Decrypted: The UK Cyber Briefing
Oct 1, 2026 · 5 min · 5 segments
The Dutch Institute for Vulnerability Disclosure was breached through two unknown Zammad flaws, in what it describes as a hack through AI agents. The Secure by Design lesson is about helpdesk…
What happened? According to DIVD's case file, the first malicious access came on 21st of September.
DIVD spotted it the next day.
It disconnected its data center systems and brought in Merlin Security for forensics.
It reported the flaws to Zammad on 24th September and began warning other users from 26th of September.
The two bugs chained together.
DIVD lists it as affecting versions six point three point zero through six point five point four, with limited exploitability in seven point zero point zero to seven point one point three.
DIVD lists it as affecting every version from one point five point zero to seven point one point zero dash alpha.
BleepingComputer reports the pair let the attacker climb from nothing to root in seconds.
And also, the hotel analogy.
Think of a hotel.
The first floor is a stolen staff lanyard.
It gets you into the building as a cleaner.
The second is a master key left in the cleaner's cupboard.
Together, they open every room, and an automated guest can try every door faster than any night porter can react.
What happened? According to DIVD's case file, the first malicious access came on 21st of September.
DIVD spotted it the next day.
It disconnected its data center systems and brought in Merlin Security for forensics.
It reported the flaws to Zammad on 24th September and began warning other users from 26th of September.
The two bugs chained together.
DIVD lists it as affecting versions six point three point zero through six point five point four, with limited exploitability in seven point zero point zero to seven point one point three.
DIVD lists it as affecting every version from one point five point zero to seven point one point zero dash alpha.
BleepingComputer reports the pair let the attacker climb from nothing to root in seconds.
And also, the hotel analogy.
Think of a hotel.
The first floor is a stolen staff lanyard.
It gets you into the building as a cleaner.
The second is a master key left in the cleaner's cupboard.
Together, they open every room, and an automated guest can try every door faster than any night porter can react.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.
