Mmastodon TechnologyCybersecurity first seen 11 h ago, last 11 h ago, peak #5

Dutch vulnerability disclosure institute DIVD breached via Zammad zero-days

Original: ⚠️📢 The Dutch Institute for Vulnerability Disclosure (DIVD) was breached through 2 # Zammad 0-days in what it describes

The Dutch Institute for Vulnerability Disclosure (DIVD), an organisation that itself reports security flaws, says it was hacked through two zero-day vulnerabilities in the Zammad helpdesk platform. The attackers allegedly used an 'agentic AI-powered attack' to achieve code execution and root access. The irony of a vulnerability disclosure body being breached has drawn wide attention in the cybersecurity community.

Why now: The attackers reportedly used AI-driven automation and zero-days to breach an organisation dedicated to vulnerability disclosure, an ironic and unusual escalation in offensive hacking.

DIVDZammadHackread

Open on mastodon →

Evidence

• ⚠️📢 The Dutch Institute for Vulnerability Disclosure (DIVD) was breached through 2 # Zammad 0-days in what it describes as an “agentic AI-powered attack,” leading to code execution and root access. Listen/Read: https:// hackread.com/dutch-institute-v… · Hackread@mstdn.social

API: https://socialmediatrends-api.osmike.com/v1/trends/857394