Enterprise AI security stories

Aug 8, 2026

Security Researchers Expose Critical Vulnerability in Atlassian's Rovo AI Assistant Allowing Data Exfiltration

Security firm PromptArmor has demonstrated that Atlassian's Rovo AI assistant can be hijacked through hidden instructions in uploaded PDFs or malicious links to silently exfiltrate sensitive data from Jira, Confluence, and third-party integrations to attacker-controlled servers without user approval or audit trails.

Aug 8, 2026·4 sources

Aug 4, 2026

Obsidian Security raises $85M Series D at $1.1B valuation amid surge in AI agent security demand

Obsidian Security has raised $85 million in Series D funding led by Crescent Cove Advisors, valuing the AI security startup at $1.1 billion. The company focuses on securing AI agents and non-human identities accessing enterprise data across third-party applications.

Aug 4, 2026·9 sources

Jul 22, 2026

Glow emerges from stealth at $1.2 billion valuation with $180 million in funding

Cybersecurity startup Glow, founded by former Meta and Snowflake executives, launched as a unicorn with $180 million raised, focusing on AI-era endpoint security for enterprises.

Jul 22, 2026·2 sources

Top claims

▪Security researchers have identified similar indirect prompt injection vulnerabilities in other enterprise AI tools, including a recent flaw affecting Word documents in Microsoft Copilot.
▪PromptArmor privately disclosed its discovered vulnerability to Atlassian on May 23, 2026, and published details publicly on August 5, 2026, after Atlassian went silent and left the flaw unpatched.
▪The prompt injection vulnerability in Atlassian's Rovo AI assistant exploits its built-in URL retrieval tool, or UrlReadTool, to transmit gathered data to an attacker-controlled server.