---
id: 5602
title: "Hackian and the Ghosts in Your Business Logic"
source_domain: ethiack.com
source_url: "https://ethiack.com/info-hub/research/hackian-ghosts-in-business-logic"
published_at: "2026-02-19T00:00:00Z"
tags: ["bug-bounty", "appsec", "access-control", "ai-pentesting", "business-logic", "sonarqube", "ethiack", "hackian"]
phying_url: "https://phying.com/item/5602"
lang: en
---

# Hackian and the Ghosts in Your Business Logic

## Summary

Ethiack's Hackian agent exploited business-logic flaws scanners miss, chaining a SonarQube branch-metadata permission gap and a second access-control issue to reach private projects it shouldn't see.

## Intelligence Metadata

- **Sources:** ethiack.com
- **Published:** 2026-02-19T00:00:00Z
- **Original:** https://ethiack.com/info-hub/research/hackian-ghosts-in-business-logic
- **Phying News:** https://phying.com/item/5602