3 ms·

Wonder how powerful is Scriptrunner for Jira. They got the security certifications but I cant tell how sandboxed it is.

• itomato 3y ago
  As well as can be expected in a company that gives Smartsheet access to Jira with an Admin Service Account. https://github.com/BishopFox/sliver https://github.com/BishopFox/sliver "Since the Smartsheet service account had administrative access to Atlassian Jira, the threat actor was able to install the Sliver Adversary Emulation Framework, which is a widely used tool and framework that red teams and attackers use to enable “C2” (command and control), connectivity gaining persistent and stealthy access to a computer on which it is installed. Sliver was installed using the ScriptRunner for Jira plugin." https://blog.cloudflare.com/thanksgiving-2023-security-incident https://blog.cloudflare.com/thanksgiving-2023-security-incid...