0131","content":"<p><iframe style=\"width: 776px; height: 435px;\" src=\"https:\/\/www.youtube.com\/embed\/5afj34PKCSo\" width=\"776\" height=\"435\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<h1>Sessiz Tehdit: Unicorn ve Office Makrolar\u0131yla Gelen Siber Sald\u0131r\u0131lar<\/h1>\n<p>Siber sald\u0131r\u0131lar\u0131n giderek daha <strong>basit ama daha etkili<\/strong> h&acirc;le geldi\u011fi bir d&ouml;nemdeyiz. Art\u0131k karma\u015f\u0131k exploit zincirlerine gerek kalmadan, yaln\u0131zca <strong>bir Microsoft Office belgesi<\/strong> &uuml;zerinden kurum a\u011flar\u0131na s\u0131zmak m&uuml;mk&uuml;n. Bu noktada &ouml;ne &ccedil;\u0131kan ara&ccedil;lardan biri de <strong>Unicorn<\/strong>.<\/p>\n<p>Unicorn, siber sald\u0131rganlar\u0131n g&uuml;&ccedil;l&uuml; <strong>PowerShell betiklerini<\/strong>, masum gibi g&ouml;r&uuml;nen bir <strong>Office makrosu<\/strong> i&ccedil;ine gizlemesine imk&acirc;n tan\u0131r. Kullan\u0131c\u0131 a&ccedil;\u0131s\u0131ndan bak\u0131ld\u0131\u011f\u0131nda ortada yaln\u0131zca bir Word ya da Excel dosyas\u0131 vard\u0131r. Ancak perde arkas\u0131nda, sistemin kontrol&uuml;n&uuml; ele ge&ccedil;irmeye y&ouml;nelik ciddi bir sald\u0131r\u0131 ba\u015flat\u0131l\u0131r.<\/p>\n<hr>\n<h2>Unicorn Nas\u0131l &Ccedil;al\u0131\u015f\u0131r?<\/h2>\n<p>Unicorn&rsquo;un &ccedil;al\u0131\u015fma mant\u0131\u011f\u0131 teknik olarak karma\u015f\u0131k de\u011fildir; ancak etkisi olduk&ccedil;a y\u0131k\u0131c\u0131d\u0131r:<\/p>\n<ol>\n<li>\n<p><strong>Oltalama (Phishing)<\/strong><br>Kurban, genellikle e-posta yoluyla g&ouml;nderilen bir Office dosyas\u0131n\u0131 a&ccedil;ar.<\/p>\n<\/li>\n<li>\n<p><strong>Makrolar\u0131n Etkinle\u015ftirilmesi<\/strong><br>&ldquo;\u0130&ccedil;eri\u011fi g&ouml;r&uuml;nt&uuml;lemek i&ccedil;in makrolar\u0131 etkinle\u015ftirin&rdquo; uyar\u0131s\u0131, sosyal m&uuml;hendisli\u011fin klasik ama h&acirc;l&acirc; en etkili y&ouml;ntemlerinden biridir.<\/p>\n<\/li>\n<li>\n<p><strong>Arka Planda PowerShell &Ccedil;al\u0131\u015ft\u0131r\u0131lmas\u0131<\/strong><br>Makro etkinle\u015ftirildi\u011fi anda, gizlenmi\u015f PowerShell komutlar\u0131 sessizce &ccedil;al\u0131\u015f\u0131r.<\/p>\n<\/li>\n<li>\n<p><strong>Kod Karma\u015f\u0131kla\u015ft\u0131rma (Obfuscation)<\/strong><br>Zararl\u0131 kod, imza tabanl\u0131 antivir&uuml;s sistemlerinden ka&ccedil;acak \u015fekilde karma\u015f\u0131kla\u015ft\u0131r\u0131lm\u0131\u015ft\u0131r.<\/p>\n<\/li>\n<\/ol>\n<p>Sonu&ccedil; olarak kullan\u0131c\u0131 hi&ccedil;bir \u015fey fark etmezken, sald\u0131rgan sistem &uuml;zerinde komut &ccedil;al\u0131\u015ft\u0131rabilir, arka kap\u0131 b\u0131rakabilir veya a\u011f i&ccedil;inde yatay hareket edebilir.<\/p>\n<hr>\n<h2>Neden Unicorn Bu Kadar Tehlikeli?