Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

A collection of cybersecurity reports covering active exploitation, zero-days, authentication bypasses, supply-chain malware, cloud and SaaS data exposure, webmail attacks, kernel and virtualization escapes, phishing, industrial control system exposure, and AI-agent prompt injection. The most urgent items include an actively exploited unauthenticated Metabase flaw enabling administrative access, a CISA KEV-listed Progress Kemp LoadMaster command-injection vulnerability, and a high-severity WordPress XSS that can be chained to PHP code execution.