Highlights from today:

• [Vulnerability] You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)
• [News] Atlassian warns of critical file-access flaw in Jira, Confluence
• [Cloud Security] CISO perspectives on managing vulnerability risks in the age of AI
• [Threat Intel] SSRF in Harbor Webhooks: Any User Can Reach the Server’s Cloud Credentials
• [News] ASOS confirms data breach after “HACKED” in-app notifications
• [Advisory] Incident affecting ASOS customers
• [News] Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
• [Threat Research] Vector Search Can’t Tell “Yes” From “No”
• [Threat Intel] CrocoRat Adds a New Twist to ClickFix with DNS Payload Delivery
• [Threat Intel] ASOS “hackers” send push notifications to customers
• [Detection] CVE-2026-21589: Critical Atlassian Vulnerability Exposes Sensitive Files Across Eight Products
• [Detection] CVE-2026-96940: Microsoft Exchange Vulnerability Allows Unauthorized Mailbox Access

SecOpsDaily