<\/h2>\n<p>Unicorn&rsquo;u tehlikeli yapan \u015fey s\u0131f\u0131r g&uuml;n a&ccedil;\u0131klar\u0131 de\u011fil; <strong>insan davran\u0131\u015f\u0131n\u0131 hedef almas\u0131d\u0131r<\/strong>.<\/p>\n<ul>\n<li>\n<p>Office dosyalar\u0131 h&acirc;l&acirc; en &ccedil;ok g&uuml;venilen dosya t&uuml;rleri aras\u0131nda<\/p>\n<\/li>\n<li>\n<p>PowerShell, Windows&rsquo;un yerle\u015fik ve g&uuml;&ccedil;l&uuml; bir bile\u015feni<\/p>\n<\/li>\n<li>\n<p>Makrolar, bir&ccedil;ok kurumda h&acirc;l&acirc; aktif<\/p>\n<\/li>\n<\/ul>\n<p>Bu &uuml;&ccedil;l&uuml; bir araya geldi\u011finde, sald\u0131r\u0131 <strong>me\u015fru bir i\u015flem gibi<\/strong> g&ouml;r&uuml;n&uuml;r.<\/p>\n<hr>\n<h2>En Zay\u0131f Halka: \u0130nsan Fakt&ouml;r&uuml;<\/h2>\n<p>Teknik &ouml;nlemler ne kadar g&uuml;&ccedil;l&uuml; olursa olsun, sald\u0131r\u0131n\u0131n ilk ad\u0131m\u0131 genellikle ayn\u0131d\u0131r:<\/p>\n<blockquote>\n<p><strong>&ldquo;Kullan\u0131c\u0131 dosyay\u0131 a&ccedil;t\u0131.&rdquo;<\/strong><\/p>\n<\/blockquote>\n<p>Bu nedenle makalelerde ve ger&ccedil;ek vaka analizlerinde tekrar tekrar vurgulanan nokta \u015fudur:<br><strong>En zay\u0131f halka h&acirc;l&acirc; insand\u0131r.<\/strong><\/p>\n<hr>\n<h2>Unicorn ve Benzeri Sald\u0131r\u0131lara Kar\u015f\u0131 Al\u0131nabilecek &Ouml;nlemler<\/h2>\n<h3>1. Kullan\u0131c\u0131 Fark\u0131ndal\u0131k E\u011fitimi<\/h3>\n<ul>\n<li>\n<p>Phishing e-postalar\u0131n\u0131n nas\u0131l ay\u0131rt edilece\u011fi<\/p>\n<\/li>\n<li>\n<p>Makro uyar\u0131lar\u0131n\u0131n neden tehlikeli oldu\u011fu<\/p>\n<\/li>\n<li>\n<p>&ldquo;Acil&rdquo;, &ldquo;fatura&rdquo;, &ldquo;kargo&rdquo; gibi tetikleyici ba\u015fl\u0131klara kar\u015f\u0131 dikkat<\/p>\n<\/li>\n<\/ul>\n<p>E\u011fitim, tek seferlik de\u011fil <strong>s&uuml;rekli<\/strong> olmal\u0131d\u0131r.<\/p>\n<hr>\n<h3>&nbsp;2. Office Makrolar\u0131n\u0131 Devre D\u0131\u015f\u0131 B\u0131rakma<\/h3>\n<p>Kurumsal ortamlarda:<\/p>\n<ul>\n<li>\n<p>\u0130nternetten gelen Office belgelerinde makrolar\u0131 varsay\u0131lan olarak kapatmak<\/p>\n<\/li>\n<li>\n<p>Sadece imzal\u0131 ve g&uuml;venilir makrolara izin vermek<\/p>\n<\/li>\n<\/ul>\n<p>Bu ad\u0131m, Unicorn gibi ara&ccedil;lar\u0131n etkisini ciddi &ouml;l&ccedil;&uuml;de azalt\u0131r.<\/p>\n<hr>\n<h3>&nbsp;3. Uygulama Kontrol&uuml; (AppLocker vb.)<\/h3>\n<ul>\n<li>\n<p>Yetkisiz PowerShell &ccedil;al\u0131\u015ft\u0131r\u0131lmas\u0131n\u0131 k\u0131s\u0131tlamak<\/p>\n<\/li>\n<li>\n<p>Kullan\u0131c\u0131 ba\u011flam\u0131nda script &ccedil;al\u0131\u015ft\u0131rmay\u0131 s\u0131n\u0131rlamak<\/p>\n<\/li>\n<li>\n<p>Sadece onayl\u0131 uygulamalara izin vermek<\/p>\n<\/li>\n<\/ul>\n<p>Bu yakla\u015f\u0131m, sald\u0131r\u0131 ba\u015far\u0131l\u0131 olsa bile <strong>etki alan\u0131n\u0131 daralt\u0131r<\/strong>.