A newly disclosed vulnerability in Atlassian’s Rovo enterprise AI assistant could allow attackers to turn a single malicious link into a pathway to exposing sensitive corporate data. Dubbed RovoBlast by Varonis Threat Labs, the flaw exploited how Rovo Chat handled externally supplied URL parameters. When a logged-in employee clicked a crafted link, attacker-controlled text could […]
The post RovoBlast Flaw Lets One Click Force Atlassian AI to Leak Enterprise Data appeared first on Cyber Security News.