Tenet disclosed the GhostJacking attack at DEF CON 34, which can hijack AI agents through trusted logs
Ghostjacking与AI智能体身份治理缺口
Dark Reading reports on Tenet's Ghostjacking research shown at DEF CON. Externally influenceable logs, alerts, or error messages may be mistaken by agents for operational instructions, causing them to go beyond the scope of the original task. The research covers multiple monitoring and infrastructure platforms, suggesting that data returned by tools should be handled separately from operational authorization. The results come from vendor research and controlled demonstrations and cannot be described as actual customer systems having been compromised, nor can they be extrapolated to all agent configurations failing.
Tenet 展示了同一攻击模式在 Cloudflare、Datadog 和 Sentry 上的复现,部署智能体的团队可据此排查同时具备外部读取与执行权限的智能体。