Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Atlassian Confluence has faced multiple critical vulnerabilities, including CVE-2022-26134 and CVE-2023-22515. CVE-2022-26134, published on June 3, 2022, is an unauthenticated remote code execution vulnerability that has been actively exploited. CVE-2023-22515, disclosed on October 4, 2023, allows u...
On October 5, 2026, Atlassian disclosed CVE-2026-21589, a critical arbitrary file access vulnerability with a CVSS score of 9.3. This flaw affects eight self-hosted Data Center products, including Jira Software, Confluence, and Bitbucket, allowing unauthenticated attackers to read specific files wit...
FortiGuard Labs has identified a new Linux botnet named Evooo1Bot, which is based on the Mirai malware framework. This botnet targets internet-facing edge devices, exploiting multiple vulnerabilities since July 2026. The botnet utilizes a loader script at 91.92.40[.]118/wget.sh to download and execu...
The article discusses the fifth volume of AttackIQ’s Ransom Tales series, which simulates the tactics of ransomware families REvil, DarkSide, and BlackMatter. These emulations are designed to help organizations validate their detection and response workflows against the methodologies used by the APT...
