Bitbucket

Reported Context (5)

older self-hosted line, which the advisory did not mention. It marked every version of Bamboo Server, Bitbucket Server, Confluence Server, and Crowd Server as affected and listed no fixed versions for them. Critical Atlassian Flaw Allows Unauthenticated File Reads Across Eight Self-Hosted Products
We chose to focus on the four most common VCS platforms across Wiz customers: GitHub, GitLab, Bitbucket, and Azure DevOps. Wiz Shares VCS Logging and Threat-Hunting Guidance for GitHub, GitLab, Bitbucket, and Azure DevOps
Rovo operates as an AI layer across the core products in the Atlassian platform, including Jira, Confluence, Bitbucket, as well as other connected SaaS tools like Slack, Microsoft 365, and Google. Varonis Researchers Detail RovoBlast, a One-Click Path to Data Exposure in Atlassian Rovo
The repositories are hosted on GitHub, GitLab, or Bitbucket, and appear to be legitimate coding projects. Void Dokkaebi Uses Fake Job Interviews to Spread Malware Through Developer Repositories
Node-nvm-ssh infection path. The initial infection vector was a modified Chessfi application hosted on Bitbucket. ChessFi is a web3-based multiplayer chess platform where players can challenge each other and bet BeaverTail and OtterCookie Add Keylogging and Screenshot Capabilities

CVE (2)

Malware (7)

People (4)

Threat Actors (4)

MITRE ATT&CK (16)

Vendors (3)

Products (42)

Tools (2)

Industries (2)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.