Why are there an increasing number of Software vulnerabilities recently?

[Amelia Hogg]

I am unsure if this is the right place to raise this question but I am increasingly curious about the rising number of software vulnerabilities being released in the last few months.

Any insight into why this has increased so significantly lately and whether this trend is going to continue?

If anyone is able to shed some light on this I would be interested.

Cheers!

Amelia

[Bill Marriott · Accepted solution]

Hi @Amelia Hogg - We understand that it can be a bit of a process to update our software when new advisories or updates are issued. We also want to make sure we address any known vulnerabilities in our products to ensure your applications are safe and secure. Over the last 18 months, we have increased the amount of people that are dedicated to identifying any vulnerabilities - both internally as well as part of our Bug Bounty (see : https://bugcrowd.com/atlassian) and as a result, we are issuing advisories for vulnerabilities that we feel should be patched as soon as possible. 

Additional details on how we handle Critical Security Vulnerabilities can be found at : https://www.atlassian.com/trust/security/bug-fix-policy and our listing of Critical Advisories can be found at : https://www.atlassian.com/trust/security/advisories

More information on our Vulnerability Management process can be found at : https://www.atlassian.com/trust/security/vulnerability-management and information on how we think about other external security testing can be found at : https://www.atlassian.com/trust/security/security-testing

As an aside, we handle implementation of any updates to our cloud environment and cloud applications on our own without any input or impact to you or your teams!!

Hope that helps, let us know if you have other questions. 

Cheers.

-Bill Marriott

Atlassian Trust & Security

[Fadoua]

Hi @Amelia Hogg 

Let me tag an Atlassian Engineer who can help.

@Daniel Eads Can you please assist?

Best,

Fadoua