An autonomous AI agent chained two previously unpublished zero-days to gain root on the Dutch Institute for Vulnerability Disclosure (DIVD) in seconds, according to DIVD's incident case file, which re…
CISA added two Zammad zero-days to its Known Exploited Vulnerabilities catalog on October 2 with an October 5 remediation deadline after an AI agent used them to breach the Dutch Institute for Vulnera…
The Dutch Institute for Vulnerability Disclosure (DIVD) disclosed that attackers exploited two zero-day flaws in its Zammad support platform on September 21 to hijack sessions, run remote code as the …
The Dutch Institute for Vulnerability Disclosure (DIVD) disclosed that an automated attacker it describes as behaving like an AI agent breached its Zammad helpdesk on September 21, 2026, exploiting tw…
DIVD reported that its own Zammad instance was compromised through a chain of two zero-days, CVE-2026-102489 for session hijacking and remote code execution as the zammad user and CVE-2026-102490 for …
An agentic AI-powered attack breached the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 by exploiting two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer…
The Dutch Institute for Vulnerability Disclosure (DIVD) disclosed on September 24, 2026 that it was breached through its own infrastructure by an agentic AI-powered attack, and on September 30 identif…
Two zero-day vulnerabilities in the Zammad ticketing system were chained to hijack sessions, execute remote code, and escalate privileges to root in seconds, according to a report on the breach. An au…
The Dutch Institute for Vulnerability Disclosure (DIVD) disclosed that it was breached by hackers who gained access through AI agents exploiting two 0-day vulnerabilities in Zammad, tracked as CVE-202…
Itaruby, a Ruby type checker built in Rust, has found 15 bugs across Discourse, Rails, Zammad, and ruby-lsp, with 7 accepted, according to its developer. The checker, which is not yet released, uses i…