⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, Shiny Hunters Arrest, AI-Fooling Malware and More

Summary: Threat actors began exploiting a critical arbitrary file access flaw in Atlassian Data Center products, tracked as CVE-2026-21589 with a CVSS score of 9.3, affecting Bitbucket, Confluence, Jira Service Management, Jira Software, Bamboo, Crowd, Crucible, and Fisheye. Exploitation against watchTowr's honeypot network started two hours after the firm released additional technical details of the vulnerability.
Bottom line: Two hours between published technical details and exploitation in the wild leaves little room for a security team to read a warning, test a patch, and deploy it across every affected Atlassian Data Center product.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-64393 CVE-2026-102255 CVE-2026-102404 CVE-2026-102406 CVE-2026-102413 CVE-2026-103008 CVE-2026-104711 CVE-2026-104712 CVE-2026-104713 CVE-2026-104714 CVE-2026-105133 CVE-2026-105134 CVE-2026-105192 CVE-2026-106197 CVE-2026-106347 CVE-2026-106358 CVE-2026-106382 CVE-2026-18397 CVE-2026-20328 CVE-2026-21589 CVE-2026-32740 CVE-2026-58069 CVE-2026-59265 CVE-2026-63277 CVE-2026-76268 CVE-2026-76281 CVE-2026-76282 CVE-2026-76284 CVE-2026-76454 CVE-2026-76455 CVE-2026-76459 CVE-2026-76464 CVE-2026-76465 CVE-2026-76471 CVE-2026-76480 CVE-2026-76482 CVE-2026-76483 CVE-2026-76485 CVE-2026-76486 CVE-2026-76498 CVE-2026-76499 CVE-2026-76500 CVE-2026-76501 CVE-2026-84388 CVE-2026-85097 CVE-2026-86360 CVE-2026-86361 CVE-2026-86362 CVE-2026-91140 CVE-2026-93355 CVE-2026-93836 CVE-2026-94504 CVE-2026-96940
Related: Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor Cyber Risks · Nov 10, 2026
Libre Office and Open Office Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings Cyber Risks ·
Attackers Exploit CVSS 10.0 Bricksforge Word Press Flaw Enabling Unauthenticated RCE Cyber Risks ·