# Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code

> Security researchers have detailed a new class of attack they call Agentjacking, which targets the AI coding agents developers increasingly let run semi-autonomously. The trick exploits how these agents handle errors: by planting crafted content in the error-tracking flow, an attacker can steer the agent into executing malicious code. In testing, the technique succeeded about 85 percent of the time, a strikingly high rate for a fresh attack class. The finding lands on a growing sore spot. AI agents are being handed real permissions, to read code, run commands, and touch production systems, precisely because their usefulness comes from acting on their own. That autonomy is also the vulnerability. An agent that faithfully follows instructions it encounters can be manipulated by whoever controls those instructions. The broader lesson is that agent security is not the same as model safety. Even a well-behaved model becomes dangerous when wired into tools with the ability to act. As companies rush agents into production, work like this is a warning that the attack surface is new, poorly understood, and, judging by that success rate, wide open.

_Section: [Daily AI Updates](https://www.wortins.com/daily-ai) · Source: The Hacker News · Published Friday, July 10, 2026_

## Wortins' read

Security researchers have detailed a new class of attack they call Agentjacking, which targets the AI coding agents developers increasingly let run semi-autonomously. The trick exploits how these agents handle errors: by planting crafted content in the error-tracking flow, an attacker can steer the agent into executing malicious code. In testing, the technique succeeded about 85 percent of the time, a strikingly high rate for a fresh attack class. The finding lands on a growing sore spot. AI agents are being handed real permissions, to read code, run commands, and touch production systems, precisely because their usefulness comes from acting on their own. That autonomy is also the vulnerability. An agent that faithfully follows instructions it encounters can be manipulated by whoever controls those instructions. The broader lesson is that agent security is not the same as model safety. Even a well-behaved model becomes dangerous when wired into tools with the ability to act. As companies rush agents into production, work like this is a warning that the attack surface is new, poorly understood, and, judging by that success rate, wide open.

## Source

[Read the full story at The Hacker News](https://thehackernews.com/2026/06/agentjacking-attack-tricks-ai-coding.html)

## Related coverage

- [Anthropic Launches Claude Science for Drug Discovery](https://www.wortins.com/story/anthropic-launches-claude-science-for-drug-discovery-3dc5ce1e) — [CNBC](https://www.cnbc.com/2026/06/30/anthropic-launches-ai-drug-discovery-program-claude-science.html)
- [Elon Musk Reveals AI Device Prototype to SpaceX Investors](https://www.wortins.com/story/elon-musk-reveals-ai-device-prototype-to-spacex-investors-27ae6851) — [Wall Street Journal](https://www.wsj.com/tech/ai/spacex-showed-investors-prototype-of-elon-musks-new-ai-device-b445c57b)
- [OpenAI Launches GPT-Live: Full-Duplex Voice Models for Natural Conversations](https://www.wortins.com/story/openai-launches-gpt-live-full-duplex-voice-models-for-natura-1becd4e0) — [TechCrunch](https://techcrunch.com/2026/07/08/openai-releases-new-voice-models-for-more-natural-live-conversations/)
- [Jamf AI Governance](https://www.wortins.com/story/jamf-ai-governance-cb41faf1) — [Mean CEO Blog](https://blog.mean.ceo/ai-product-launches-news-july-2026/)
- [Meta Achieves Brain-to-Text Decoding Without Surgery Using AI](https://www.wortins.com/story/meta-achieves-brain-to-text-decoding-without-surgery-using-a-62c15d53) — [Meta AI](https://ai.meta.com/blog/brain2qwerty-brain-ai-human-communication/)
- [AI-Powered Cameras Watch for Wildfires in Wisconsin 24/7](https://www.wortins.com/story/ai-powered-cameras-watch-for-wildfires-in-wisconsin-24-7-f7753444) — [Wisconsin Public Radio](https://www.wpr.org/news/ai-powered-cameras-wildfires-wisconsin)

---

_Curated and written by [Wortins](https://www.wortins.com) — The daily AI briefing. Every story links to its original source; the "Wortins read" on each is our own original analysis. [About Wortins & our editorial approach](https://www.wortins.com/about)._