Atlassian vulnerability at fault in GAO breach

A data breach affecting approximately 6,600 current and former GAO employees and some vendor data was carried out via exploitation of a known vulnerability in Atlassian Confluence; the compromise occurred through GAO contractor CGI Federal, and authorities (CISA, FBI, MS-ISAC) issued advisories about active, mass exploitation of the Confluence vulnerability, prompting remediation and ongoing investigation.