Ghostjacking lets attackers poison logs to hijack AI agents on Cloudflare, Datadog and Sentry
Tenet Security showed that a blocked request logged verbatim can carry malicious instructions that AI agents blindly execute. The proof‑of‑concept hijacked Cloudflare DNS, stole Datadog secrets and co‑opted Sentry’s AI, proving that trusted logging pipelines are a new attack surface for enterprises.