The Attack That Turns Your AI Agent Into A Weapon Against You
Barak Sternberg spent a chunk of this year proving something that should worry anyone who has plugged an AI coding agent into their observability stack. His team at Tenet Security found that a single fake error report, sent to a public Sentry endpoint with no login required, was enough to get AI agents to run code they had no business running. In a controlled test, more than 100 organizations' agents acted on the injected error, including one belonging to a company worth roughly $250 billion. Tenet published the full research, including the disclosure timeline, on its blog. The attack doesn't…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.