Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s…
An N-day vulnerability in Atlassian Confluence used by QTFY.
Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal, collectively named CoSnitch, that could allow a single click on a…
A critical OGNL injection vulnerability in Atlassian Confluence, exploited by Evooo1Bot.
Cybersecurity researchers have uncovered a previously undocumented Linux botnet family named Evooo1Bot, which is derived from the Mirai botnet source code and…
Two security firms have independently discovered that Atlassian's Rovo AI assistant can be tricked into sending sensitive Jira and Confluence data to…
Atlassian is the vendor of the Rovo assistant, which was subject to a one-click attack (RovoBlast) disclosed by Varonis. Atlassian fixed the…
Confluence is Atlassian's team collaboration and documentation platform. The RovoBlast attack demonstrated exfiltration of private API keys from Confluence, highlighting risks to…