A recent article from TechTarget Security highlights the rise in exploitation attempts against a critical vulnerability in Atlassian Confluence. The vulnerability, which allows for remote code execution (RCE), was disclosed and patched last week. The flaw affects Atlassian Confluence Data Center and Confluence Server versions between 8.0.x and 8.5.3, and received the highest CVSS score of 10 out of 10. Multiple cybersecurity organizations, including the Shadowserver Foundation, have reported scans and exploitation attempts targeting vulnerable instances of Atlassian Confluence. The organizations have observed thousands of vulnerable instances, with scanning activity originating from Europe, North America, and Asia. However, some cybersecurity vendors have reported that the attempts have been ineffective so far. The SANS Technology Institute’s Internet Storm Center also detected exploitation activity, which has increased since the release of a proof-of-concept exploit. The institute’s research dean, Johannes Ullrich, advised users to patch the flaw immediately and assume that unpatched systems have been compromised. While the recent exploitation attempts indicate a rise in attacks on Atlassian Confluence Data Center and Confluence Server, it is important to note that the vulnerability does not affect Atlassian Cloud sites, limiting the scope of potential high-value targets. Atlassian declined to provide further information on the exploitation activity but emphasized the importance of patching and confirmed that the issue was corrected in a previous release.
Critical Atlassian Confluence vulnerability sparks relentless attacks
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-100.png)
Latest from News
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-8-720x480.jpg)
CISA, FBI, DC3 alert: Watch out for Iran-based ransomware attacks
TLDR: CISA, FBI, and DC3 have issued an alert warning of Iran-based ransomware attacks targeting U.S. organizations. The cyber actors are connected to the
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-46-720x480.jpg)
Are your funds secure with two-factor authentication? Think again
TLDR: Two-factor authentication (2FA) is a crucial tool in preventing cybercrime, but it has its limitations. While 2FA adds an extra layer of security,
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-38-720x480.jpg)
Black Hat 2024 Cybersecurity Pulse Report – Don’t Miss Out
Cybersecurity Pulse Report Summary TLDR: Key Points Cybersecurity Pulse Report Black Hat 2024 Edition provides expert insights into critical security challenges. AI-driven analysis compiles
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-32-720x480.jpg)
Moody’s: Cyber Insurance Competition Rises, Prices Fall
Moody’s Ratings Article Summary TLDR: Key Points: Cyber insurance market poised for growth as cyberattacks increase. New entrants in the market may lead to
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-78-720x480.png)
Gen Alpha: Cybersecurity meets AI in a digital era
TLDR: Generation Alpha, children of Millennials, are growing up in an AI-native world where AI is an integral part of daily life. Cybersecurity in