Discussions
-
SECURITY ALERT: Phishing Emails Targeting Atlassian Customers
We’ve received reports of a sophisticated phishing campaign targeting Atlassian customers. These malicious emails use forged email headers to appear legitimate and seek to obtain user credentials by linking victims to phishing sites that closely resemble Atlassian domains. These can be hard to spot, so we ask that…
-
Atlassian update regarding Cloudflare November 2023 incident
On February 1, Cloudflare has concluded its investigation of an incident that occurred in November 2023, during which a threat actor gained access to Cloudflare’s Atlassian Data Center instances. This was not because of any vulnerability in Atlassian software but rather was caused by a threat actor using Cloudflare’s…
-
Atlassian response to claims regarding session tokens/cookies vulnerability
On December 7, 2022 (UTC), Atlassian's security team opened an investigation into unauthorized access of a customer's Cloud account. On December 8, we concluded that the bad actor used session tokens, stolen by a piece of malicious software on the customer's computer, to facilitate this access. We promptly invalidated the…
-
Atlassian's Response to the LAPSUS$ Okta Incident
On March 22, identity and access management company Okta disclosed the account compromise of a third-party customer support engineer that occurred in January 2022. LAPSUS$ claimed responsibility for the hack and in an attempt to substantiate their claims, released screenshots of tools that would only be available to Okta…
