PDF隐藏文本就能劫持Atlassian AI智能体Rovo窃取敏感数据

精选理由

PromptArmor发现Rovo能被PDF里藏的字骗走数据，Jira和Confluence用户要当心。

AI 摘要

安全公司PromptArmor演示了一种针对Atlassian AI智能体Rovo的提示注入攻击。攻击者只需在PDF中隐藏文本指令，就能劫持Rovo的操作。Rovo会静默把Jira和Confluence里的敏感数据转发到外部服务器。该攻击不需要用户确认，也不会留下痕迹。

原文 · Decoder

Hidden text in a PDF is enough to steal sensitive data through Atlassian's AI agent Rovo

Security firm PromptArmor shows how hidden instructions in a PDF can hijack Atlassian's AI agent Rovo, silently forwarding sensitive data from Jira and Confluence to an external server. The attack needs no user confirmation and leaves no trace. The article Hidden text in a PDF is enough to steal sensitive data through Atlassian's AI agent Rovo appeared first on The Decoder .

阅读原文