a fake bug report hijacks AI coding agents


Security researchers have found a way to hijack AI coding agents with nothing but a fake bug report. They call it Agentjacking. It needs no malware, no stolen password, and no breach of the target.

The attack, disclosed by Tenet Security, turns the coding agent into the weapon. When a developer asks the agent to fix an error, the agent runs the attacker’s code instead, with the developer’s own privileges, on the developer’s own machine.

How the Agentjacking attack works

It starts with Sentry, a popular error-tracking tool. Sentry lets any app send it error reports using a public key called a DSN, which sits openly in website code by design.

An attacker POSTs a fake error to that endpoint. No password is needed. The report hides a “Resolution” section with a command, formatted to look exactly like Sentry’s own advice.

The 💜 of EU tech

The latest rumblings from the EU tech scene, a story from our wise ol’ founder Boris, and some questionable AI art. It’s free, every week, in your inbox. Sign up now!

Coding agents read Sentry through the Model Context Protocol, the standard that lets agents pull in outside tools. The agent treats the response as trusted. It cannot tell a real crash from a planted one. So when the developer says “fix the unresolved Sentry issues,” the agent runs the attacker’s command.

The agent is the attack surface now

AI coding agents have gone from autocomplete to running terminals, and the market is booming; one vibe-coding startup recently hit $500m in revenue. That power is the problem.

The attack worked across the big agents. Tenet says it hijacked Claude Code, Cursor, and Codex, with an 85 per cent success rate in controlled tests. It found 2,388 organisations exposed, from a $250bn enterprise down to solo developers, and even a cloud-security vendor.

The payoff for an attacker is severe. One injected error can reach environment variables, AWS keys, GitHub tokens, git credentials, and private repository URLs. From there, the path runs to CI/CD pipelines and cloud infrastructure.

The scariest part is what does not catch it. The attack slips past EDR, firewalls, IAM, and VPNs, because nothing in the chain is unauthorised. Tenet calls it the “Authorised Intent Chain.” Prompts do not help either. The agents ran the code even when told to ignore untrusted data.

Nobody wants to own the fix

Tenet told Sentry on 3 June. Sentry acknowledged the problem but declined to fix it at the root, calling it “technically not defensible.” It added a filter to block one specific payload string, which treats the symptom, not the cause.

That standoff is the real story. The flaw is not in Sentry alone. It is in how agents handle any outside data, so the same risk runs through support tickets, GitHub issues, and documentation. A separate test recently phished an AI email agent into leaking AWS keys.

The lesson lands as enterprises rush to put agents into production. An agent wired into your tools is also a new way in. As Tenet puts it, the only place left to stop this is the moment the agent decides to act.



Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


You’ve built your small business from the ground up. It’s your pride and joy, your financial security, and a potential legacy for your family. But what happens to your business interests after you’re gone? Without proper estate planning, your small business could face a chaotic future, disrupting operations, hurting employees, and jeopardizing your loved ones’ inheritance.

Business estate planning is your secret weapon. It’s not just for the ultra-wealthy with complex trusts and wills. For small business owners, it’s a crucial tool to ensure business continuity and protect your business value. Here’s how you can craft a comprehensive estate plan:

Know Your Business Inside and Out

The first step in your estate planning process is taking a deep dive into your business affairs. Make a list of all your business assets: equipment, inventory, intellectual property, and real estate.

Furthermore, don’t forget your business debts like loans and outstanding payments. This comprehensive list helps you understand what needs protecting and planning for in your estate planning documents.

Chart Your Business’s Future Course

What do you envision for your business after you’re gone? Should it stay in the family? Be sold to a trusted partner? Wind down entirely? This is where business succession planning comes in. It’s about deciding the future of your business in a way that honors your legacy and sets your team up for success.

Here are some questions to consider:

  • Family Business? Do you have a family member who shares your passion and has the skills to lead?
  • Trusted Partner? Is there a key employee you see as the ideal successor?
  • Time for a Change? Are you open to selling the business to ensure a smooth transition?

