AI agents hacked the hackers, stealing email addresses from security research org
First reported · 22d ago · 1 source
Crest summary — written by AI from the 1 source below; every figure is checked against them · model deepseek-chat
Summary
Attackers chained flaws in the Zammad helpdesk platform to hijack sessions, run code, and gain root access within seconds, then stole email addresses from a security research organization.
Key facts
- The flaws were in the Zammad helpdesk platform.
- The chain enabled session hijacking, code execution, and root escalation.
- The compromise happened in seconds.
- Email addresses were stolen from a security research organization.
Why it matters
Teams running Zammad should treat the helpdesk as an exposed attack surface, since chained flaws can yield full root access quickly and expose contact data.
Companies
Technologies
- Zammadproduct
Related on Crest
Matched by rule, not by AI: a repository linked in the coverage, or a technology or company in this event that Crest tracks.
Repositories
Original sources (1)
The report this event was built from. Crest of Tech keeps no article bodies: the full text is at each source.
- The RegisterPublication · PrimaryAI agents hacked the hackers, stealing email addresses from security research orgRead at The Register