Bitbucket

CVE-2026-21589 Exploited in the Wild as Atlassian File Read Flaw Details and PoC Go Public

• Vulnerability Report

CVE-2026-21589 Exploited in the Wild as Atlassian File Read Flaw Details and PoC Go Public

Do Son October 7, 2026 0

CVE-2026-21589 exploitation is underway against Atlassian servers after researchers published arbitrary file read PoC and technical details.

Critical Atlassian Flaw CVE-2026-21589 Exposes Files in Jira, Confluence, Bitbucket and Five More Products

• Vulnerability Report

Critical Atlassian Flaw CVE-2026-21589 Exposes Files in Jira, Confluence, Bitbucket and Five More Products

Do Son October 6, 2026 0

Atlassian Data Center vulnerability CVE-2026-21589 (CVSS 9.3) allows arbitrary file access in Jira, Confluence and Bitbucket. Patch now.

DoS Flaws in Argo CD: Unauthenticated Attackers Can Crash Kubernetes Server with Single Request

• Vulnerability Report

DoS Flaws in Argo CD: Unauthenticated Attackers Can Crash Kubernetes Server with Single Request

Do Son October 2, 2025 0

Argo CD patches multiple High-severity DoS flaws. A single unauthenticated webhook request can crash the entire argocd-server process via improper JSON handling.

Lazarus Group Expands Malicious Campaign on npm, Targets Developers with New Malware

• Malware

Lazarus Group Expands Malicious Campaign on npm, Targets Developers with New Malware

Do Son April 7, 2025 0

Uncover the details of the Lazarus Group malicious campaign targeting the npm ecosystem with advanced malware techniques.

Blind Eagle’s Rapid Adaptation: New Tactics Deployed Days After Patch

• Cyber Security
• Data Leak

Blind Eagle’s Rapid Adaptation: New Tactics Deployed Days After Patch

Do Son March 12, 2025 0

Explore how the Blind Eagle group has evolved since 2018, employing advanced tactics like Remote Access Trojans to conduct cyber espionage.

APT-C-60 Exploits Legitimate Services in Sophisticated Malware Attack Targeting Japanese Organizations

• Cyber Security
• Malware

APT-C-60 Exploits Legitimate Services in Sophisticated Malware Attack Targeting Japanese Organizations

Do Son December 12, 2024 0

Learn about the targeted attack by APT-C-60 on a Japanese organization in 2024, using legitimate services and evasive tactics.

EMERALDWHALE Operation Exposes Over 15,000 Cloud Credentials in Widespread Git Exploit

• Cyber Security

EMERALDWHALE Operation Exposes Over 15,000 Cloud Credentials in Widespread Git Exploit

Do Son October 31, 2024 0

Sysdig TRT uncovers EMERALDWHALE: a large-scale cyber operation stealing cloud credentials by exploiting exposed Git configuration files.

AsyncRAT Malware Campaign Exploits Bitbucket to Deliver Multi-Stage Attack

• Malware

AsyncRAT Malware Campaign Exploits Bitbucket to Deliver Multi-Stage Attack

Do Son October 10, 2024 0

Uncover the details of a sophisticated AsyncRAT campaign utilizing Bitbucket. Learn how attackers distributed malicious payloads and evaded detection.

Urgent GitLab Update Patches Account Takeover Flaw, Other High-Severity Bugs

• Vulnerability

Urgent GitLab Update Patches Account Takeover Flaw, Other High-Severity Bugs

Do Son April 24, 2024 0

CVE-2024-4024: an attacker with stolen Bitbucket credentials could potentially take over a GitLab account linked to another user's Bitbucket account