There’s no right or wrong answer. The key is to have open conversations with your loved ones and key employees to understand their goals and aspirations. This will guide you in crafting a business succession plan that feels right for everyone involved.

Develop a Rock-Solid Business Succession Plan

This plan outlines who will take over your business and how. You might identify a family member, a key employee, or even an outside buyer. The business succession plan should detail the transfer process, including training and timeline.

Here’s how to craft a plan as strong as your business itself:

  • Identify Your Successor: It could be a family member you’ve been mentoring, a trusted key employee, or even an outside buyer.
  • Groom Your Successor: Start by involving them in key decisions to give them opportunities to learn the ropes.
  • Plan for the Unexpected: Have a backup plan in place. Identifying another potential leader or outline a buy-out option for remaining partners.

An experienced estate planning attorney like Keele & Parke can help you draft a legally sound plan that considers state law and tax implications.

Avoid Conflict with Ironclad Sell Agreements

If you have co-owners, a sell agreement is vital. This agreement dictates what happens to a deceased or incapacitated owner’s share of the business. It prevents conflict among remaining partners and ensures a smooth ownership transition in your overall estate plan.

Wills vs. Trusts: Choosing the Right Tool

A will can designate who inherits your business assets. But the problem is it can be a slow and public process through probate court.

Here’s where a revocable living trust comes in. Think of it as a private vault that holds your business assets during your lifetime. You can name yourself as trustee, so you’re still in control.

Another thing, you can designate a successor trustee to seamlessly take over managing the business if you become disabled or pass away. This avoids probate and keeps things running smoothly for your loved ones and your employees.

Wills are still important for your overall estate plan, especially for personal assets outside the trust. But for your business, a revocable living trust offers flexibility, privacy, and peace of mind.

Minimize Estate Taxes Through Strategic Planning

Nobody wants a big chunk of their hard-earned business value going to the government after they’re gone. That’s where estate taxes come in, and they can be a real burden for your family. But don’t worry, there are smart estate planning strategies you can use to minimize the impact of these taxes.

  • Smart Business Structure: The legal entity you choose for your business can impact your estate taxes. Talk to your estate planning attorney about structuring your business as a limited liability company (LLC) or another entity that might offer tax advantages.
  • Explore Powerful Trusts: There are special types of trusts, like grantor retained annuity trusts (GRATs), that can be used to transfer ownership of your business interests to your heirs while minimizing the taxable value of those assets.

The right strategy for you will depend on your specific situation and goals. That’s why it’s crucial to work with an experienced estate planning attorney and financial advisor. They can help you create a personalized plan that minimizes your estate taxes and protects your legacy.

Don’t Neglect Your Personal Estate Plan

Your business is just one piece of the puzzle. You also need a personal estate plan that includes a will, power of attorney, and healthcare directives. Without it, your loved ones could face a legal mess during tough times. Bills might go unpaid, important decisions could be delayed, and family heirlooms could end up in the wrong hands.

An estate plan ensures your wishes are followed. It names guardians for your minor children, designates beneficiaries for your personal assets (like your home and savings), and appoints someone you trust to make healthcare decisions if you’re unable to. This gives your family peace of mind knowing they’re taken care of, even in your absence.

Life Insurance: A Lifeline for Your Loved Ones

A life insurance policy provides your beneficiaries with a lump sum of cash upon your death. This can be crucial for surviving family members or business partners, especially if they need to buy out another owner’s share through a sell agreement or pay estate taxes.

Regularly Review and Update Your Plan

Life circumstances change, and so should your estate plan. Regularly review your plan, especially after major life events like marriage, children, or changes in your business structure.

Seek Professional Guidance for a Comprehensive Plan

Business estate planning involves complex legal and financial considerations. Don’t try to go it alone. Consult with an experienced estate planning attorney specializing in business succession planning and a financial advisor with experience in small business matters. Their expertise can ensure your estate plan is comprehensive, legally sound, and achieves your goals for business continuity and protecting your loved ones.

Final Thoughts

Safeguarding your business is like protecting your family’s future. Take control. Schedule a consultation with an experienced estate planning attorney today. They’ll guide you through the process and ensure your legacy lives on.



Source link