CyberNotableReportedDeveloping
4.8
Zammad zero-days chained in AI-assisted DIVD hack: session hijack, RCE, root
SecurityWeekLO·NL·3 days ago
The Dutch Institute for Vulnerability Disclosure (DIVD) reported that attackers breached its network by chaining two zero-day vulnerabilities in the open-source Zammad ticketing system. The attack reportedly leveraged AI-driven techniques, marking a notable escalation in cyber threat sophistication. Details on the vulnerabilities and patch status remain limited, but the incident underscores risks to security research organizations.