CVE-2023-22515: Atlassian Confluence Vulnerability
An N-day vulnerability in Atlassian Confluence used by QTFY.
Tag: Atlassian
Microsoft Copilot Personal Flaws Enable One-Click Data Exfiltration via CoSnitch
Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal, collectively named CoSnitch, that could allow a single click on a…
CVE-2022-26134: Atlassian Confluence OGNL Injection
A critical OGNL injection vulnerability in Atlassian Confluence, exploited by Evooo1Bot.
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Cybersecurity researchers have uncovered a previously undocumented Linux botnet family named Evooo1Bot, which is derived from the Mirai botnet source code and…
Atlassian Rovo Flaws Could Exfiltrate Jira and Confluence Data to Attackers
Two security firms have independently discovered that Atlassian's Rovo AI assistant can be tricked into sending sensitive Jira and Confluence data to…
Atlassian: Rovo Assistant Security Fix
Atlassian is the vendor of the Rovo assistant, which was subject to a one-click attack (RovoBlast) disclosed by Varonis. Atlassian fixed the…
Confluence: Team Collaboration and Documentation
Confluence is Atlassian's team collaboration and documentation platform. The RovoBlast attack demonstrated exfiltration of private API keys from Confluence, highlighting risks to…