<\/p>\n<hr>\n<h2>Teknoloji De\u011fil, Al\u0131\u015fkanl\u0131klar Hedefte<\/h2>\n<p>Unicorn &ouml;rne\u011fi bize \u015funu net \u015fekilde g&ouml;steriyor:<\/p>\n<blockquote>\n<p><strong>Siber sald\u0131r\u0131lar art\u0131k sistemi de\u011fil, kullan\u0131c\u0131y\u0131 hack&rsquo;liyor.<\/strong><\/p>\n<\/blockquote>\n<p>G&uuml;venlik;<\/p>\n<ul>\n<li>\n<p>Sadece firewall,<\/p>\n<\/li>\n<li>\n<p>Sadece antivir&uuml;s,<\/p>\n<\/li>\n<li>\n<p>Sadece EDR de\u011fildir.<\/p>\n<\/li>\n<\/ul>\n<p>Ger&ccedil;ek g&uuml;venlik, <strong>fark\u0131ndal\u0131k + politika + teknik kontrol<\/strong> birle\u015fimidir.<\/p>\n<p>Makrolar, PowerShell ve insan davran\u0131\u015f\u0131 bir araya geldi\u011finde olu\u015fan bu sessiz tehdidi ciddiye almak, bug&uuml;n al\u0131nabilecek en do\u011fru kararlardan biridir.<\/p>","excerpt":"","created_at":"2025-11-28 09:07:55","updated_at":"2026-09-07 20:39:28","category_id":15,"view_count":470,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-11-28 06:07:00","featured_image":"9f66b0a47cf70f8d4b8e4eafd7b09a07.png","slug":"unicorn-sosyal-muhendisligin-sihirli-araci","category_name":"Bilgi G\u00fcvenligi","category_slug":"bilgi-guvenligi","category_color":"#894376"},{"id":354,"title":"Web Kimlik Do\u011frulama Temelleri Nas\u0131l \u00c7al\u0131\u015f\u0131r","content":"<p>&nbsp;<\/p>\n<p><iframe style=\"width: 786px; height: 441px;\" src=\"https:\/\/www.youtube.com\/embed\/TMiLTv7BSXw\" width=\"786\" height=\"441\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<p>&nbsp;<\/p>\n<h1>Bir Web Sitesi Seni Nas\u0131l &ldquo;Hat\u0131rlar&rdquo;?<\/h1>\n<h2>Cookie, Session ve Token Mant\u0131\u011f\u0131n\u0131 Basit&ccedil;e Anlayal\u0131m<\/h2>\n<p>&nbsp;<\/p>\n<p>Bir web sitesine giri\u015f yapt\u0131\u011f\u0131nda seni <strong>isminle kar\u015f\u0131layan<\/strong>,<br>sepetteki &uuml;r&uuml;nleri <strong>kald\u0131\u011f\u0131n yerden g&ouml;steren<\/strong><br>veya tekrar \u015fifre sormadan gezmene izin veren sistem hi&ccedil; dikkatini &ccedil;ekti mi?<\/p>\n<blockquote>\n<p>&ldquo;Bu site beni nas\u0131l hat\u0131rl\u0131yor?&rdquo;<br>&ldquo;Taray\u0131c\u0131y\u0131 kapatsam bile neden h&acirc;l&acirc; giri\u015f yapm\u0131\u015f g&ouml;r&uuml;n&uuml;yorum?&rdquo;<br>&ldquo;G&uuml;venli bir oturum nas\u0131l sa\u011flan\u0131yor?&rdquo;<\/p>\n<\/blockquote>\n<p>Bu sorular\u0131n cevab\u0131 genellikle <strong>&uuml;&ccedil; temel yap\u0131n\u0131n<\/strong> i&ccedil;inde gizlidir:<\/p>\n<p><strong>Cookie<\/strong><br><strong>Session<\/strong><br><strong>Token<\/strong><\/p>\n<p>Bu yaz\u0131da bu kavramlar\u0131 <strong>insani, sade ve SEO uyumlu<\/strong> bir dille;<br>karma\u015faya girmeden ama mant\u0131\u011f\u0131n\u0131 ka&ccedil;\u0131rmadan anlataca\u011f\u0131z.