{"id":61449,"date":"2026-10-01T21:26:42","date_gmt":"2026-10-01T21:26:42","guid":{"rendered":"https:\/\/www.theregister.com\/a\/5300652"},"modified":"2026-10-01T21:26:42","modified_gmt":"2026-10-01T21:26:42","slug":"ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/","title":{"rendered":"AI agents hacked the hackers, stealing email addresses from security research org"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/image.theregister.com\/5300669.jpg?imageId=5300669&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683\" class=\"ff-og-image-inserted\"><\/div>\n<div data-element-guid=\"d11159dd-82a3-4c53-901c-d41dec75505c\" readability=\"32.297794117647\"> <a data-tag=\"security\" href=\"https:\/\/www.theregister.com\/tag\/security\" class=\"lab-article-section-link\"> <\/p>\n<p class=\" lab-article-section lab-article-section-top \"> security <\/p>\n<p> <\/a> <\/p>\n<p class=\"subtitle below\"> Chained Zammad flaws enabled session hijacking, code execution, and root escalation in seconds <\/p>\n<\/p><\/div>\n<div data-element-guid=\"4c9dc5d9-c886-4348-bf4a-01d0dc71377d\" readability=\"128.07007007007\"> <!-- placeholder(#1) --> <\/p>\n<p>AI agents hacked the hackers &#8211; the Dutch Institute for Vulnerability Disclosure (DIVD) &#8211; via two zero-day bugs in its Zammad support platform, abusing the flaws to hijack sessions, run code remotely as the local zammad user, and escalate privileges to root.<\/p>\n<p>The chained exploits took just seconds to move from session hijacking to root access, and on Thursday, the nonprofit bug hunting organization said the miscreants stole data belonging to its volunteer security researchers, including DIVD email addresses and potentially other contact details.<\/p>\n<p>\u201cWe\u2019re still investigating exactly which data of which volunteers is affected,\u201d DIVD said in its <a href=\"https:\/\/csirt.divd.nl\/cases\/DIVD-2026-00014\/overview_data_investigation\/\">incident report<\/a>. \u201cFor DIVD volunteers (and others) this means a higher risk of social engineering, because this makes it easier for someone to pose as a DIVD\u2019er.\u201d<\/p>\n<p>A subsequent LinkedIn <a href=\"https:\/\/www.linkedin.com\/posts\/divd-nl_this-is-probably-the-most-painful-and-awkward-activity-7511448012582387714-W3cT?utm_source=share&amp;utm_medium=member_desktop&amp;rcm=ACoAAAX3rawBPm6RIM1LZlSs7tFoRQis8-XnEUo\">post<\/a> advised anyone receiving an email or contact request from someone at DIVD \u201cthat feels slightly off\u201d to verify that it\u2019s legit by emailing communications@divd.nl.<\/p>\n<p>DIVD is also a CVE Numbering Authority (CNA), and it assigned CVE IDs to the now-public security holes in Zammad, an open-source helpdesk and customer support ticketing system. They are <a href=\"https:\/\/csirt.divd.nl\/cves\/CVE-2026-102489\">CVE-2026-102489<\/a> and<a href=\"https:\/\/csirt.divd.nl\/cves\/CVE-2026-102490\"> CVE-2026-102490<\/a>, and both bugs received CVSS 4.0 scores of 9.4, when assessed in the chained attack scenario.<\/p>\n<p>CVE-2026-102489 enables unauthenticated attackers to achieve remote code execution and leak user sessions, while CVE-2026-102490 allows a local user to elevate their privileges to root.&nbsp;<\/p>\n<p>Zammad versions 6.3.0 to 6.5.4 are vulnerable to CVE-2026-102489, and it also exists in versions 7.0.0 through 7.1.3 &#8211; but it\u2019s not exploitable \u201cdue to environment conditions,\u201d according to DIVD\u2019s advisory.<\/p>\n<p>All Zammad versions are vulnerable to CVE-2026-102490. DIVD advises \u201call users of Zammad to upgrade to version 7 of Zammad or to take it offline.\u201d<\/p>\n<h3>What happened<\/h3>\n<p>According to the nonprofit\u2019s <a href=\"https:\/\/csirt.divd.nl\/cases\/DIVD-2026-00014\/\">timeline<\/a>, the attack happened on September 21, when &#8220;malicious actors\u201d broke into its IT system via the two zero-days in its ticketing support software.<\/p>\n<p>The bug hunters discovered the attackers the following day, blocked access to all of its data center systems, and formed an incident response team with Merlon Security.<\/p>\n<p>On September 24, DIVD reported the Zammad vulnerability to the vendor, notified the Dutch Data Protection Authority and the National Cyber Security Centre about the incident, and discussed its options with police. It also <a href=\"https:\/\/www.linkedin.com\/posts\/security-people-always-say-its-not-a-matter-share-7508986128520261632-bafs\/\" target=\"_blank\" rel=\"nofollow\">posted its first disclosure<\/a> on LinkedIn.<\/p>\n<p>\u201cIt took us (almost) seven years but we can now say that we&#8217;re the hackers that got hacked,\u201d the post said, adding that DIVD remained committed to handling the incident in \u201cthe way we think it should be handled. That is open, transparent and honest, even if it sucks.\u201d<\/p>\n<h3>&#8216;Modus operandi&#8217; indicates agentic AI<\/h3>\n<p>DIVD also noted that its team had never seen an attack like this before.&nbsp;<\/p>\n<p>\u201cThis is an attack we have not seen before,\u201d according to the post. \u201cNot because it\u2019s our first, but because the modus operandi indicates that this is an agentic AI powered attack.\u201d<\/p>\n<p>The attack was&nbsp;&#8220;loud and very very messy,&#8221; DIVD <a href=\"https:\/\/www.linkedin.com\/posts\/divd-nl_in-every-crisis-you-work-with-whatever-you-activity-7510363579972206592-KeT4?utm_source=share&amp;utm_medium=member_desktop&amp;rcm=ACoAAAX3rawBPm6RIM1LZlSs7tFoRQis8-XnEUo\" rel=\"nofollow\">said<\/a>. &#8220;We could see the agent working automated, because after every action it decided the next step itself, at the speed of light and sloppy logic or pattern.