Discussions
-
Atlassian is now TISAX Certified!
Atlassian is Level 2 Trusted Information Security Assessment Exchange (TISAX) certified! This is a great achievement to enable our automotive clients in Deutschland (Germany) (D), Austria (A), and Confœderatio Helvetica (Switzerland) (CH) (also known as DACH region) to use our cloud product offerings. What is TISAX? TISAX…
-
Action Required: RCE Vulnerabilities Identified in Multiple Products
Hello community, We have discovered four critical vulnerabilities impacting customers of the products listed below. All four vulnerabilities carry a critical CVSS score of 9.0 or higher, and customers must take immediate action to protect their instances. Please carefully review all of the Critical Security Advisories…
-
Atlassian is now part of the Open Cybersecurity Schema Framework!
We’re excited to be a part of the Open Cybersecurity Schema Framework, which is now generally available for all security teams to adopt! The OCSF is the first vendor-agnostic, open-source initiative of its kind led by Splunk, Amazon Web Services (AWS), and IBM. By using the framework, security teams can save loads of time…
-
Growing our Compliance Resource Center
TL;DR: As of the Atlassian Trust team has expanded our :trust: Compliance Resource Center with new compliance attestations! We have added 5 new guidances that support customers in Financial services, Healthcare and many others industries that lean on regulatory legislation and industry frameworks to help build trust for…
-
NOV. 6 UPDATE: Confluence Data Center and Server security advisory CVE-2023-22518
Hello Community, 06 Nov 2023 UPDATE As part of Atlassian's ongoing monitoring and investigation of this CVE, we observed several active exploits and reports of threat actors using ransomware. We have escalated CVE-2023-22518 from CVSS 9.1 to 10, the highest critical rating, due to the change in the scope of the attack.…
-
Atlassian Response: Confluence Data Center and Server security advisory CVE-2023-22515
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances. Atlassian…
-
Announcement of FINMA (Financial Market Supervisory Authority; Switzerland) Guidance
Atlassian’s Trust team now have now completed our response for FINMA (Financial Market Supervisory Authority; Switzerland) Guidance for our Cloud products. What is FINMA? The Swiss Financial Market Supervisory Authority (FINMA) oversees a number of financial institutions including banks, insurance companies,…
-
New additions to our Compliance Resource Center!
Atlassian’s Trust team now have now completed for three new attestations: * APRA Prudential Standard CPS 234 * NCSC - UK Cloud Security * Section 889 What is APRA Prudential Standard CPS 234? The Australian Prudential Regulation Authority (APRA) oversees a number of financial institutions in Australia. Recognizing the…
-
We reached 1000 posts - Congratulations!
What a year 2022 has been! As we have seen the world open up again, our connectedness has grown more. Here at Atlassian, we value togetherness and community, and are proud and honoured we can continue to support our customers and community groups. We wanted to thank our amazing community members who continue to contribute,…
-
Atlassian's Response to Log4j (CVE-2021-44228)
On December 9, Atlassian became aware of the vulnerability CVE-2021-44228 - Log4j. Impact on Cloud Products This vulnerability has been mitigated for all Atlassian cloud products previously using vulnerable versions of Log4j. To date, our analysis has not identified compromise of Atlassian systems or customer data prior to…
-
Announcement and Update of Brazil Privacy Laws
The Lei Geral de Proteção de Dados (LGPD) is a new Brazilian privacy law that went into effect in September 2020, and regulates the collection, use, processing, storage, and transfer of personal data of Brazil data subjects. Like the GDPR, the LGPD requires companies to implement technical and organizational security…
-
We did it! Atlassian wins 2022 ARN Innovation Awards
Atlassian has triumphed once again; winning another industry award, but you’re probably wondering, why is this a big deal? Because the Atlassian Security team won, that's why! It was a BIG day for the #TEAM! Atlassian is officially an ARN Innovation Awards 2022 winner in the Vendor Innovation category for our Security…
-
Event: Engineering Night - Speciality Engineering Panel Discussion
Join us on Thursday 28 July (4pm - 5pm AEST / 6pm - 7pm NZST) as we talk to Specialty Engineering at Scale at our latest virtual Engineering Nights. 🚀 You'll meet four members in the Atlassian Software Engineering, Machine Learning, Mobile and Security teams, hearing about their journeys to date, top technical knowledge…
-
Update to Atlassian's Shared Responsibilities Whitepaper
Security is a top priority and we must work together to protect your mission-critical applications and make informed decisions. Atlassian products are built with security at the core and our dedicated security teams safeguard your data by monitoring risk and responding quickly. Download the whitepaper for an overview of…
-
Introducing Atlassian's new Compliance Resource Center
TL/DR: The Atlassian Trust Center has new and improved Atlassian Compliance Resource Center! The Atlassian Trust, Security and Engagement team are proud to ship our latest project - the New Atlassian Compliance Resource Center 🥳 What’s new? I’m proud to announce and show you all that the Atlassian Trust Center may look a…
-
Team Sec Con 2021 Call for Speakers: Open Now!
