Alert: ‘Effluence’ Backdoor Persists Despite Patching Atlassian Confluence Servers

November 10, 2023 at 04:03AM Researchers have discovered a stealthy backdoor called Effluence that exploits a security flaw in Atlassian Confluence Data Center and Server. The backdoor allows attackers to move laterally within the network and exfiltrate data. It can be accessed remotely without authenticating to Confluence. The attack chain involves exploiting two critical bugs … Read more

Atlassian Warns of New Critical Confluence Vulnerability Threatening Data Loss

October 31, 2023 at 08:18AM Atlassian has discovered a critical security flaw in Confluence Data Center and Server that could lead to significant data loss. The vulnerability is rated 9.1 out of 10 in severity and affects all versions of Confluence. Atlassian recommends applying the necessary patches and disconnecting public internet access to vulnerable instances. … Read more