An AI agent broke into a Dutch vulnerability-disclosure nonprofit through two Zammad zero-days
Ourtake
Volunteer contact details were taken, and the nonprofit's own team says some damage was already done.
What happened
DIVD says attackers used an agentic AI attack to exploit two Zammad zero-days in its helpdesk platform. The attackers gained root access and exfiltrated data, including volunteer email addresses. Network segmentation contained the intrusion, though some damage was already done.