Fake Sentry Error Lets Attackers Hijack AI Coding Agents
Tenet Threat Labs proved that a single forged Sentry bug report can make AI coding assistants—Claude Code, Cursor, Codex—execute attacker‑controlled code, spilling AWS keys, GitHub tokens and other secrets. The exploit works across hundreds of firms, including a Fortune 100, because agents trust telemetry as native system output, bypassing EDR and firewalls. Developers must treat external logs as untrusted and apply the newly released hardening configs.