Tenet Security discloses the agentjacking attack: hijacking AI coding agents via Sentry and MCP
CSA Research Note: Agentjacking MCP Sentry Injection
AI summary
The CSA research brief relays Tenet Security's agentjacking research disclosed in June 2026: untrusted monitoring events entering a coding agent via MCP tools may be mistaken for trusted instructions. Tenet self-reports an 85% success rate in controlled tests and claims to have found exposure conditions in 2,388 organizations; these are the researchers' reports, the number of exposures does not equal the number of confirmed victims, and there is no independent reproduction yet.