DIVD network breached via Zammad zero-days

The Dutch Institute for Vulnerability Disclosure reports that its network was compromised using a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. Attackers leveraged these flaws to achieve automated network access. This incident highlights the risks of unknown software bugs in ticketing platforms, requiring immediate attention from administrators deploying this software.