<\/p>\n<hr>\n<h2>Web Neden Seni Hat\u0131rlamak Zorunda?<\/h2>\n<p>HTTP protokol&uuml;n&uuml;n temel bir &ouml;zelli\u011fi vard\u0131r:<\/p>\n<blockquote>\n<p><strong>Stateless<\/strong> (durumsuzdur)<\/p>\n<\/blockquote>\n<p>Yani:<\/p>\n<ul>\n<li>\n<p>Her istek ba\u011f\u0131ms\u0131zd\u0131r<\/p>\n<\/li>\n<li>\n<p>Sunucu, bir &ouml;nceki iste\u011fi &ldquo;hat\u0131rlamaz&rdquo;<\/p>\n<\/li>\n<\/ul>\n<p>Bu y&uuml;zden taray\u0131c\u0131 ile sunucu aras\u0131nda bir <strong>haf\u0131za mekanizmas\u0131<\/strong> gerekir.<br>\u0130\u015fte Cookie, Session ve Token tam olarak bu bo\u015flu\u011fu doldurur.<\/p>\n<hr>\n<h2>Cookie (&Ccedil;erez) Nedir?<\/h2>\n<p><strong>Cookie<\/strong>, taray\u0131c\u0131da saklanan k&uuml;&ccedil;&uuml;k veri par&ccedil;ac\u0131klar\u0131d\u0131r.<\/p>\n<ul>\n<li>\n<p>Kullan\u0131c\u0131 taraf\u0131nda tutulur<\/p>\n<\/li>\n<li>\n<p>Her istekte sunucuya otomatik g&ouml;nderilir<\/p>\n<\/li>\n<li>\n<p>Genellikle anahtar&ndash;de\u011fer (key=value) yap\u0131s\u0131ndad\u0131r<\/p>\n<\/li>\n<\/ul>\n<h3>Ne \u0130\u015fe Yarar?<\/h3>\n<ul>\n<li>\n<p>Oturum bilgisi ta\u015f\u0131mak<\/p>\n<\/li>\n<li>\n<p>Kullan\u0131c\u0131 tercihlerini hat\u0131rlamak<\/p>\n<\/li>\n<li>\n<p>Dil, tema, sepet bilgisi saklamak<\/p>\n<\/li>\n<\/ul>\n<h3>Avantajlar\u0131<\/h3>\n<p>\u2714 Basit<br>\u2714 H\u0131zl\u0131<br>\u2714 Taray\u0131c\u0131 taraf\u0131ndan otomatik y&ouml;netilir<\/p>\n<h3>Riskleri<\/h3>\n<p>\u26a0\ufe0f XSS sald\u0131r\u0131lar\u0131nda &ccedil;al\u0131nabilir<br>\u26a0\ufe0f Yanl\u0131\u015f yap\u0131land\u0131r\u0131l\u0131rsa g&uuml;venlik a&ccedil;\u0131\u011f\u0131 olu\u015fturur<\/p>\n<blockquote>\n<p><strong>Not:<\/strong><br>Cookie i&ccedil;ine <strong>\u015fifre veya hassas veri<\/strong> koymak ciddi bir hatad\u0131r.<\/p>\n<\/blockquote>\n<hr>\n<h2>Session (Oturum) Nedir?<\/h2>\n<p><img src=\"https:\/\/images.wondershare.com\/edrawmax\/templates\/communication-diagram-for-login.png?utm_source=chatgpt.com\" alt=\"Image\" width=\"716\" height=\"412\"><\/p>\n<p><strong>Session<\/strong>, kullan\u0131c\u0131n\u0131n kimli\u011finin <strong>sunucu taraf\u0131nda<\/strong> tutuldu\u011fu yap\u0131d\u0131r.<\/p>\n<p>&Ccedil;al\u0131\u015fma mant\u0131\u011f\u0131 \u015f&ouml;yledir:<\/p>\n<ol>\n<li>\n<p>Kullan\u0131c\u0131 giri\u015f yapar<\/p>\n<\/li>\n<li>\n<p>Sunucu bir <strong>Session ID<\/strong> &uuml;retir<\/p>\n<\/li>\n<li>\n<p>Bu ID, kullan\u0131c\u0131ya cookie olarak g&ouml;nderilir<\/p>\n<\/li>\n<li>\n<p>As\u0131l bilgiler sunucuda saklan\u0131r<\/p>\n<\/li>\n<\/ol>\n<p>Yani:<\/p>\n<ul>\n<li>\n<p>Cookie &rarr; Sadece bir anahtar<\/p>\n<\/li>\n<li>\n<p>Session &rarr; Ger&ccedil;ek verinin kendisi<\/p>\n<\/li>\n<\/ul>\n<h3>Avantajlar\u0131<\/h3>\n<p>\u2714 Daha g&uuml;venlidir<br>\u2714 Hassas veri taray\u0131c\u0131da tutulmaz<\/p>\n<h3>Dezavantajlar\u0131<\/h3>\n<p>Sunucu y&uuml;k&uuml; olu\u015fturur<br>Da\u011f\u0131t\u0131k sistemlerde &ouml;l&ccedil;ekleme zordur<\/p>\n<p>Session yap\u0131s\u0131, &ouml;zellikle <strong>klasik PHP \/ ASP.NET \/ Java<\/strong> tabanl\u0131 uygulamalarda &ccedil;ok yayg\u0131nd\u0131r.