DIVD breach traced to Zammad software zero-days and AI attacker

The Dutch Institute for Vulnerability Disclosure says an AI-driven attack breached its network by exploiting two previously unknown flaws in the Zammad helpdesk platform. The vulnerabilities enabled remote code execution and privilege escalation from the compromised software. DIVD reports that the attacker, guided by an autonomous AI agent, accessed sensitive data and moved laterally within seconds. DIVD recommends immediate updates or shutting down vulnerable Zammad systems.

• Attack used a chain of two Zammad zero-days
• AI agent conducted the intrusion autonomously
• Flaws enabled remote code execution and privilege escalation
• DIVD recommends upgrading to Zammad version 7 or disconnecting systems
• Incident allowed rapid theft and access to sensitive data