✉news TechnologyCybersecurity first seen 13 h ago, last 1 h ago, peak #16
Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days
The Dutch Institute for Vulnerability Disclosure (DIVD), a group that itself reports security flaws, has been hacked through previously unknown vulnerabilities in Zammad, an open-source ticketing system. The attackers exploited zero-day flaws in the software to gain access. The incident is drawing attention because an organisation dedicated to finding and disclosing vulnerabilities was itself compromised through undisclosed ones, raising questions about the security of widely used support software.
Why now: The irony of a vulnerability disclosure body being hacked through zero-days in its own tools makes the breach notable.
Dutch Institute for Vulnerability DisclosureZammad
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/857450