RECENT research by Tenet Security reveals that half of Fortune 500 companies are susceptible to an attack known as 'Ghostjacking', where adversaries exploit AI agents' trusted access to bypass firewall protections. This technique allows attackers to reroute web and email traffic, effectively creating covert pathways around security measures while leaving backdoors for ongoing access to sensitive data.
The vulnerabilities were demonstrated across popular platforms such as Cloudflare, Datadog, and Sentry, posing significant risks as organizations increasingly rely on AI for coding and infrastructure tasks. To mitigate these risks, Tenet recommends restricting network access, enforcing human approvals for commands, and carefully managing AI-read data.