A coalition of cyber activists breached the servers of Trigona, an entity known for its development of ransomware software
CVE-2023-22515
PoC exploit code for CVE-2023-22515 was released, which facilitates unauthorized access to Confluence Server and Data Center instances
CISA has added three new security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation
Additionally, the CVE-2023-22515 vulnerability can be exploited to create unauthorized Confluence administrator accounts.