<\/p>\n<hr>\n<h2>Token Nedir?<\/h2>\n<p><img src=\"https:\/\/media.geeksforgeeks.org\/wp-content\/uploads\/20240129170011\/Low-Level-Design-%281%29.png?utm_source=chatgpt.com\" alt=\"Image\" width=\"610\" height=\"305\"><\/p>\n<p><strong>Token<\/strong>, modern web ve mobil uygulamalar\u0131n vazge&ccedil;ilmezidir.<\/p>\n<p>En yayg\u0131n &ouml;rnek:<\/p>\n<ul>\n<li>\n<p><strong>JWT (JSON Web Token)<\/strong><\/p>\n<\/li>\n<\/ul>\n<h3>Nas\u0131l &Ccedil;al\u0131\u015f\u0131r?<\/h3>\n<ul>\n<li>\n<p>Kullan\u0131c\u0131 giri\u015f yapar<\/p>\n<\/li>\n<li>\n<p>Sunucu imzal\u0131 bir token &uuml;retir<\/p>\n<\/li>\n<li>\n<p>Token istemciye verilir<\/p>\n<\/li>\n<li>\n<p>Her istekte token g&ouml;nderilir<\/p>\n<\/li>\n<li>\n<p>Sunucu token&rsquo;\u0131 do\u011frular<\/p>\n<\/li>\n<\/ul>\n<p>Burada kritik nokta:<\/p>\n<blockquote>\n<p>Sunucu genellikle <strong>oturum saklamaz<\/strong>, sadece do\u011frular.<\/p>\n<\/blockquote>\n<h3>Avantajlar\u0131<\/h3>\n<p>\u2714 Stateless (&ouml;l&ccedil;eklenebilir)<br>\u2714 API ve mobil uygulamalar i&ccedil;in ideal<br>\u2714 Mikroservis mimarisine uygun<\/p>\n<h3>Riskleri<\/h3>\n<p>\u26a0\ufe0f &Ccedil;al\u0131n\u0131rsa s&uuml;resi bitene kadar ge&ccedil;erlidir<br>\u26a0\ufe0f G&uuml;venli saklanmazsa b&uuml;y&uuml;k risk olu\u015fturur<\/p>\n<hr>\n<h2>Cookie &ndash; Session &ndash; Token Kar\u015f\u0131la\u015ft\u0131rmas\u0131<\/h2>\n<p><strong><img src=\"https:\/\/miro.medium.com\/v2\/resize%3Afit%3A2000\/1%2AKzrxQ5xubPBVYkSIMnixAA.jpeg?utm_source=chatgpt.com\" alt=\"Image\" width=\"609\" height=\"658\"><\/strong><\/p>\n<table>\n<thead>\n<tr>\n<th>&Ouml;zellik<\/th>\n<th>Cookie<\/th>\n<th>Session<\/th>\n<th>Token<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Nerede tutulur<\/td>\n<td>Taray\u0131c\u0131<\/td>\n<td>Sunucu<\/td>\n<td>\u0130stemci<\/td>\n<\/tr>\n<tr>\n<td>G&uuml;venlik<\/td>\n<td>D&uuml;\u015f&uuml;k-Orta<\/td>\n<td>Y&uuml;ksek<\/td>\n<td>Yap\u0131land\u0131rmaya ba\u011fl\u0131<\/td>\n<\/tr>\n<tr>\n<td>&Ouml;l&ccedil;eklenebilirlik<\/td>\n<td>\u0130yi<\/td>\n<td>Zay\u0131f<\/td>\n<td>&Ccedil;ok iyi<\/td>\n<\/tr>\n<tr>\n<td>API\/Mobil uyum<\/td>\n<td>Zay\u0131f<\/td>\n<td>Zay\u0131f<\/td>\n<td>M&uuml;kemmel<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<h2>Hangisi Daha G&uuml;venli?<\/h2>\n<p>Bu sorunun tek bir cevab\u0131 yok.