Dutch Institute for Vulnerability Disclosure (DIVD) hit by network compromise

Related Happenings

Timeline

1. 30.09.2026 22:49 2 articles · 12d ago

   DIVD identifies Zammad zero-days behind network breach

   Technical Analysis Update

   DIVD says its network breach came from chaining two zero-day flaws in the open-source Zammad ticketing system, now tracked as CVE-2026-102489 and CVE-2026-102490. The flaws enabled session hijacking, remote code execution, and privilege escalation from the Zammad user to root, and the attacker used the access to read and exfiltrate data from DIVD's systems in seconds. Network segmentation and incident response kept the threat actor from moving deeper into the network, while DIVD notified Zammad, is alerting other users of vulnerable instances, and recommends upgrading to version 7 or taking the instance offline.

   Show sources

   • DIVD says Zammad zero-days enabled AI-driven network breach — www.bleepingcomputer.com — 30.09.2026 22:49
   • Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure — www.infosecurity-magazine.com — 02.10.2026 11:25

   Open in new tab
2. 29.09.2026 18:39 2 articles · 13d ago

   DIVD says an AI agent breached its network

   Initial Disclosure

   DIVD said it had been hacked after seven years of uneventful operations, describing the intrusion as an AI-driven attack that exploited a technical vulnerability in an undisclosed system and then used an autonomous AI agent for post-exploitation activity. The organization launched an investigation and informed the police, the Autoriteit Persoonsgegevens, and the National Cyber Security Center (NCSC).

   Show sources

   • Automated AI agent used to breach cybersecurity nonprofit DIVD — www.bleepingcomputer.com — 29.09.2026 18:39
   • Automated AI agent used to breach cybersecurity nonprofit DIVD — www.bleepingcomputer.com — 29.09.2026 18:39

   Open in new tab