Storia in 4 fonti

Ghostjacking attack uses poisoned logs to compromise AI agents

Tenet Security's Ghostjacking attack hijacks AI agents through poisoned logs from Cloudflare and Datadog, achieving a 90% success rate against

Raccontata da

Confronto fonti

4 prospettive sulla stessa storia

AI · summaries

cryptobriefing.comStai leggendo3 g fa

Ghostjacking attack uses poisoned logs to compromise AI agents

Tenet Security unveiled Ghostjacking at DEFCON 34: poisoning Cloudflare/Datadog logs forces AI agents to execute code with 90% success (15,000+ organizations exposed). LLMs treat all input as instruction, enabling developer access without authentication—organizations must enforce strict agent autonomy limits.

originale

securityweek.com3 g fa

'Ghostjacking' Attack Uses Poisoned Logs to Turn AI Agents Bad

Tenet demonstrated Ghostjacking: malicious log injection on Cloudflare, Datadog, Sentry (50% Fortune 500 use them) hijacks AI agents 90% success rate—credentials stolen, DNS redirected. For tech leads: identifies pattern where AI agents blindly trust logs/alerts—requires security review of observability tool configs and autonomous AI governance before enterprise rollout.

Timeline cronologica

lunedì 10 agosto 2026·securityweek.com
'Ghostjacking' Attack Uses Poisoned Logs to Turn AI Agents Bad
In a Ghostjacking attack, an AI agent executes instructions planted in the log that records a blocked request word for word.
martedì 11 agosto 2026·darkreading.com
"GhostJacking" Exposes Identity Governance Gaps in AI Agents
New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents.

Ghostjacking attack uses poisoned logs to compromise AI agents

Confronto fonti

Ghostjacking attack uses poisoned logs to compromise AI agents

'Ghostjacking' Attack Uses Poisoned Logs to Turn AI Agents Bad

Timeline cronologica

'Ghostjacking' Attack Uses Poisoned Logs to Turn AI Agents Bad

"GhostJacking" Exposes Identity Governance Gaps in AI Agents

Ghostjacking: Turning Logs and Alerts into Commands to Take Over AI Agents

"GhostJacking" Exposes Identity Governance Gaps in AI Agents

Ghostjacking: Turning Logs and Alerts into Commands to Take Over AI Agents

Ghostjacking attack uses poisoned logs to compromise AI agents