<\/p>\n<p>\ud83d\udd10 <strong>Do\u011fru cevap \u015fudur:<\/strong><\/p>\n<blockquote>\n<p>Kullan\u0131m senaryosuna g&ouml;re do\u011fru yap\u0131land\u0131r\u0131lm\u0131\u015f olan.<\/p>\n<\/blockquote>\n<ul>\n<li>\n<p>K&uuml;&ccedil;&uuml;k bir web sitesi &rarr; Session<\/p>\n<\/li>\n<li>\n<p>Kurumsal web uygulamas\u0131 &rarr; Session + Secure Cookie<\/p>\n<\/li>\n<li>\n<p>Mobil &amp; API tabanl\u0131 sistem &rarr; Token (JWT)<\/p>\n<\/li>\n<\/ul>\n<p>Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f bir Token,<br>do\u011fru yap\u0131land\u0131r\u0131lm\u0131\u015f bir Session&rsquo;dan <strong>daha g&uuml;vensiz<\/strong> olabilir.<\/p>\n<p><img src=\"https:\/\/techdocs.broadcom.com\/content\/dam\/broadcom\/techdocs\/us\/en\/assets\/docops\/aa91\/ca_strong_authentication_system_architecture.png?utm_source=chatgpt.com\" alt=\"Image\" width=\"660\" height=\"322\"><\/p>\n<hr>\n<h2>En B&uuml;y&uuml;k Hata: Mant\u0131\u011f\u0131 Bilmeden Kullanmak<\/h2>\n<p>Bir&ccedil;ok g&uuml;venlik a&ccedil;\u0131\u011f\u0131 \u015furadan &ccedil;\u0131kar:<\/p>\n<ul>\n<li>\n<p>Cookie&rsquo;ye hassas veri koymak<\/p>\n<\/li>\n<li>\n<p>Session ID&rsquo;yi \u015fifrelenmemi\u015f iletmek<\/p>\n<\/li>\n<li>\n<p>Token&rsquo;\u0131 localStorage&rsquo;da korumas\u0131z tutmak<\/p>\n<\/li>\n<\/ul>\n<p>Oysa sorun teknoloji de\u011fil, <strong>bilin&ccedil;tir<\/strong>.<\/p>\n<hr>\n<h2>Sonu&ccedil;: Web Seni Hat\u0131rl\u0131yorsa, Bir Sebebi Var<\/h2>\n<p>Bir web sitesi seni hat\u0131rl\u0131yorsa:<\/p>\n<ul>\n<li>\n<p>Ya taray\u0131c\u0131nda bir <strong>cookie<\/strong> vard\u0131r<\/p>\n<\/li>\n<li>\n<p>Ya sunucuda sana ait bir <strong>session<\/strong> tutuluyordur<\/p>\n<\/li>\n<li>\n<p>Ya da cebinde (istemcinde) bir <strong>token<\/strong> ta\u015f\u0131yorsundur<\/p>\n<\/li>\n<\/ul>\n<p>Ger&ccedil;ek g&uuml;venlik, bu yap\u0131lar\u0131n <strong>nas\u0131l &ccedil;al\u0131\u015ft\u0131\u011f\u0131n\u0131 bilmekle<\/strong> ba\u015flar.<\/p>\n<blockquote>\n<p><strong>Web g&uuml;venli\u011finde en b&uuml;y&uuml;k risk,<br>&ldquo;&ccedil;al\u0131\u015f\u0131yor&rdquo; diye dokunulmayan sistemlerdir.<\/strong><\/p>\n<\/blockquote>\n<p>Cookie, Session ve Token&rsquo;\u0131 anlamak;<br>sadece geli\u015ftiriciler i&ccedil;in de\u011fil,<br>dijital d&uuml;nyada bilin&ccedil;li olmak isteyen herkes i&ccedil;in temel bir ad\u0131md\u0131r.<\/p>","excerpt":"","created_at":"2025-11-28 09:06:56","updated_at":"2026-09-07 14:34:50","category_id":15,"view_count":472,"reading_time":5,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-11-28 06:06:00","featured_image":"0cefb24017e2cc4bb04b2d2b24503386.png","slug":"web-kimlik-dogrulama-temelleri-nasil-calisir","category_name":"Bilgi G\u00fcvenligi","category_slug":"bilgi-guvenligi","category_color":"#894376"}]