☀️ AI Morning Minute: Agentjacking
Your AI coding assistant just ran a stranger’s code on your laptop. Nobody phished you. Nothing got installed.
There’s a new attack aimed right at the AI coding tools a lot of developers now lean on every day. It doesn’t need malware, and it doesn’t need your password. It just needs your AI agent to read the wrong thing and do what it says. Researchers are calling it agentjacking.
What it means
Agentjacking is a trick that hijacks an AI coding agent (tools like Claude Code, Cursor, and Codex) into running an attacker’s commands on your own machine. It’s basically a meaner version of prompt injection, the older problem where hidden instructions get slipped into something an AI reads.
Here’s how the researchers actually did it. A lot of apps use a tool called Sentry to collect their error reports, and anybody can send Sentry a fake one. So an attacker writes a fake report with commands hidden inside it. Later, a developer asks their AI agent to look at the errors and fix them. The agent reads the poisoned report, can’t tell a real bug note from a planted instruction, and runs the bad code. With your permissions, on your computer.
Why it matters
The success rate is rough. When Tenet Security tested this in June 2026, it worked about 85% of the time across every major coding agent they tried, and they confirmed 2,388 exposed organizations. That range ran from Fortune 100 companies down to solo developers.
Your usual security tools don’t catch it. Nothing gets downloaded, so antivirus sees nothing. No password gets stolen, so no login alert fires. The agent is just doing what it was told, which is kind of the whole problem.
It’s a preview of where the agent era is headed. An agent that reads outside content, has access to your system, and can take actions is useful for the same reason it’s dangerous. I dunno that there’s a clean fix for that tension yet. Give a tool the power to do real work for you and you’ve also handed it the power to do real damage when someone feeds it a lie.
Simple example
You hire a sharp new assistant and tell them to go through the customer complaint box and handle what they can. One of the complaint cards is fake. Tucked inside, in the same handwriting as all the real ones, it says to go into the safe and mail the contents to some address. Your assistant can’t tell that line isn’t a real customer request, so they follow it.
That’s agentjacking. The assistant did their job. They just couldn’t tell an order from a note, and you’d already given them the key to the safe.