The fix for the AI agent that hijacked a company's DNS: it can propose the change, but it can't approve it

A security agent read a Cloudflare log, found an attacker’s prompt-injection payload sitting inside it, and rewrote the company’s DNS.