'GhostJacking' Exposes Identity Governance Gaps in AI Agents

Researchers discovered a vulnerability called 'GhostJacking' that allows attackers to manipulate AI agents by exploiting how they handle security alerts and blocked events. By crafting fake or misleading alerts, attackers can trick AI agents into performing unauthorized actions, revealing a gap in identity governance (the systems that control who has access to what resources). This attack shows that AI agents can be hijacked even when security tools are in place to stop malicious behavior.