{"id":633806,"date":"2026-10-02T03:06:13","date_gmt":"2026-10-02T03:06:13","guid":{"rendered":"https:\/\/www.newsbeep.com\/il\/633806\/"},"modified":"2026-10-02T03:06:13","modified_gmt":"2026-10-02T03:06:13","slug":"ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/il\/633806\/","title":{"rendered":"AI agents hacked the hackers, stealing email addresses from security research org"},"content":{"rendered":"

<\/p>\n

\n security\n <\/p>\n

<\/a><\/p>\n

\n Chained Zammad flaws enabled session hijacking, code execution, and root escalation in seconds\n <\/p>\n

AI agents hacked the hackers – the Dutch Institute for Vulnerability Disclosure (DIVD) – via two zero-day bugs in its Zammad support platform, abusing the flaws to hijack sessions, run code remotely as the local zammad user, and escalate privileges to root.<\/p>\n

The chained exploits took just seconds to move from session hijacking to root access, and on Thursday, the nonprofit bug hunting organization said the miscreants stole data belonging to its volunteer security researchers, including DIVD email addresses and potentially other contact details.<\/p>\n

\u201cWe\u2019re still investigating exactly which data of which volunteers is affected,\u201d DIVD said in its incident report<\/a>. \u201cFor DIVD volunteers (and others) this means a higher risk of social engineering, because this makes it easier for someone to pose as a DIVD\u2019er.\u201d<\/p>\n

A subsequent LinkedIn post<\/a> advised anyone receiving an email or contact request from someone at DIVD \u201cthat feels slightly off\u201d to verify that it\u2019s legit by emailing communications@divd.nl.<\/p>\n

DIVD is also a CVE Numbering Authority (CNA), and it assigned CVE IDs to the now-public security holes in Zammad, an open-source helpdesk and customer support ticketing system. They are CVE-2026-102489<\/a> and CVE-2026-102490<\/a>, and both bugs received CVSS 4.0 scores of 9.4, when assessed in the chained attack scenario.<\/p>\n

CVE-2026-102489 enables unauthenticated attackers to achieve remote code execution and leak user sessions, while CVE-2026-102490 allows a local user to elevate their privileges to root.\u00a0<\/p>\n

Zammad versions 6.3.0 to 6.5.4 are vulnerable to CVE-2026-102489, and it also exists in versions 7.0.0 through 7.1.3 – but it\u2019s not exploitable \u201cdue to environment conditions,\u201d according to DIVD\u2019s advisory.<\/p>\n

All Zammad versions are vulnerable to CVE-2026-102490. DIVD advises \u201call users of Zammad to upgrade to version 7 of Zammad or to take it offline.\u201d<\/p>\n

What happened<\/p>\n

According to the nonprofit\u2019s timeline<\/a>, the attack happened on September 21, when “malicious actors\u201d broke into its IT system via the two zero-days in its ticketing support software.<\/p>\n

The bug hunters discovered the attackers the following day, blocked access to all of its data center systems, and formed an incident response team with Merlon Security.<\/p>\n

On September 24, DIVD reported the Zammad vulnerability to the vendor, notified the Dutch Data Protection Authority and the National Cyber Security Centre about the incident, and discussed its options with police. It also posted its first disclosure<\/a> on LinkedIn.<\/p>\n

\u201cIt took us (almost) seven years but we can now say that we’re the hackers that got hacked,\u201d the post said, adding that DIVD remained committed to handling the incident in \u201cthe way we think it should be handled. That is open, transparent and honest, even if it sucks.\u201d<\/p>\n

‘Modus operandi’ indicates agentic AI<\/p>\n

DIVD also noted that its team had never seen an attack like this before.\u00a0<\/p>\n

\u201cThis is an attack we have not seen before,\u201d according to the post. \u201cNot because it\u2019s our first, but because the modus operandi indicates that this is an agentic AI powered attack.\u201d<\/p>\n

The attack was\u00a0“loud and very very messy,” DIVD said<\/a>. “We could see the agent working automated, because after every action it decided the next step itself, at the speed of light and sloppy logic or pattern.”<\/p>\n

Subsequent posts with screenshots of logs<\/a> found during the investigation reveal embedded notes found in the attack script – another indication that this was an agentic operation or at least AI-enabled. <\/p>\n

\u201cWhat human attacker leaves notes to themself in their scripts, explaining why what they’re doing is okay and really not phishing? The AI just got a task and keeps justifying its own actions in the code as comments, a human wouldn\u2019t care less,” the post said. “Who has time for that anyway?\u201d<\/p>\n

If only all orgs responded to hacks like this<\/p>\n

While the investigation remains ongoing, security researchers applauded DIVD for its transparency in disclosing and responding to the hack.<\/p>\n

\u201cKudos to DIVD for their level of honesty and transparency working through their active incident and investigation,\u201d VulnCheck security researcher Patrick Garrity posted on LinkedIn. \u201cIt would be nice if all organizations were this transparent about their security incidents!\u201d<\/p>\n

In a subsequent interview with The Register, Garrity said he applauded DIVD\u2019s \u201cbrutal honesty\u201d about the breach. \u201cThey’re eating their own dog food, which is great, and getting information out quickly to other organizations that potentially use this product so they can take action before they get hit.\u201d\u00ae<\/p>\n","protected":false},"excerpt":{"rendered":"security Chained Zammad flaws enabled session hijacking, code execution, and root escalation in seconds AI agents hacked the…\n","protected":false},"author":2,"featured_media":633807,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[345,343,344,85,46,125],"class_list":["post-633806","post","type-post","status-publish","format-standard","has-post-thumbnail","category-artificial-intelligence","tag-ai","tag-artificial-intelligence","tag-artificialintelligence","tag-il","tag-israel","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/633806","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=633806"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/633806\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/633807"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=633806"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=633806"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=633806"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}