Atlassian Rovo AI Flaw Exposed Enterprise Data via One Link

DEF CON 34: RovoBlast Exposes Atlassian Rovo Data Risks

Varonis Threat Labs researchers identified RovoBlast, a vulnerability affecting Atlassian Rovo. The flaw showed how a single crafted link could introduce attacker-controlled instructions into a user’s trusted AI session and potentially expose organizational data. Researchers Dolev Taler and Mark Vaitsman presented the findings at DEF CON 34 after responsibly reporting the vulnerability to Atlassian, which subsequently addressed it. RovoBlast hig…

Hidden text in a PDF is enough to steal sensitive data through Atlassian's AI agent Rovo

Security firm PromptArmor shows how hidden instructions in a PDF can hijack Atlassian's AI agent Rovo, silently forwarding sensitive data from Jira and Confluence to an external server. The attack needs no user confirmation and leaves no trace. The article Hidden text in a PDF is enough to steal sensitive data through Atlassian's AI agent Rovo appeared first on The Decoder.

Atlassian Rovo AI Flaw Exposed Enterprise Data via One Link

Varonis disclosed a critical one-click vulnerability in Atlassian's Rovo AI assistant at DEF CON 34. Dubbed RovoBlast, the flaw let attackers seed malicious prompts into live AI sessions via a single crafted link, exfiltrating Jira, Confluence, and SharePoint data without any jailbreak or permission bypass. The post Atlassian’s Own AI Could Steal Everything on Jira and Slack appeared first on TechJuice.

Atlassian Rovo AI Can Be Abused to Exfiltrate Jira, Confluence Data

Atlassian's Rovo AI assistant has been exposed to two independent attack techniques that could cause it to retrieve Jira and Confluence data accessible to an authenticated user and transmit the information to an attacker-controlled server. AI security firm PromptArmor and Varonis Threat Labs identified the techniques through different attack paths. Varonis' RovoBlast vulnerability has been fixed by Atlassian, while PromptArmor said its separate …

Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data

The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data. The post Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data appeared first on SecurityWeek.