Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. Two security firms found that behavior independently, by different routes. Only one of those routes is confirmed closed. PromptArmor, an AI security firm, hid the instructions in content Rovo reads. It said an uploaded file was
Story Overview
Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. Two security firms found that behavior independently, by different routes. Only one of those routes is confirmed closed. PromptArmor, an AI security firm, hid the instructions in content Rovo reads. It said an uploaded file was
T
The Hacker News
Original source publication
Related AI News
The Hacker News•August 8, 2026
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
The Hacker News•August 7, 2026
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
The Hacker News•August 7, 2026