Atlassian's Response to the FireEye and SolarWinds Breaches

[#1]

On December 8, security vendor FireEye disclosed that “a highly sophisticated state-sponsored adversary stole FireEye Red Team tools” and then on December 13, FireEye uncovered “a supply chain attack trojanizing SolarWinds Orion business software updates in order to distribute malware.“

We have conducted an investigation and have not identified any evidence that we have been affected by the breach of FireEye and the theft of their Red Team tools, or the supply chain compromise of SolarWinds and their Orion software platform.

Atlassian’s network is not connected to FireEye’s network in any way and we do not use the SolarWinds Orion software platform in our environment.

We will continue to monitor the situation as it evolves and provide updates as necessary.

[pas.argenio]

Unfortunately, many practices that lead to user convenience, like cookies, can also present a security hole.