A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

The Hacker News - Sep 23, 2026

The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push to, including main, and can start CI/CD jobs that run as you. GitLab shows each user this address behind a button labeled "Email work item to this project." Mail sent to it opens an issue in that project, authored

Read full article

MORE NEWS

Pornhub investigated over its age checks

Sep 23, 2026

Pornhub investigated over its age checks

The regulator says it has concerns over how the site is relying on third party checks provided by Apple for some users.

Self-Driving Cars Are Getting Better. The Risks Are Getting Bigger.

Sep 23, 2026

Self-Driving Cars Are Getting Better. The Risks Are Getting Bigger.

Self-driving systems are getting so good that drivers may overestimate the technology and not be prepared to respond when something goes wrong.

Chris Wright Sells Trump’s ‘Energy Dominance’ Vision

Sep 23, 2026

Chris Wright Sells Trump’s ‘Energy Dominance’ Vision

Energy Secretary Chris Wright is pitching a future of fossil fuel abundance. It’s not always an easy sell while war drags on and oil prices surge.

Pacing problem: can AI fears overcome US-China race dynamics and force a slowdown?

Sep 23, 2026

Pacing problem: can AI fears overcome US-China race dynamics and force a slowdown?

When the presidents of the United States and China meet in Washington, the world will be watching to see whether their two countries can make good on their agreement to work towards “constructive strategic stability”. In the sixth part of a series, Chong Ming Lee and Vincent Chow examine what’s behind the call for “pacing” by American AI giants – effectively a slowdown in development – and how the phenomenon is being viewed in China. After years of rapid development, leading US AI executives are...

The science of the perfect family: Parents with two daughters report the highest levels of happiness, study finds

Sep 23, 2026

The science of the perfect family: Parents with two daughters report the highest levels of happiness, study finds

It's a question many couples grapple with - how many children should you have? Now, a study has revealed that if you want to be truly happy, two daughters should be your goal.

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

Sep 23, 2026

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and crypto wallet data. Talos has not seen this setup work from start to finish, and the public version of the malware does not work as it is.

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Sep 23, 2026

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According to reports from Aikido, SafeDep, Socket, and StepSecurity, the libraries in question below - @memtensor/memos-cloud-openclaw-plugin versions

Judge Dismisses Unusual Climate Suit Claiming Oil Giants Broke Antitrust Law

Sep 23, 2026

Judge Dismisses Unusual Climate Suit Claiming Oil Giants Broke Antitrust Law

The lawsuit, filed by Michigan, claimed oil companies colluded to obstruct solar power and to misrepresent climate risks, making energy costlier.

Electric car drivers face paying 'tyre tax' as heavy batteries and engine power DOUBLE the risk of defects

Sep 23, 2026

Electric car drivers face paying 'tyre tax' as heavy batteries and engine power DOUBLE the risk of defects

Electric cars are nearly twice as likely to suffer tyre defects compared to petrol vehicles, new research suggests.

Scientists detect radio signals coming directly from an exoplanet for the first time

Sep 23, 2026

Scientists detect radio signals coming directly from an exoplanet for the first time

Radio signals coming directly from an exoplanet, a planet outside the solar system, have been detected for the very first time.

Autumn is officially here…so why is it still so hot? Scientists blame the growing Super El Niño for the strangely warm weather - and say it could last for weeks

Sep 23, 2026

Autumn is officially here…so why is it still so hot? Scientists blame the growing Super El Niño for the strangely warm weather - and say it could last for weeks

The growing Super El Niño is starting to shape global weather, having smashed temperature records months before its expected peak.

Trump offloads tens of millions in AI, tech shares, led by Microsoft, Amazon, Meta

Sep 23, 2026

Trump offloads tens of millions in AI, tech shares, led by Microsoft, Amazon, Meta

US President Donald Trump has sold shares worth tens of millions of US dollars in major tech companies, including Microsoft, Amazon and Meta Platforms in July, a move that may reveal some of his views on the sector, especially as competition with China intensifies. Microsoft topped the list of sales transactions, with six trades totalling up to US$31 million, according to filings disclosed by the US Office of Government Ethics on Tuesday. The data detailed Trump’s trading activity in July,...

RECOMMENDED

Science Thread

Science Thread delivers quality and fascinating science and technology content that matters on a daily basis and makes it go viral.

ABOUT US
Sign Up

Copyright © 2015 - 2026 Science Thread. All Rights Reserved.