TL,DR: The Call for Speakers for Team Sec Con 2021 is now open! This conference is focused on cloud security, getting started in the cloud security space, and cloud migration journeys. Please read the instructions below and submit your proposal https://forms.gle/6N1zfSSqJ2RQpCfN7 by EOD July 7th PST! Everyone who submits a…
-
Atlassian's Response to the Codecov Breach
On April 15th, Codecov disclosed that “someone had gained unauthorized access to their Bash Uploader script and modified without their permission”. Atlassian immediately began investigating the incident. Though Atlassian uses Codecov tools within our environment for a small number of internal projects, our own…
-
Atlassian’s Security Detections Program won the CSO50 Awards!
The Atlassian Security team is proud to announce that our Security Detections Program won an international industry award! The CSO50 awards recognises organisations from around the world for security projects and initiatives that demonstrate outstanding business value and thought leadership. The CSO Hall of Fame is…
-
Atlassian's Response to the Hezbollah Cyber Attack
On January 28, 2021, a report was published that linked a Hezbollah-affiliated threat actor to intrusions at telco operators and internet service providers in a number of locations globally. A security vendor identified that a malicious actor had been exploiting previously disclosed vulnerabilities in outdated versions of…
-
Security @ Atlassian & Security Practices 2021 Update
Happy New Year to all our amazing customers and community members! We hope you had a restful time off and are back into the swing of 2021! To kick things off in the New Year - we have recently updated our Security Practices located on our Trust Center. We also have a dedicated downloadable white paper version too. It…
-
WiTWA [+] & AustCyber Fireside chat with Atlassian Trust & Security
And she is on the circuit again! Atlassian Trust & Security was approached by Michelle Price (CEO of AustCyber) to do an incredible fireside chat with our very own @Jodie Vlassis during the WiTWA [+] Conference held virtually! The fireside chat topic was about Mentors, sponsors and allies. WiTWA [+] is a Perth-based, not…
-
Atlassian Security & Computing & Commerce Association Panel discussion
Cybersecurity has dominated news headlines over the past few weeks, and has become more prominent due to the COVID pandemic. Whether it is a social media app, leading telecommunications provider or even the Australian Government, it seems like everyone has their fair share of challenges in this area! So, what better time…
-
Atlassian TeamSecCon is live!
Atlassian successfully held our very first virtual #TeamSecCon event! We had a huge audience come and listen to our awesome speakers and panel group! We had exciting key note speakers share their through leadership and advise, as well as an in-depth panel discussion hosting 4 women leaders across various areas of Security!…
-
Atlassian Security Corporate Partnership Update
The Trust & Security team is very excited to announce that Atlassian now hold company corporate partnerships with a range of industry affiliates! We are now officially and formally partnered with a number of industry affiliates. As part of the Trust & Security FY21 initiatives, we are moving towards becoming more present…
-
Atlassian Sustainability Report 2020
Hello Security Trust Community! I am happy to announce we have produced and published the Atlassian Sustainability Report 2020! Privacy & Security have been identified as one of the top areas of focus for the sustainability of the Atlassian Business! Please find the following link below to obtain your copy. Would love to…
-
International Women's Day - Celebrating Women
I was very fortunate to attend ISACA’s Sydney Chapter - International Women's Day conference here in Sydney recently. I was very honoured to represent Atlassian at this event (unfortunately I did not see other fellow Atlassians there) however, I was happy to wave the flag! What an amazing opportunity to be present amongst…