An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system. “Used together, [the two flaws] allowed the attackers to hijack sessions, run code remotely and escalate privileges from the Zammad user to root, in seconds, due to the agentic part of this hack. From there they were able to access other services and read and … More
The post AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
Sentinel Envelope Plus adds software protection without source code changes
BlackFog adds prompt protection and governance for agentic AI
Google says Gemini 4 Argon can find and patch critical software flaws