Bedrock Data routes data-exposure fixes to owners and checks results
The feature is generally available with the platform and uses existing Jira or ServiceNow tickets.
1
Stories per day · 30 days
4 RSS
Relatedatlassian5confluence5bitbucket4bamboo2kev2arbitrary-file-access1cisa1crowd1cve-2026-215891data-security1dspm1itsm1path-traversal1remediation1servicenow1third-party1third-party-libraries1tomcat1
12 stories, newest first · one card per story
Stories tagged #jira
Atlassian October bulletin covers 75 third-party product CVEs
Six unique flaws are rated critical, but Atlassian assesses non-critical customer risk and cites no exploitation.
2
Canada flags Atlassian Data Center and Server flaws (AV26-1076)
The October 22 alert lists affected Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira, and Jira Service Management builds.
Atlassian October bulletin lists 176 flaw entries in Jira and Confluence
Critical scores are third-party library ratings; Atlassian says its product risk is lower and not immediately critical.
3
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
CISA added actively exploited Atlassian CVE-2026-21589 to KEV, ordering federal fixes by October 18, 2026.
CISA lists Atlassian file-access flaw CVE-2026-21589 as exploited
Unauthenticated attackers can read a known file in the web root; federal remediation is due October 18, 2026.
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
Attackers probed critical Atlassian CVE-2026-21589 within hours of a public PoC, with 190 honeypot attempts.
5
Hackers exploit critical Atlassian flaw after public PoC release
Attackers began exploiting critical Atlassian flaw CVE-2026-21589 within hours of a public proof of concept.
3
Atlassian warns of critical file access flaw in its datacenter products
Atlassian urges patches for CVE-2026-21589, an unauthenticated file-read flaw in eight Data Center products.
4
The SaaSpocalypse that wasn’t, with Atlassian CEO Mike Cannon-Brookes
Atlassian CEO Mike Cannon-Brookes argues AI is increasing, not replacing, use of Jira and Trello.
Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira
Stratus Security open-sourced Sift, a CLI secrets scanner covering Active Directory, SharePoint, Teams, Slack, Jira, and Confluence, outperforming Snaffler in benchmarks.
2
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Wiz disclosed a GitHub Actions workflow injection in Snowflake's snowflake-connector-net repo that exposed Jira API tokens; Snowflake patched the flaw.
2