‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad
Ghostjacking attack uses poisoned logs to turn AI agents rogue.
Tenet researchers demonstrated a 'Ghostjacking' attack where malicious instructions are planted in logs or alerts, tricking AI agents into executing them. This novel attack targets trusted platforms like Cloudflare, Datadog, and Sentry, leading to domain hijacking, code execution, and credential theft.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Tenet?
Get an email when a new story names Tenet, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe 'Ghostjacking' attack exploits a fundamental trust assumption: AI agents that consume logs, alerts, and monitoring data treat that data as authoritative instructions. By injecting malicious commands into log streams or alerts on platforms like Cloudflare, Datadog, and Sentry, attackers can manipulate AI agents into executing harmful actions including domain hijacking, arbitrary code execution, and credential theft. This is a form of prompt injection applied to operational pipelines, where the attack surface is the data the AI agent ingests rather than direct user input. As AI agents gain more autonomy over infrastructure, the integrity of the data they consume becomes a critical security boundary that most organizations have not yet hardened.
What helps against this
How we list vendors
- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Ghostjacking
- malware — Agentjacking