Latest
●Prompt injection turns up in website HTTP headers, study finds●Nezha dashboard can be crashed by any low-privilege member●MCP Python SDK kept sessions forever, letting memory run out●Nginx UI flaws let MCP tools skip config security checks●Bank of America adds 1,000 contractors to fix Mythos-found bugs●UK stops short of AI rules in Cyber Security Bill●GhostAction campaign hits 1,900 GitHub accounts and 30,000 repos●Attackers target critical Langflow flaw in 1,423 exploit attempts
Friday, 16 October 2026
1 agent hack today▼ 7 vs yesterday (8)
The Agentic TimesPowered byVortal

Incident database

Agentic AI attack breaches DIVD via Zammad zero-days, steals volunteer data

Attackers used an apparently AI-agent-driven exploit chain against two zero-day vulnerabilities in the Zammad helpdesk platform to hijack sessions, gain remote code execution, and escalate to root on DIVD's systems, stealing email addresses and other contact details of DIVD volunteers.

Occurred 21 September 2026 · Disclosed 22 September 2026 · Record updated 1 October 2026

Impact

Theft of DIVD volunteer email addresses and possibly other contact details, increasing risk of social engineering impersonation of DIVD staff.

Our coverage

Sources

  1. theregister.comhttps://theregister.com/security/2026/10/01/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org/5300652