AI-Driven Intrusion Exposes Two Critical Zammad Zero-Day Vulnerabilities at Dutch Cybersecurity Institute

The Dutch Institute for Vulnerability Disclosure (DIVD) revealed on September 30 that attackers used an autonomous AI agent to infiltrate its systems through two previously unknown vulnerabilities in Zammad, an open-source customer-support platform. The incident marks a significant escalation in AI-assisted cyberattacks, with the autonomous agent making independent decisions at machine speed while leaving extensive operational evidence of its sloppy execution.