According to The Hacker News' weekly recap, threat actors started exploiting a critical Atlassian Data Center vulnerability (CVE-2026-21589, CVSS 9.3) within two hours of watchTowr releasing technical details. The flaw affects multiple products including Confluence, Jira, and Bitbucket, and can allow arbitrary file access. The rapid exploitation highlights the shrinking window between disclosure and attack.
In another story, Zohar Pinhasi, owner of ransomware recovery firm MonsterCloud, was charged with wire fraud. Prosecutors allege he falsely claimed he could restore data without paying ransoms, but instead secretly paid the hackers and charged victims fees significantly higher than the original ransom demands. The company had previously been highlighted in a 2019 ProPublica investigation.
The FBI also announced a third arrest in connection with the ShinyHunters group, which was linked to the recent FBIjobs.gov incident. The arrested individual is reportedly Edward Dubrovsky, a Toronto-based cybersecurity executive, charged with conspiracy to extort. The group itself said on Telegram that several members have been arrested and it may not remain active much longer.