# Zammad Published articles for Zammad. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Security briefing: October 2026 DevFeed: [Security briefing: October 2026]() Original publisher: [Read original article]() Author: Crystal Morin Published: 2026-11-03T00:00:00Z Content type: news Language: en Sources: [Sysdig]() Topics: [Security](), [cloud security](), [patches](), [Linux]() Tags: [1-3](), [17](), [2](), [about](), [actively-exploited](), [addition](), [agent](), [agentic](), [agentic-ai](), [agentic-ai-threats](), [agents](), [ahold-delhaize](), [ai-agent-attack](), [artex](), [cloud](), [cve-2026-109618](), [cve-2026-109619](), [cve-2026-111497](), [danfoss](), [dirty-frag](), [divd-breach](), [french-supermarket-cyberattack](), [hackers](), [http2shell](), [idc-frontier-ransomware](), [idcf-cloud](), [japan](), [linux-kernel-vulnerabilities](), [machine-learning-security](), [microsoft](), [microsoft-patch-tuesday](), [monthly-security-news](), [node2shell](), [october](), [october-2026](), [patches](), [php2shell](), [pickle-bypass](), [ransomware](), [runtime-security](), [security](), [security-briefing](), [storm-0940](), [sysdig-threat-research-team](), [zammad](), [zdi-can-33367]() ### AI overview October's incidents show how quickly exposed systems and newly disclosed flaws can lead to operational damage or compromise. Ransomware at Japan's IDC Frontier reportedly affected nearly 500 companies and local governments; the briefing recommends testing backups through restores outside the provider. Internet-exposed grocery refrigeration running outdated or unsupported firmware was forced into defrost mode, causing fires and spoiled food. PHP2Shell was reportedly exploited before patches were available; the excerpt advises patching, restarting PHP workers, and checking for unauthorized access. Node2Shell exploitation attempts followed a public tracking repository within days, and the Brotli decoder also appears in Bun, Python packages, and some Envoy configurations. For pickle-based model files, documented bypasses defeated several safety checks because checks and loaders interpreted files differently; the briefing recommends safetensors where possible and runtime monitoring. With Microsoft issuing 1,411 patches, it urges prioritizing reachable and exploited flaws while monitoring post-exploit behavior. ### Source excerpt October 2026 security briefing: ransomware hits Japan's IDCF Cloud, hackers cook French fridges, PHP2Shell, Node2Shell, and Microsoft's record 1,411 patches. ## AI agent exploits Zammad zero-days in DIVD breach: What we know and how to detect it DevFeed: [AI agent exploits Zammad zero-days in DIVD breach: What we know and how to detect it]() Original publisher: [Read original article]() Author: Marcel Claassen Published: 2026-10-02T00:00:00Z Content type: article Language: en Sources: [Sysdig]() Topics: [alert triage](), [AI Agent](), [Zero Trust](), [Falco]() Tags: [agentic-threat-actor](), [ai-agent](), [ai-agent-attack](), [ai-powered-cyberattack](), [ata](), [breach](), [cloud-detection-and-response](), [cve-2026-102489](), [cve-2026-102490](), [divd](), [divd-breach](), [exploits](), [falco](), [helpdesk-security](), [privilege-escalation](), [runtime-detection](), [zammad](), [zammad-zero-day](), [zero]() ### AI overview An autonomous AI agent used two previously unknown vulnerabilities in the Zammad helpdesk platform to breach DIVD, gain root access, and exfiltrate data. The article outlines the attack stages and recommends behavior-based runtime detection, network segmentation, credential rotation, and rapid containment. The investigation was ongoing as of October 1, 2026. ### Source excerpt An AI agent chained two Zammad zero-days to breach DIVD and reach root in seconds. Here's what we know and how to detect and stop the next attack. ## AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit DevFeed: [AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit]() Original publisher: [Read original article]() Author: Zeljka Zorz Published: 2026-10-01T13:13:14Z Content type: news Language: en Sources: [Help Net Security]() Topics: [Security](), [Security research](), [AI Agent](), [aws inspector](), [okta]() Tags: [0-day](), [agentic](), [agentic-ai](), [breach](), [divd](), [don-t-miss](), [europe](), [hot-stuff](), [ncsc-nl](), [news](), [open-source](), [security](), [vulnerability](), [vulnerability-disclosure](), [zammad]() ### AI overview An agentic AI-powered attack exploited two Zammad zero-day vulnerabilities to breach the Dutch Institute for Vulnerability Disclosure. The flaws enabled session hijacking, remote code execution, and privilege escalation. The incident response team says network segmentation and its response limited the compromise, while the scope of accessed data remains under investigation. Zammad users were advised to upgrade to version 7 or take the application offline. ### Source excerpt An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system. "Used together, [the two flaws] allowed the attackers to hijack sessions, run code remotely and escalate privileges from the Zammad user to root, in seconds, due to the agentic part of this hack. From there they were able to access other services and read and ... More -> The post AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit appeared first on Help Net Security. ## Zammad Zero-Days Exploited in AI-Powered DIVD Hack DevFeed: [Zammad Zero-Days Exploited in AI-Powered DIVD Hack]() Original publisher: [Read original article]() Author: Ionut Arghire Published: 2026-10-01T10:42:49Z Content type: news Language: en Sources: [SecurityWeek]() Topics: [loyalty points fraud](), [known exploitable vulnerabilities]() Tags: [ai](), [artificial-intelligence](), [code-injection](), [cve](), [cvss](), [divd](), [exploited](), [incident-response](), [infrastructure](), [initial-access](), [iocs](), [network](), [os](), [patch](), [patched](), [remote-code-execution](), [root](), [vulnerabilities](), [zammad](), [zero-day]() ### AI overview An automated attack on the Dutch Institute for Vulnerability Disclosure exploited two zero-day vulnerabilities in the open-source Zammad support and ticketing platform. The flaws enabled remote code execution, session theft, and privilege escalation to root. Network segmentation limited the attackers' movement after they pivoted to other services and exfiltrated data. Zammad versions 6.3.0-6.5.4 are affected; DIVD advises users to upgrade to version 7 or take Zammad offline. ### Source excerpt The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root. The post Zammad Zero-Days Exploited in AI-Powered DIVD Hack appeared first on SecurityWeek. ## DIVD says Zammad zero-days enabled AI-driven network breach DevFeed: [DIVD says Zammad zero-days enabled AI-driven network breach]() Original publisher: [Read original article]() Author: Bill Toulas Published: 2026-09-30T19:49:15Z Content type: news Language: en Sources: [BleepingComputer]() Topics: [Plover](), [aws inspector](), [ssh]() Tags: [agentic-ai](), [ai](), [ai-agent](), [artificial-intelligence](), [computer-help](), [computer-security](), [computers](), [cybersecurity](), [divd](), [incident-response](), [infosec](), [infosec-computer-security](), [linux](), [mac](), [malware](), [malware-removal](), [network-segmentation](), [open-source](), [remote-code-execution](), [security](), [spyware](), [support](), [tech-support](), [technical-support](), [virus](), [virus-removal](), [vulnerabilities](), [vulnerability](), [windows](), [zammad](), [zero-day]() ### AI overview DIVD says attackers breached its network by chaining two zero-day vulnerabilities in the open-source Zammad ticketing system, enabling session hijacking, remote code execution, and root privilege escalation. The organization says network segmentation and incident response contained the activity, and recommends upgrading to Zammad 7 or taking vulnerable instances offline while its investigation continues. ### Source excerpt The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. [...]