Data exfiltration stories

Security Researchers Expose Critical Vulnerability in Atlassian's Rovo AI Assistant Allowing Data Exfiltration

Security firm PromptArmor has demonstrated that Atlassian's Rovo AI assistant can be hijacked through hidden instructions in uploaded PDFs or malicious links to silently exfiltrate sensitive data from Jira, Confluence, and third-party integrations to attacker-controlled servers without user approval or audit trails.