An Autonomous AI Agent Just Breached a Vulnerability Disclosure Nonprofit by Chaining Two Zammad Zero-Days

On September 21, 2026, the Dutch Institute for Vulnerability Disclosure (DIVD), a nonprofit that scans the internet for security flaws and notifies system owners, was breached through its own infrastructure. The organization disclosed the…