The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. [...]
DIVD says Zammad zero-days enabled AI-driven network breach
Summary + source link. No paywalls, no tracking.