Security News

Australian Organisations Targeted by Phishing Attacks Disguised as Atlassian
2024-09-27 19:28

Mimecast tells TechRepublic that AI may exacerbate phishing risks in Australia.

Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns
2024-08-30 06:12

Threat actors are actively exploiting a now-patched, critical security flaw impacting the Atlassian Confluence Data Center and Confluence Server to conduct illicit cryptocurrency mining on...

Week in review: Atlassian Confluence RCE PoC, new Kali Linux, Patch Tuesday forecast
2024-06-09 08:00

High-risk Atlassian Confluence RCE fixed, PoC availableIf you're self-hosting an Atlassian Confluence Server or Data Center installation, you should upgrade to the latest available version to fix a high-severity RCE flaw for which a PoC and technical details are already public. Kali Linux 2024.2 released: 18 new tools, countless updatesKali Linux 2024.2 is now available.

High-risk Atlassian Confluence RCE fixed, PoC available (CVE-2024-21683)
2024-06-03 09:02

If you're self-hosting an Atlassian Confluence Server or Data Center installation, you should upgrade to the latest available version to fix a high-severity RCE flaw for which a PoC and technical details are already public. Confluence Server and Data Center are software solutions that are widely used in enterprise settings to manage knowledge bases, documentation, and standardize collaboration.

Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware
2024-04-17 10:57

Threat actors are exploiting unpatched Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware. The attacks leverage CVE-2023-22518 (CVSS score: 9.1), a critical security...

Atlassian Releases Fixes for Over 2 Dozen Flaws, Including Critical Bamboo Bug
2024-03-21 03:34

Atlassian has released patches for more than two dozen security flaws, including a critical bug impacting Bamboo Data Center and Server that could be exploited without requiring user interaction....

Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know
2024-02-13 11:10

The Midnight Blizzard and Cloudflare-Atlassian cybersecurity incidents raised alarms about the vulnerabilities inherent in major SaaS platforms. These incidents illustrate the stakes involved in...

Atlassian Confluence Server RCE attacks underway from 600+ IPs
2024-01-22 23:37

More than 600 IP addresses are launching thousands of exploit attempts against CVE-2023-22527 - a critical bug in out-of-date versions of Atlassian Confluence Data Center and Server - according to non-profit security org Shadowserver. The CVE scored a CVSS rating of 10 out of 10, and it affects Confluence Data Center and Server 8 versions released before December 5, 2023 and versions up to 8.4.5.

Hackers start exploiting critical Atlassian Confluence RCE flaw
2024-01-22 13:41

Security researchers are observing exploitation attempts for the CVE-2023-22527 remote code execution flaw vulnerability that affects outdated versions of Atlassian Confluence servers. Atlassian disclosed the security issue last week and noted that it impacts only Confluence versions released before December 5, 2023, along with some out-of-support releases.

Jira down: Atlassian outage affecting multiple cloud services
2024-01-18 09:47

Multiple Atlassian Jira products are experiencing an ongoing outage as of this morning. BleepingComputer can confirm that Jira services are experiencing connection issues since this morning, at least as of 3:45 AM Eastern time.