{"id":1191310,"date":"2023-10-11T16:40:00","date_gmt":"2023-10-11T20:40:00","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=1191310"},"modified":"2023-10-11T16:40:00","modified_gmt":"2023-10-11T20:40:00","slug":"state-backed-hackers-are-exploiting-new-critical-atlassian-zero-day-bug","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=1191310","title":{"rendered":"State-backed Hackers Are Exploiting New 'Critical' Atlassian Zero-Day Bug"},"content":{"rendered":"

Microsoft says Chinese state-backed hackers are exploiting a “critical”-rated zero-day vulnerability in Atlassian software to break into customer systems. From a report: The technology giant’s threat intelligence team said in a post on X, formerly Twitter, that it has observed a nation-state threat actor it calls Storm-0062 exploiting a recently disclosed critical flaw in Atlassian Confluence Data Center and Server. Microsoft has previously identified Storm-0062 as a China-based state-sponsored hacker. <\/p>\n

Microsoft said it observed in-the-wild abuse of the maximum rated 10.0 vulnerability, tracked as CVE-2023-22515, since September 14, some three weeks before Atlassian’s public disclosure on October 4. A bug is considered a zero-day when the vendor — in this case Atlassian — has zero time to fix the bug before it is exploited. Atlassian updated its advisory this week to confirm it has “evidence to suggest that a known nation-state actor” is exploiting the bug, which the company says could allow a remote attacker to create unauthorized administrator accounts to access Confluence servers. Atlassian’s Confluence is a widely popular collaborative wiki system used by corporations around the world to organize and share work.<\/p>\n

\n

\n<\/a>
\n<\/a><\/p>\n<\/div>\n

Read more of this story<\/a> at Slashdot.<\/p>\n


\n
\nSource: Slashdot – State-backed Hackers Are Exploiting New ‘Critical’ Atlassian Zero-Day Bug<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Microsoft says Chinese state-backed hackers are exploiting a “critical”-rated zero-day vulnerability in Atlassian software to break into customer systems. From a report: The technology giant’s threat intelligence team said in a post on X, formerly Twitter, that it has observed … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1191311,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[101,110],"tags":[100],"class_list":["post-1191310","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-slashdot","category-unfiltered-rss","tag-slashdot"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1191310","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1191310"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1191310\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/media\/1191311"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1191310"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1191310"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1191310"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}