News for hackers. Stuff that matters.

A comment on Zero-Day Exploitation of Atlassian Confluence. Parent comment

Re:Zero-Day Exploitation of Atlassian Confluence by wtch98 on Friday June 03, 2022 @02:15AM (#31604868)
My confluence server is behind a proxy which requires a valid client certificate to talk to the server

I have other proxies which require OIDC authentication before passing any packets on

Now sure, I'm still vulnerable to internal attackers from my company, but that's an audited trail to a real specific user, not just a random botnet on the internet.

[ Parent | on HN ]
Re:Zero-Day Exploitation of Atlassian Confluence by benfrancom on Friday June 03, 2022 @06:48AM (#31606635)
Smaller attack surface internally, for sure. I also assume internal networks are hostile, not just from internal threats, but from external lateral movement.
[ Parent | on HN ]