A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

The Hacker News - Sep 23, 2026

The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push to, including main, and can start CI/CD jobs that run as you. GitLab shows each user this address behind a button labeled "Email work item to this project." Mail sent to it opens an issue in that project, authored

Read full article

More News

Millions of lettuces ruined by UK aphid outbreak

Millions of lettuces ruined by UK aphid outbreak

Growers are facing losses of £10m, as 30 million heads of lettuce will be rendered unusable.

Sep 23, 2026See more

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The chain, which CERT Polska calls MikroTrick,...

Sep 23, 2026See more

Pornhub investigated over its age checks

Pornhub investigated over its age checks

The regulator says it has concerns over how the site is relying on third party checks provided by Apple for some users.

Sep 23, 2026See more

Self-Driving Cars Are Getting Better. The Risks Are Getting Bigger.

Self-Driving Cars Are Getting Better. The Risks Are Getting Bigger.

Self-driving systems are getting so good that drivers may overestimate the technology and not be prepared to respond when something goes wrong.

Sep 23, 2026See more

Chris Wright Sells Trump’s ‘Energy Dominance’ Vision

Chris Wright Sells Trump’s ‘Energy Dominance’ Vision

Energy Secretary Chris Wright is pitching a future of fossil fuel abundance. It’s not always an easy sell while war drags on and oil prices surge.

Sep 23, 2026See more

Pacing problem: can AI fears overcome US-China race dynamics and force a slowdown?

Pacing problem: can AI fears overcome US-China race dynamics and force a slowdown?

When the presidents of the United States and China meet in Washington, the world will be watching to see whether their two countries can make good on their agreement to...

Sep 23, 2026See more

The science of the perfect family: Parents with two daughters report the highest levels of happiness, study finds

The science of the perfect family: Parents with two daughters report the highest levels of happiness, study finds

It's a question many couples grapple with - how many children should you have? Now, a study has revealed that if you want to be truly happy, two daughters should...

Sep 23, 2026See more

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can...

Sep 23, 2026See more

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for...

Sep 23, 2026See more

Judge Dismisses Unusual Climate Suit Claiming Oil Giants Broke Antitrust Law

Judge Dismisses Unusual Climate Suit Claiming Oil Giants Broke Antitrust Law

The lawsuit, filed by Michigan, claimed oil companies colluded to obstruct solar power and to misrepresent climate risks, making energy costlier.

Sep 23, 2026See more

Electric car drivers face paying 'tyre tax' as heavy batteries and engine power DOUBLE the risk of defects

Electric car drivers face paying 'tyre tax' as heavy batteries and engine power DOUBLE the risk of defects

Electric cars are nearly twice as likely to suffer tyre defects compared to petrol vehicles, new research suggests.

Sep 23, 2026See more

Scientists detect radio signals coming directly from an exoplanet for the first time

Scientists detect radio signals coming directly from an exoplanet for the first time

Radio signals coming directly from an exoplanet, a planet outside the solar system, have been detected for the very first time.

Sep 23, 2026See more

Recommended