Atlassian's Rovo AI can exfiltrate data from its product suite, including Jira and Confluence, through vulnerabilities that allow indirect prompt injection. This method bypasses controls and executes without human approval, leveraging Rovo's URL retrieval tool even if web search is disabled.

Atlassian will start collecting customer metadata and in-app content from Jira, Confluence, and other cloud products by default on August 17, 2026, to enhance its AI offerings, including Rovo and Rovo Dev. Metadata collection is mandatory for Free, Standard, and Premium tiers, while Enterprise customers have the option to opt out.

Atlassian will lay off approximately 1,600 employees, or 10% of its workforce, to shift focus towards artificial intelligence and enterprise sales. The majority of the layoffs will affect North American employees, accounting for 40% of the reductions.