DIVD says Zammad zero-days enabled AI-driven network breach
6 Articles
6 Articles
BleepingComputer
cybernoz.comDIVD says Zammad zero-days enabled AI-driven network breach
The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. [...]
An analysis page attributes to an AI autonomous agent an intrusion against the Dutch DIVD institute through two critical flaws of Zammad. However, the date of publication it records and the lack of independent verification obliges the account to be treated as a statement pending confirmation, not as an established fact.
An Autonomous AI Agent Just Breached a Vulnerability Disclosure Nonprofit by Chaining Two Zammad Zero-Days
On September 21, 2026, the Dutch Institute for Vulnerability Disclosure (DIVD), a nonprofit that scans the internet for security flaws and notifies system owners, was breached through its own infrastructure. The organization disclosed the intrusion on September 24, characterizing it as an agentic AI-powered attack. On September 30, DIVD identified the attack vector: two previously […]
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
