Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. Two security firms found that behavior independently, by different routes. Only one of those routes is confirmed closed.
PromptAr...
**Source : The Hacker News | 8 août 2026**
Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. Two security firms found that behavior independently, by different routes. Only one of those routes is confirmed closed.
PromptArmor, an AI security firm, hid the instructions in content Rovo reads. It said an uploaded file was
👉 **Lire l'article complet sur The Hacker News :** [https://thehackernews.com/2026/08/atlassian-rovo-can-be-tricked-into.html](https://thehackernews.com/2026/08/atlassian-rovo-can-be-tricked-into.html)
Commentaires (0)
Laisser un commentaire
Aucun commentaire pour le moment. Soyez le premier à commenter !