The fix for the AI agent that hijacked a company's DNS: it can propose the change, but it can't approve it

26 Aug 2026 1 source

A security agent read a Cloudflare log, found an attacker’s prompt-injection payload sitting inside it, and rewrote the company’s DNS. The firewall had already blocked that payload, and blocking it is what wrote it into the log.That chain is GhostJacking, which Tenet Security demonstrated on the DEF

Sources

The fix for the AI agent that hijacked a company's DNS: it can propose the change, but it can't approve it

VentureBeat 26 Aug 2026

A security agent read a Cloudflare log, found an attacker’s prompt-injection payload sitting inside it, and rewrote the company’s DNS. The firewall had already blocked that payload, and blocking it is what wrote it into the log.That chain is GhostJacking, which Tenet Security demonstrated on the DEF