DIVD

The Dutch Institute for Vulnerability Disclosure (DIVD) is a nonprofit organization that coordinates the responsible reporting of security flaws to vendors and affected organizations, ensuring vulnerabilities are fixed before hackers can exploit them. For governance and compliance teams, DIVD matters because it publishes vulnerability advisories and maintains disclosure timelines that help you understand security risks in software your organization uses and their severity levels. Their work directly influences patch management priorities and informs your organization's incident response planning.

1 item

ResearchEU2026-10-03

AI Agent Used as Attack Weapon in Breach of Security Research Org DIVD

Attackers attributed to agentic AI breached the Dutch Institute for Vulnerability Disclosure (DIVD), exploiting two previously unknown flaws in its Zammad support platform. The attack hijacked user sessions, ran unauthorized code, and reached the highest level of system access within seconds. Volunteer researcher email addresses were stolen, raising social engineering risks for the organization and its networks.

agentic AI AI incident zero-day exploit AI-enabled attack DIVD incident response social engineering EU