Zammad zero-days chained in AI-assisted DIVD hack: session hijack, RCE, root

Unspecified zero-day vulnerabilities in Zammad were chained to hijack sessions, achieve remote code execution, and escalate privileges to root. The attack is attributed to DIVD, a Dutch security group, and reportedly involved AI-powered techniques. Details on the flaws and affected versions remain undisclosed, but the exploitation of multiple zero-days in a coordinated chain indicates a sophisticated operation.