PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2022-26134] Zero-Day Exploitation of Atlassian Confluence

volexity.com | vulnerability | CVE-2022-26134 | #zero-day | #vulnerability-research | #threat-intelligence | #apt | #exploit | #dfir | #0day | #confluence | #edge-device
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

UPDATE: On June 3, 2022, Atlassian updated its security advisory with new information regarding a fix for Confluence Server and Data Center to address CVE-2022-26134. Users are encouraged to update immediately to […]
CVE
CVE-2022-26134
Published
Collected

Related coverage

vulnerability · hackerone.com
Severe Confluence Vulnerability is an Active Threat (CVE-2022-26134)
An unauthenticated RCE zero-day in Atlassian Confluence (CVE-2022-26134) was exploited in the wild before disclosure, with attack IPs surging past 800 within days. Patching should be immediate.
vulnerability · volexity.com
DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach
Volexity frequently works with individuals and organizations heavily targeted by sophisticated, motivated, and well-equipped threat actors from around the world. Some of these individuals or organizations are attacked infrequently or […]
vulnerability · volexity.com
Operation EmailThief: Active Exploitation of Zero-day XSS Vulnerability in Zimbra
[UPDATE] On February 4, 2022, Zimbra provided an update regarding this zero-day exploit vulnerability and reported that a hotfix for 8.8.15 P30 would be available on February 5, 2022. This vulnerability […]
vulnerability · volexity.com
Virtual Private Keylogging: Cisco Web VPNs Leveraged for Access and Persistence
In the world of information security, there is never a dull moment. Part of the fun of working in this space is that you always get to see attackers do […]
vulnerability · volexity.com
APT Group Wekby Leveraging Adobe Flash Exploit (CVE-2015-5119)
As if the recent breach and subsequent public data dump involving the Italian company Hacking Team wasn’t bad enough, it all gets just a little bit worse. Emerging from the […]
research · volexity.com
Afghan Government Compromise: Browser Beware
Visiting a wide-ranging number of websites associated with the Government of Afghanistan may yield visitors an unwanted surprise. For the second time this year, malicious code has surfaced on, cdn.afghanistan.af, […]
Back