&#8221;<\/p>\n<p>Subsequent <a href=\"https:\/\/www.linkedin.com\/posts\/divd-nl_wie-jarig-is-trakteert-today-is-our-birthday-activity-7509723920586153984-SU4j?utm_source=share&amp;utm_medium=member_desktop&amp;rcm=ACoAAAX3rawBPm6RIM1LZlSs7tFoRQis8-XnEUo\" rel=\"nofollow\">posts with screenshots of logs<\/a> found during the investigation reveal embedded notes found in the attack script &#8211; another indication that this was an agentic operation or at least AI-enabled. <\/p>\n<p> \u201cWhat human attacker leaves notes to themself in their scripts, explaining why what they&#8217;re doing is okay and really not phishing? The AI just got a task and keeps justifying its own actions in the code as comments, a human wouldn\u2019t care less,&#8221; the post said. &#8220;Who has time for that anyway?\u201d<\/p>\n<h3>If only all orgs responded to hacks like this<\/h3>\n<p>While the investigation remains ongoing, security researchers applauded DIVD for its transparency in disclosing and responding to the hack.<\/p>\n<p>\u201cKudos to DIVD for their level of honesty and transparency working through their active incident and investigation,\u201d VulnCheck security researcher Patrick Garrity posted on LinkedIn. \u201cIt would be nice if all organizations were this transparent about their security incidents!\u201d<\/p>\n<p>In a subsequent interview with <span class=\"italic m-italic \" data-lab-italic=\"italic\">The Register<\/span>, Garrity said he applauded DIVD\u2019s \u201cbrutal honesty\u201d about the breach. \u201cThey&#8217;re eating their own dog food, which is great, and getting information out quickly to other organizations that potentially use this product so they can take action before they get hit.\u201d\u00ae<\/p>\n<\/p><\/div>\n<p><img decoding=\"async\" src=\"https:\/\/image.theregister.com\/?imageId=5300669&#038;width=800\">READ MORE <a href=\"https:\/\/www.theregister.com\/security\/2026\/10\/01\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/5300652\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> Chained Zammad flaws enabled session hijacking, code execution, and root escalation in seconds READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[307],"class_list":["post-61449","post","type-post","status-publish","format-standard","hentry","category-the-register","tag-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AI agents hacked the hackers, stealing email addresses from security research org 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AI agents hacked the hackers, stealing email addresses from security research org 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-01T21:26:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/image.theregister.com\/5300669.jpg?imageId=5300669&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"AI agents hacked the hackers, stealing email addresses from security research org\",\"datePublished\":\"2026-10-01T21:26:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\\\/\"},\"wordCount\":759,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/image.theregister.com\\\/5300669.jpg?imageId=5300669&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683\",\"keywords\":[\"Security\"],\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\\\/\",\"name\":\"AI agents hacked the hackers, stealing email addresses from security research org 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/image.theregister.com\\\/5300669.jpg?imageId=5300669&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683\",\"datePublished\":\"2026-10-01T21:26:42+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\\\/#primaryimage\",\"url\":\"https:\\\/\\\/image.theregister.com\\\/5300669.jpg?imageId=5300669&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683\",\"contentUrl\":\"https:\\\/\\\/image.theregister.com\\\/5300669.jpg?imageId=5300669&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"AI agents hacked the hackers, stealing email addresses from security research org\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AI agents hacked the hackers, stealing email addresses from security research org 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/","og_locale":"en_US","og_type":"article","og_title":"AI agents hacked the hackers, stealing email addresses from security research org 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2026-10-01T21:26:42+00:00","og_image":[{"url":"https:\/\/image.theregister.com\/5300669.jpg?imageId=5300669&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"AI agents hacked the hackers, stealing email addresses from security research org","datePublished":"2026-10-01T21:26:42+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/"},"wordCount":759,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/#primaryimage"},"thumbnailUrl":"https:\/\/image.theregister.com\/5300669.jpg?imageId=5300669&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683","keywords":["Security"],"articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/","url":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/","name":"AI agents hacked the hackers, stealing email addresses from security research org 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/#primaryimage"},"thumbnailUrl":"https:\/\/image.theregister.com\/5300669.jpg?imageId=5300669&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683","datePublished":"2026-10-01T21:26:42+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/#primaryimage","url":"https:\/\/image.theregister.com\/5300669.jpg?imageId=5300669&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683","contentUrl":"https:\/\/image.theregister.com\/5300669.jpg?imageId=5300669&amp;x=0&amp;y=0&amp;cropw=100&amp;croph=100&amp;panox=0&amp;panoy=0&amp;panow=100&amp;panoh=100&amp;width=1200&amp;height=683"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.threatshub.org\/blog\/tag\/security\/"},{"@type":"ListItem","position":3,"name":"AI agents hacked the hackers, stealing email addresses from security research org"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/61449","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=61449"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/61449\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=61449"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=61449"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=61449"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}