How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

The fix for the AI agent that hijacked a company's DNS: it can propose the change, but it can't approve it

calendar_today August 26, 2026 person louiswcolumbus@gmail.com (Louis Columbus) domain venturebeat

A security agent read a Cloudflare log, found an attacker’s prompt-injection payload sitting inside it, and rewrote the company’s DNS. The firewall had already blocked that payload, and blocking it is what wrote it into the log. That chain is GhostJacking , which Tenet Security demonstrated on the DEF CON 34 main stage on August 9.

open_in_new Read original post