Nation-State Hackers Exploit Critical Atlassian Zero-Day Vulnerability, Microsoft Warns

Microsoft has reported that state-backed hackers, identified as Storm-0062 and believed to be China-based, are exploiting a critical zero-day vulnerability in Atlassian software. The vulnerability, tracked as CVE-2023-22515, allows remote attackers to create unauthorized administrator accounts and gain access to Confluence servers. Atlassian has released a patch for the flaw and is working closely with Microsoft on the investigation. The scale of customer exploitation and any data theft remains unclear at this time. Users are urged to upgrade their software to protect against the exploit.