Dutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote code execution and root access.

The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root.

The post Zammad Zero-Days Exploited in AI-Powered DIVD Hack appeared first on SecurityWeek.