{"slug": "ai-agent-used-zammad-zero-days-to-breach-dutch-vulnerability-disclosure-non", "title": "AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit", "summary": "An agentic AI-powered attack breached the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 by exploiting two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system. According to Help Net Security, the two flaws used together let attackers hijack sessions, run code remotely and escalate privileges from the Zammad user to root in seconds, after which they accessed other services and read data.", "body_md": "An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system. “Used together, [the two flaws] allowed the attackers to hijack sessions, run code remotely and escalate privileges from the Zammad user to root, in seconds, due to the agentic part of this hack. From there they were able to access other services and read and … [More](https://www.helpnetsecurity.com/2026/10/01/divd-agentic-ai-attack-breach/) \n\nThe post [AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit](https://www.helpnetsecurity.com/2026/10/01/divd-agentic-ai-attack-breach/) appeared first on [Help Net Security](https://www.helpnetsecurity.com).", "url": "https://wpnews.pro/news/ai-agent-used-zammad-zero-days-to-breach-dutch-vulnerability-disclosure-non", "canonical_source": "https://www.helpnetsecurity.com/2026/10/01/divd-agentic-ai-attack-breach/", "published_at": "2026-10-01 13:13:14+00:00", "updated_at": "2026-10-01 13:14:57.161868+00:00", "lang": "en", "topics": ["ai-safety", "artificial-intelligence", "ai-agents"], "entities": ["Dutch Institute for Vulnerability Disclosure", "DIVD", "Zammad", "Help Net Security"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/ai-agent-used-zammad-zero-days-to-breach-dutch-vulnerability-disclosure-non", "markdown": "https://wpnews.pro/news/ai-agent-used-zammad-zero-days-to-breach-dutch-vulnerability-disclosure-non.md", "text": "https://wpnews.pro/news/ai-agent-used-zammad-zero-days-to-breach-dutch-vulnerability-disclosure-non.txt", "jsonld": "https://wpnews.pro/news/ai-agent-used-zammad-zero-days-to-breach-dutch-vulnerability-disclosure-non.jsonld"}}