August 11, 2026
- Atlassian Rovo can be hijacked by hidden text in a PDF, a second route separate from last week's "RovoBlast." PromptArmor showed instructions buried in an uploaded file silently exfiltrating Jira and Confluence data with no user confirmation and no trace (The Decoder); THN notes two firms found the behavior independently and only one route is confirmed closed (The Hacker News, earlier coverage). · AI & Model Security
in Metabase Zero-Day Blast Radius Widens to LexisNexis and Framework