Hello, I have found a hardcoded api key for opsgenie. I am not sure who it belongs to but I'd like to report it so it can get revoked. Please let me know the official process
When I returned from vacation at the end of August and checked my feeds, I saw that the security community had spent the week focused on Rovo. Two research teams had published different prompt-injection methods for Atlassian's AI assistant just two days apart, one at DEF CON and one on a company blog. At first, I looked…
Last Friday the Forge changelog moved the rovo:mcp module from EAP to Preview: installed apps can now expose their actions as tools you add to custom agents in Rovo Studio, appearing under Connected Apps. Most coverage will file that under developer news. I read it as an admin question, because it means an app install can…
Remember the April 9th Champions Slack Insider asking whether Rovo could be tricked by malicious files? Well...the Champions Slack gave us a reason for a follow-up. @Josh Steckler kicked things off by sharing a report from a security vendor demonstrating a scenario in which Rovo could potentially be manipulated through…
We've run into a problem that I'm sure a lot of teams have seen. Users sometimes add personal information, IDs, or other sensitive data to Jira tickets without realizing they shouldn't. What I've noticed is that most PII detection tools only catch the issue after the ticket has already been created. By then, the data has…
I've added Google Workspace Identity Provider a few days ago just for testing and now I need to disconnect it. When I click on Disconnect link I receive pop-up message "Before you can disconnect your Google identity provider, you need to...". But in my Identity Provider settings I have no options to view or delete SAML and…
Trying to add my public ssh key to my account, I receive the message : "Someone has already added that SSH key" I see that where other people have posted about this, Atlassian has removed details about account names and emails, but I can supply a couple of alternatives. I did log in using my personal email but there were…
Version of the pipe: 3.2.0 Hello, I am using the above version of the git-secret-scan to create a pipeline to scan for any committed secrets in a pull request. While I got the pipe to run and generate a report, I am having trouble getting the inline annotations to work. We have the pipe steps defined as a shared pipeline,…
Is this an expected change, or is something different on Bitbucket's end? Most connections over SSH from our network are showing remote host identification warnings. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING…
Update: June 15, 2026 Exciting news – our new data loss prevention capabilities are now generally available to all Guard Premium customers! Keep reading to learn more about how you can gain full visibility into your sensitive data and protect it automatically. P.S. We're hosting a webinar on July 21 where we'll demo these…
It looks like you're new here. Sign in or register to get started.