{"schema_version":"0.8.0","id":"LR-2026-0122","record_version":3,"title":"Agentic AI-powered attack on the Dutch Institute for Vulnerability Disclosure exploited two Zammad zero-day vulnerabilities","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":48.3,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":4.8,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true},"gate_version":"gate-2026-09-30.6","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-10-04","extraction_run_id":null},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":"2026-09-21","date_disclosed":"2026-10-04","incident_class":"security_compromise","failure_class":null,"agent_involved":true,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"An agentic AI-powered attack hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21, exploiting two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"moderate: no cited fact meets a rung's test; the tier is inferred.","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.helpnetsecurity.com/2026/10/04/week-in-review-researcher-breaks-into-microsoft-analytics-service-netscaler-rce-0-day-exploited/","publisher":"news search (Google News index)","date":"2026-10-04","type":"press","title":"Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited - Help Net Security","archived_url":null,"attachment":"first_report"}],"per_field_confidence":{"system.developer":"D","system.autonomy_level":"D","system.deployment_context":"D","event.date_occurred":"C","event.adversarial_actor":"D","event.agent_involved":"C","event.incident_class":"D","event.summary":"D","event.date_disclosed":"A","event.trigger":"D","event.detection_method":"D","impact.severity":"D","context.denominator_available":"D","context.country":"D","impact.severity_because":"D"},"field_citations":{"event.incident_class":[{"source_index":0,"quote":"An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system."}],"event.agent_involved":[{"source_index":0,"quote":"An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system."}],"event.date_occurred":[{"source_index":0,"quote":"An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system."}],"event.adversarial_actor":[{"source_index":0,"quote":"An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system."}],"event.summary":[{"source_index":0,"quote":"An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system."}],"impact.severity":[{"source_index":0,"quote":"AI coding agents leaked 13,000 internal company screenshots to public GitHub repos"}],"event.date_disclosed":[{"source_index":0,"quote":"published: 2026-10-04"}]},"notes_on_gaps":"The single source (Source 0) is a news-search index entry whose only substantive sentence describes an agentic AI-powered attack on DIVD exploiting two zero-day vulnerabilities in Zammad; it does not match the incident headline about AI coding agents leaking 13,000 internal company screenshots to public GitHub repos, and no source in this record supports that headline. No source states the system's model name, version, developer, harness, tools, permissions, autonomy level, guardrails, deployment context, lifecycle stage, integration type, intended use, safeguard state, or production intent, so all [system] fields are omitted. No source states event.trigger, event.detection_method, event.root_cause, event.failure_class, event.responsible_party, event.input_provenance, event.remediation, event.operations_paused, event.precursor_events, event.near_miss, or any timeline items, so those are omitted and no bounds are given. No source states any impact figure, affected count, harm class, data category, or loss range, so [impact] is omitted and severity is null. No source states industry, org size, country, denominator, systemic exposure, shared model id, upstream incident id, incident evidence, regulatory, or coverage details, so [context] is omitted. event.incident_class is written as security_compromise because the source states an attack breached a system boundary; event.agent_involved is true because the source calls the attack agentic AI-powered; event.adversarial_actor is external_attacker because the source describes an attack. event.date_occurred is 2026-09-21 as stated. event.summary is a neutral restatement of the one supported sentence. The story steps caught and done are null because no source answers who first noticed or what was contained, who was told, or what was changed. system.tier: not set; no operator named and deployment_context is not a lab's. impact.severity: carried from record_version 1; no stored answer supports a value. [aggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-09] system.developer: no source names the developer. system.autonomy_level: no source states the arrangement. system.deployment_context: no source states where it ran. event.adversarial_actor: external_attacker. event.incident_class: a source states an attacker, an injected instruction or a misused credential caused the system to act, or that the system's own boundary (sandbox, permissions, weights, accounts) was breached. event.summary: classified from described behaviour. event.trigger: no source states a cause. event.detection_method: no source says who first noticed. context.denominator_available: no denominator is available for this incident. context.country: no source states the operator's location. [corrected by Srini Iyer, approved 2026-10-18 in the corrections review: title described a different event than the record]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"An agentic AI-powered attack targeted the Dutch Institute for Vulnerability Disclosure (DIVD), exploiting two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system.","quote":"An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system.","source_index":0,"grade":"C"},{"step":"went_wrong","text":"The agentic AI-powered attack exploited two zero-day vulnerabilities in Zammad, breaching the helpdesk and customer support ticketing system.","quote":"An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system.","source_index":0,"grade":"C"},{"step":"reached","text":"The attack hit the Dutch Institute for Vulnerability Disclosure (DIVD) and its Zammad helpdesk and customer support ticketing system.","quote":"An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system.","source_index":0,"grade":"C"}],"model":"deepseek-chat","prompt_version":"aggregate-2026-09-27.1","extracted_at":"2026-10-09","source_urls":["https://www.helpnetsecurity.com/2026/10/04/week-in-review-researcher-breaks-into-microsoft-analytics-service-netscaler-rce-0-day-exploited/"]}}