Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days

Summary

The Dutch Institute for Vulnerability Disclosure (DIVD) has suffered a security breach due to exploitation of two zero-day vulnerabilities in the Zammad ticketing system. The attack, described as AI-powered, allowed threat actors to achieve remote code execution and gain root access to DIVD's systems.

Entities