AI agents hacked the hackers, stealing email addresses from security research org

A security research organization was breached through two Zammad zero-days that enabled session hijacking, remote code execution, and root escalation in seconds, underscoring how quickly exposed support and collaboration platforms can become enterprise-wide attack paths. For CIOs and technology leaders, the strategic takeaway is that AI-enabled attackers may accelerate exploitation and amplify social engineering risk, making rapid patching, platform hardening, identity/session controls, and incident transparency critical for IT organizations.