Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 18 Sep 2023 13:59:43 GMT
———————————————
✏️Title: Classification in Confluence… done right.
———————————————
📎Link: https://medium.com/p/9bd1ab708259
———————————————
Tags: #classification #cybersecurity #atlassian #infosec #confluence

Medium

Classification in Confluence… done right.

We did a thing and built a classification app for Confluence that runs with minimal rights.

10 views17:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Wed, 20 Sep 2023 12:59:46 GMT
———————————————
✏️Title: How to process pentest findings with Jira and Confluence
———————————————
📎Link: https://medium.com/p/e0b496237b22
———————————————
Tags: #cybersecurity #penetration_testing #automation #learn_cybersecurity #atlassian_apps

Medium

How to process pentest findings with Jira and Confluence

If your company runs regular penetration tests then you’ll understand the challenges of processing pentest findings effectively and…

14 views14:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Fri, 06 Oct 2023 07:27:34 GMT
———————————————
✏️Title: CVE-2023–22515 — A Critical Look at the Broken Access Control Vulnerability in Confluence Data…
———————————————
📎Link: https://medium.com/p/1cf7208050a2
———————————————
Tags: #atlassian #hacking #confluence #cve_2023_2215 #vulnerability

Medium

CVE-2023–22515 — A Critical Look at the Broken Access Control Vulnerability in Confluence Data…

Introduction

15 views08:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Fri, 13 Oct 2023 00:14:38 GMT
———————————————
✏️Title: CVE-2023–22515: Confluence Data Center and Server — Broken Access Control Vulnerability
———————————————
📎Link: https://medium.com/p/374c20ba7dc5
———————————————
Tags: #confluence #atlassian #cybersecurity #zero_day #vulnerability

Medium

CVE-2023–22515: Confluence Data Center and Server — Broken Access Control Vulnerability

CVE-2023–22515, has recently come to light, affecting Atlassian’s Confluence Data Center and Server. This article will look into the…

9 views02:01

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Fri, 13 Oct 2023 13:16:49 GMT
———————————————
✏️Title: Naughty Spies! Microsoft Fingers China in Confluence Zero-Day Attacks
———————————————
📎Link: https://medium.com/p/9c111c9e56c6
———————————————
Tags: #atlassian #technews #cybersecurity #technology #china

Medium

Naughty Spies! Microsoft Fingers China in Confluence Zero-Day Attacks

Greetings friends! It’s me, Ash! Here to regale you with another thrilling tale of cybersecurity skulduggery. Grab a tasty beverage and get…

17 views14:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Tue, 17 Oct 2023 12:32:38 GMT
———————————————
✏️Title: How to Fix CVE-2023–22515- A Critical Privilege Escalation Vulnerability in Confluence Data Center…
———————————————
📎Link: https://medium.com/p/a22288da37e6
———————————————
Tags: #atlassian #infosec #cyberattack #cybersecurity

Medium

How to Fix CVE-2023–22515- A Critical Privilege Escalation Vulnerability in Confluence Data Center and Server?

Confluence is a popular wiki-based collaboration tool developed by Atlassian that helps teams to collaborate and share knowledge…

10 views14:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Thu, 19 Oct 2023 16:38:45 GMT
———————————————
✏️Title: Understanding the Critical CVE-2023–22515 in Confluence Server
———————————————
📎Link: https://medium.com/p/c0b59dddbb1c
———————————————
Tags: #cve #cybersecurity #atlassian #hacking #confluence

Medium

Understanding the Critical CVE-2023–22515 in Confluence Server

Atlassian Confluence Server and Confluence Data Center

6 views17:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Sat, 21 Oct 2023 18:39:40 GMT
———————————————
✏️Title: Confluence CVE-2023–22515
———————————————
📎Link: https://medium.com/p/5e9576a18434
———————————————
Tags: #thm_writeup #atlassian #bug_bounty #security #cybersecurity

Medium

Confluence CVE-2023–22515

Exploit CVE-2023–22515 to get admin access to Confluence Server and Data Center editions.

9 views20:02

Daily Writeups

⤷ Title: REST API Security: How to Secure Your REST APIs Effortlessly — miniOrange
════════════════════════
𐀪 Author: Talk to us @miniOrange
════════════════════════
ⴵ Time: Tue, 07 Jan 2025 05:13:20 GMT
════════════════════════
⌗ Tags: #api_automation #cybersecurity #api_integration #atlassian #atlassian_marketplace

Medium

REST API Security: How to Secure Your REST APIs Effortlessly — miniOrange

Discover how to easily safeguard your REST APIsusing the miniOrange Enhanced API Authentication Plugin for Jira. Block unauthorized access…

11 views06:05

Daily Writeups

⤷ Title: How to secure Atlassian Cloud Applications? | MiniOrange
════════════════════════
𐀪 Author: Talk to us @miniOrange
════════════════════════
ⴵ Time: Fri, 31 Jan 2025 05:23:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #2fa #atlassian #atlassian_marketplace #jira

Medium

How to secure Atlassian Cloud Applications? | MiniOrange

Atlassian’s announcement that it would be shutting down its server instances had a significant impact on the customers. Confusion grew…

34 views06:04

Daily Writeups

⤷ Title: High-Severity Privilege Escalation Threat Hits Atlassian Jira Data Center
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:25:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #Atlassian #CVE_2025_22157 #CVSS 7.2 #cybersecurity #Data Center #Jira #Jira Core #Jira Service Management #privilege escalation

Daily CyberSecurity

High-Severity Privilege Escalation Threat Hits Atlassian Jira Data Center

CVE-2025-22157 is a CVSS 7.2 Jira vulnerability allowing privilege escalation. Update Jira Data Center now to prevent unauthorized access.

