Hackers Exploit Atlassian via Malicious Support Ticket Submission
ID: 3eb6a5f3-f481-5d99-9a31-3e82cc35855a
STIX ID: report--3eb6a5f3-f481-5d99-9a31-3e82cc35855a
Feed Name: Cyber Press
Threat Score
*Cato Networks demonstrated a proof-of-concept “Living off AI” attack against Atlassian’s Model Context Protocol (MCP) in which malicious prompts embedded in external support tickets cause internal AI tools to perform privileged actions, enabling data exfiltration and potential system compromise; recommended mitigations include enforcing least-privilege for AI actions, prompt isolation/sandboxing, and real-time monitoring of MCP activity.*
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.