✉news TechnologyCybersecurity first seen 1 d ago, last 3 h ago, peak #16
Dutch Institute for Vulnerability Disclosure Hit by Zammad Zero-Day Breach
Original: Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days
The Dutch Institute for Vulnerability Disclosure (DIVD), a Dutch non-profit that coordinates the reporting of security flaws, has itself been breached through zero-day vulnerabilities in the open-source customer support platform Zammad. Attackers exploited previously unknown flaws to gain access, prompting an investigation and disclosures by the institute. The incident is drawing attention because an organisation dedicated to finding and reporting vulnerabilities was compromised through unpatched zero-days in third-party software it relied on.
Why now: The irony and security implications of a vulnerability-disclosure body being hacked via zero-day flaws are drawing attention.
Dutch Institute for Vulnerability DisclosureZammadHackread
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/857450