Atlassian Confluence zero-day attacks launched by Chinese APT group

Vulnerable Atlassian Confluence Data Center and Server instances have been targeted by Chinese state-backed threat operation Storm-0062, also known as DarkShadow and Oro0lxy, in ongoing attacks exploiting a zero-day flaw, tracked as CVE-2023-22515, since Sept. 14, or three weeks prior to the bug's disclosure, SecurityWeek reports.

apt atlassian atlassian confluence attacks bug center chinese chinese apt confluence confluence data center cve cve-2023-22515 data data center disclosure endpointdevice-security exploiting flaw reports security-staff-acquisition-development server state storm storm-0062 threat threat intelligence vulnerable zero-day zero-day flaw