Atlassian's Response to the Hezbollah Cyber Attack

[#1]

On January 28, 2021, a report was published that linked a Hezbollah-affiliated threat actor to intrusions at telco operators and internet service providers in a number of locations globally.

A security vendor identified that a malicious actor had been exploiting previously disclosed vulnerabilities in outdated versions of Jira Server, Jira Data Center, Confluence Server, and Confluence Data Center.

"Based on our investigation, this was a known vulnerability and we had issued patches two years ago to address this issue. As always, we recommend that our server and data center customers apply the latest security patches as soon as available to receive the latest features and fixes. We also recommend that our customers move to the cloud versions of Atlassian products to receive automatic upgrades and patches."

Adrian Ludwig, Chief Information Security Officer, Atlassian

For further information, please don't hesitate to reach out to our Customer Support.

[Anoop Wilson]

Ca you refer to the exact vulnerability details?

[Martin Scorseze]

 +1, it would be interesting to see the exact vulnerability details. Overall, it's bothering to hear about massive hack attacks, especially on a global scale. Sometimes it seems that hackers are just warming up before something really overwhelming. As I know, there are security companies, such as Websec and their pentest kosten articles, that protect businesses from regular threats. But how to deal with guys who dare to attack Google, Amazon, and so on. I often hear about AI-based security systems, but how about AI-based hacking programs?