Episode 176: September 24, 2026

This episode digs into the hidden risks lurking in everyday dev tools, AI-powered malware that votes on its next move, and a massive cyberattack where hackers weaponized AI agents to hit a hundred companies at once. Adrian North walks through GitLab's accidental credential leak, malware with a committee structure, and why your security team might not be fast enough anymore. Stories covered: - A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You (The Hacker News) - https://thehackernews.com/2026/09/a-leaked-gitlab-issue-email-address.html - This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move (The Hacker News) - https://thehackernews.com/2026/09/windows-malware-is-built-to-let-up-to.html - Chinese hacker deployed Anthropic and Deepseek and Moonshot AI agents in massive 100-company cyberattack - oodaloop.com (oodaloop.com) - https://news.google.com/rss/articles/CBMi1gFBVV95cUxQNTZZYno2YXpVQjNEeFJlM3FDMDdiRlkzMjZYZV9hb2V4aWd2WGRPeERnUmwwdFRpNlRMWXNQdUhPSkVKNWdHSFJMel9MR3hrX3I5NmU5TnpGSXNOZGxtMElSNTlYMW13WHlwZlVZTl9mbTMwa3paNWtOSE1yOGVJUTB2R0tETzcweU9EcXhmcXg5bm5EOWlJdzM2V19oWGkwNU9HT2VsWVEza09fT3JXbnNfaGQta0tLMGFPMzQ3RnFaMlZHeG8ybWdudThNWi1jQ3Y5dHdR?oc=5 - This 13-Year-Old from Ecuador is Mountain Running’s Rising Star (Trail Runner Mag) - https://www.trailrunnermag.com/people/pema-franchi-is-a-wunderkind-mountain-runner/ - FBI investigating hacking group’s claim of massive breach of agent info - NBC News (NBC News) - https://news.google.com/rss/articles/CBMiswFBVV95cUxQa1E1aVFGdEZMdFVFcjdwRWFvcEFsQ3ZaQjdvcEx5QmdRZlBmYWpDdmptZ3JNUElxSkk5aldBODBWbnpJWlIzTm5wV2FySzc0eGxrTmFoNW5CZDd1S0lneFRjMlNVdVRqYXRoMHRSSTZGQ2x1RGNLMHlOWENyQ0xGbl9sV3NpcU02bWc5VFBmOEpESmo1dVZILV96MXNPb2NJTVFQWGFPZ2U5RVdOUDk4RVR6OA?oc=5 - Check Point warns of hackers exploiting Security Gateway VPN RCE flaw (BleepingComputer) - https://www.bleepingcomputer.com/news/security/check-point-warns-of-hackers-exploiting-security-gateway-vpn-rce-flaw/