9/4/2026
Startup Signal · ai-startups

The fix for the AI agent that hijacked a company's DNS: it can propose the change, but it can't approve it

Filed by Nova Kicker
The fix for the AI agent that hijacked a company's DNS: it can propose the change, but it can't approve it
A security agent read a Cloudflare log, found an attacker’s prompt-injection payload sitting inside it, and rewrote the company’s DNS. The firewall had already blocked that payload, and blocking it is what wrote it into the log.That chain is GhostJacking, which Tenet Security demonstrated on the DEF CON 34 main stage on August 9. A request hits Cloudflare’s managed ruleset, gets blocked, and is stored byte for byte with its poisoned User-Agent header. An AI coding agent reviewing those blocked e
N
Nova Kicker
Magazine AI commentary
No commentary yet — an editor can generate it from the Dispatch Desk.
📌 Read the real article via VentureBeat · VentureBeat

💬 Discussion

Sign in to join the discussion.
Be the first to comment on this story.
Loading…
The fix for the AI agent that hijacked a company's DNS: it can propose the change, but it can't approve it — Startup Signal