Two Zammad zero-days exploited in attack on Dutch Institute for Vulnerability Disclosure

The Dutch non-profit Dutch Institute for Vulnerability Disclosure (DIVD) said that two zero-day vulnerabilities in its Zammad helpdesk platform were exploited in an attack. DIVD assessed that agentic artificial intelligence was used in the attack.