Hackers start exploiting critical Atlassian Confluence RCE flaw

**Executive summary:** Security researchers and Shadowserver report active exploitation of the critical Confluence template-injection RCE CVE-2023-22527 affecting Confluence Server/Data Center versions released before December 5, 2023; Shadowserver recorded over 39,000 exploitation attempts from ~600 IPs against publicly reachable Confluence instances (about 11,100 detected), and Atlassian has released fixed versions (8.5.4, 8.6.0, 8.7.1 and later) — administrators should patch immediately and treat outdated instances as potentially compromised.