Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

Attacker-controlled instructions can trick Atlassian's Rovo assistant into collecting Jira or Confluence data accessible to a signed-in user and sending it to an outside server. Two security firms found the behavior independently by different routes. Only one route is confirmed closed. PromptArmor hid instructions in content Rovo reads.