DIVD identifies Zammad zero-day chain behind network breach

Image: Primary

Published Wednesday, September 30, 2026 · 8:09 PM EDT

The Dutch Institute for Vulnerability Disclosure says two previously unknown Zammad vulnerabilities enabled the breach of its network. The flaws, CVE-2026-102489 and CVE-2026-102490, allowed session hijacking, remote code execution and escalation to root privileges. DIVD says an autonomous AI agent exploited the chain and accessed and exfiltrated data within seconds. It reconstructed the incident using explanations the agent left behind. Network segmentation and incident response prevented deeper movement, but the investigation continues. DIVD notified Zammad and recommends that users upgrade to version 7, which it considers safe, or take vulnerable instances offline.

Sources

BleepingComputer

Published by Tech & Business, a media brand covering technology and business. This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Products AI

Databento raises $100M Series C at $1.1B valuation

Databento raised a $100M Series C at a $1.1B valuation, FinTech Global reported. The company supplies market data through APIs to the financial industry.

Capital

Nvidia reportedly used customer financing to sustain GPU prices

Nvidia pushed for more customer financing deals in mid-to-late 2026 to absorb excess TSMC wafer supply and keep GPU prices high, The Wall Street Journal reported in a profile of interim CEO Colette Kress, relayed by TechSpot.

Security

Fullerton Health says breach compromised about 140,000 work pass records

Fullerton Health said on November 14 that about 140,000 work pass holder records were compromised in a breach of its Migrant Worker Primary Care Plan programme in Singapore. About 43,000 records belonged to people whose work passes were no longer valid, CNA reported.

Capital

Tendrils raises $30M for CPU architecture with thousands of parallel cores

Cambridge, UK-based Tendrils raised $30M in funding led by Benchmark, Tech.eu reported. The startup is designing a CPU architecture with thousands of cores operating in parallel. Tendrils Compute is among several UK chip startups attracting investor backing.

AI Capital

Luminal raises $25 million Series A led by Standard Capital

Luminal raised a $25 million Series A led by Standard Capital, CEO Joe Fioti told Axios Pro. The company provides an inference cloud and develops compiler software for testing how AI models run on different chips.

Capital AI

WhiteMatter raises $20 million Series A for AI agent oversight

WhiteMatter raised a $20 million Series A, Business Insider reported. Founded in 2024, the startup builds AI agents designed to oversee other AI agents, monitoring their file access, software use, decision making, and actions. It calls these oversight systems "guardian" agents.