Page 7 - Confluence Server News Today

Organizations have been warned about an unpatched Confluence Server zero-day vulnerability (CVE-2022-26134) that has been exploited in the wild by multiple threat groups.

An unpatched remote code execution (RCE) vulnerability in all versions of the popular Confluence collaboration platform can be abused in credential harvesting, cyber espionage, and network backdoor attacks.

Atlassian has issued a critical security warning to users of its Confluence tool after being alerted of an ongoing cyberattack.

Note: There is currently no available patch or fix for the issue described in this blog post. Volexity strongly recommends that all organizations block external access to their Confluence Server instances immediately until an update is provided by Atlassian. Over the Memorial Day weekend in the United States, Volexity conducted an incident response investigation involving two Internet-facing web servers belonging to one of its customers that were running Atlassian Confluence Server software. The...

Remote code execution, with webshells written to disk.

Some IT admins may be in for a scare this weekend as Atlassian has warned of a critical RCE flaw affecting all Confluence Server and Data Center versions. Internet access should be restricted ASAP.

A patch is not yet available, but there are mitigations that can be applied.

Log4Shell, Microsoft Exchange and several patchable flaws top the list of 2021’s most commonly exploited vulnerabilities. The lesson may be a well-worn one: patch systems promptly or work with partners that can.

Microsoft has the dubious honour of taking out eight spots in the top 15 list of routinely exploited vulnerabilities, as customers fail to patch their s...

The cybersecurity authorities of the Five Eyes intelligence alliance detailed what they say are the 15 most common vulnerabilities exploited by malicious actors in 2021.