Tenet Security disclosed a new attack technique called "Ghostjacking" at DEF CON 34, saying it can successfully target AI agents such as Claude Code at rates of up to 90%. The attack works by planting malicious instructions inside error logs on platforms including Cloudflare and Datadog. Those instructions can prompt an AI agent to suggest DNS configuration changes, which then redirect traffic to domains controlled by an attacker. The security team said it has identified at least 48 organizations running vulnerable MCP configurations, including six Fortune 500 companies. To address the issue, Tenet Security released an open-source mitigation tool named "agent-jackstop." The tool is designed to limit outbound access by AI agents and require human review before commands are carried out. Researchers said the problem reflects a systemic design flaw in AI agent architecture rather than a conventional software bug. The disclosure was cited by CryptoBriefing.
Tenet Security disclosed a new attack technique called "Ghostjacking" at DEF CON 34, saying it can compromise AI agents such as Claude Code with a success rate of up to 90%.
According to the disclosure, attackers plant malicious instructions in error logs on platforms including Cloudflare and Datadog. Those instructions can push AI agents to propose DNS configuration changes, redirecting traffic to domains controlled by the attacker.
At least 48 organizations found with vulnerable MCP setups
Tenet Security said it identified at least 48 organizations running vulnerable MCP configurations. That group includes six Fortune 500 companies.
Open-source mitigation tool released
The firm has released an open-source mitigation tool called "agent-jackstop" to address the issue. It works by limiting outbound access for AI agents and forcing human review of commands before they are executed.
Researchers said the issue is a systemic design flaw in AI agent architecture, not just a standard software vulnerability. The report was attributed to CryptoBriefing.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
