Global

677 Articles

Atlassian Patches a Critical Vulnerability in Eight Products That Allows Access to Files Without Authentication

Cybersecurity

Atlassian Patches a Critical Vulnerability in Eight Products That Allows Access to Files Without Authentication

Atlassian released security updates to address CVE-2026-21589, rated critical at 9.3 under CVSS, which could allow an unauthenticated attacker to access specific files in the root path of web applications. The company recommends isolating internet-accessible deployments or updating them immediately, although there is no evidence that the vulnerability has been actively exploited so far.

2026-10-07

Compromise of Three Top-Level Domains Enabled the Issuance of Fake TLS Certificates for Google and Major Services

Cybersecurity

Compromise of Three Top-Level Domains Enabled the Issuance of Fake TLS Certificates for Google and Major Services

Attackers exploited control of the .gh, .sl, and .as domains to modify DNS records and pass automated validation processes, then obtain unauthorized TLS certificates for domains belonging to Google and other global brands. Chrome blocked the certificates identified by Google, but the company warned that browser-level intervention does not protect all users or guarantee the detection of every certificate.

2026-10-06