The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days
Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure
About this summary. This is a short excerpt from the description that Infosecurity Magazine published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.infosecurity-magazine.com/news/zerodays-dutch-institute/
Source attribution: headline and facts are from Infosecurity Magazine (infosecurity-magazine.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit
An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an…
Even after PHP2Shell, blast radius matters more than a CVSS score
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the…
Three Japan-Focused Cyberattacks Show How Hackers Use AI
Three Japan-focused cyberattacks show how AI helps hackers scale operations, while exploiting old systems and weak security remains key. In autumn 2026, Japanese…
All the security risks Anthropic is worried about before its IPO
Anthropic said its AI systems could drastically reshape the software and cybersecurity sectors in the “near term,” while also laying out a litany of cybersecurity and…
Backporting security fixes to stable releases
The software you are running is almost certainly riddled with known, unfixed security bugs. These bugs can be trivially and quickly exploited by modern AI agents. This…
Agent-to-Agent Synthetic Social Engineering on the Web
arXiv:2610.33411v1 Announce Type: new Abstract: An AI agent can prepare an accurate report and still request an action its user has not authorized. Cooperation across…