13 views02:04

Daily Writeups

⤷ Title: Paradox.ai Data Breach: “123456” Password & Nexus Stealer Expose Fortune 500 Clients
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 19 Jul 2025 01:53:59 +0000
════════════════════════
⌗ Tags: #Data Leak #Atlassian #cybersecurity #data breach #McDonald's #McHire #Nexus Stealer #Okta #Paradox.ai #supply chain attack #Weak Password

Penetration Testing Tools

Paradox.ai Data Breach: "123456" Password & Nexus Stealer Expose Fortune 500 Clients

A trivial "123456" password and Nexus Stealer malware on a Paradox.ai employee's device exposed data, potentially impacting Fortune 500 clients like Lockheed Martin.

16 views11:04

Daily Writeups

⤷ Title: Confluence Takeover: How a Simple Support Email Gave Me Full Wiki Access
════════════════════════
𐀪 Author: Vikash Maurya
════════════════════════
ⴵ Time: Mon, 04 Aug 2025 12:38:03 GMT
════════════════════════
⌗ Tags: #bug_bounty #atlassian #penetration_testing #bug_bounty_writeup #hacking

Medium

Confluence Takeover: How a Simple Support Email Gave Me Full Wiki Access

This bug started with a single email. I didn’t expect much when I hit send, but that tiny action opened the doors to an entire company’s…

11 views20:14

Daily Writeups

⤷ Title: Jira Path Traversal Flaw (CVE-2025-22167) Allows Arbitrary File Write on Server/Data Center
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 01:53:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #Atlassian #Critical Vulnerability #CVE_2025_22167 #Jira #Path Traversal

Daily CyberSecurity

Jira Path Traversal Flaw (CVE-2025-22167) Allows Arbitrary File Write on Server/Data Center

Atlassian patched a Critical (CVSS 8.7) Path Traversal flaw (CVE-2025-22167) in Jira Software/Service Management that allows attackers to perform arbitrary file writes. Immediate update is urged.

29 views02:03

Daily Writeups

⤷ Title: Access to ecosystem.atlassian.net — Official Statement from cMd_p1nG
════════════════════════
𐀪 Author: [cMd_p1nG]
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 03:39:40 GMT
════════════════════════
⌗ Tags: #atlassian #ecosystem #news #newsletter #cybersecurity

Medium

Access to ecosystem.atlassian.net — Official Statement from cMd_p1nG

Hello everyone, youre Welcome to the Matrix !!!

13 views04:06

Daily Writeups

⤷ Title: Hackers Use Jira Notifications to Bypass Spam Filters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:12:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Atlassian JIRA #Email Security #Enterprise Security #Keitaro TDS #Notification Abuse #phishing #SaaS Security #social engineering #spam campaign #Trend Micro

Daily CyberSecurity

Hackers Use Jira Notifications to Bypass Spam Filters

Hackers abuse Atlassian Jira notifications to bypass spam filters. Trend Micro warns of scams targeting enterprise users via trusted alerts.

24 views01:04

Daily Writeups

⤷ Title: High-Severity RCE Flaw in Atlassian Bamboo Threatens CI/CD Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 14:05:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Atlassian Bamboo #Bamboo Data Center #CI/CD security #CVE_2026_21570 #cybersecurity #DevSecOps #Patch Alert #rce #Remote Code Execution #Vulnerability

Daily CyberSecurity

High-Severity RCE Flaw in Atlassian Bamboo Threatens CI/CD Environments

Atlassian warns of a high-severity RCE vulnerability (CVE-2026-21570) in Bamboo Data Center. Patch now to secure your CI/CD pipelines from malicious code.

23 views15:04

Daily Writeups

⤷ Title: The Trusted Trap: How Hackers are Weaponizing GitHub and Jira Notifications to Bypass Filters
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:38:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Atlassian #Cisco Talos #cybersecurity #email security #Github #Infosec #Jira #phishing #SaaS Security #Social Engineering

Penetration Testing Tools

The Trusted Trap: How Hackers are Weaponizing GitHub and Jira Notifications to Bypass Filters

A routine missive from a familiar service has long since ceased to be a hallmark of security. Specialists

11 views09:04

Daily Writeups

⤷ Title: The Price of Privacy: Atlassian to Train AI on Jira and Confluence Data Starting August 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 06:21:33 +0000
════════════════════════
⌗ Tags: #Data Leak #AI training #Atlassian #Cloud Security #Confluence #data governance #Data Privacy #Enterprise Software #Jira #Opt_out Policy #Rovo

Daily CyberSecurity

The Price of Privacy: Atlassian to Train AI on Jira and Confluence Data Starting August 2026

Atlassian’s new AI policy arrives Aug 17, 2026. Learn which tiers face mandatory data collection and how to protect your Jira and Confluence content.

12 views07:03

Daily Writeups

⤷ Title: Critical RCE Alert: Bamboo Data Center Vulnerable to OS Command Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 02:51:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Atlassian #Bamboo #CI/CD security #CVE_2026_21571 #DevOps #infosec #os command injection #Patch Alert #rce #Supply Chain

Daily CyberSecurity

Critical RCE Alert: Bamboo Data Center Vulnerable to OS Command Injection

Atlassian Bamboo Data Center hit by critical 9.4 RCE (CVE-2026-21571). Attackers can hijack your build pipeline. Secure your supply chain—patch now!

22 views03:04

About

Blog

Apps

Platform