Dutch Institute for Vulnerability Disclosure (DIVD)
SIRDA Overview
SIRDA editorial content. This researched account is not written or approved by Dutch Institute for Vulnerability Disclosure (DIVD). Published positions are summarized from public sources.
organization · Nonprofit / NGO · listed
- Name
- Dutch Institute for Vulnerability Disclosure (DIVD)
- Profile slug
- divd
- Version
- 1
- Focus areas
- AI cybersecurity
- Incident reporting & learning
- Founded
- Not recorded
- Headquarters
- Not recorded
- Website
- https://csirt.divd.nl/cases/DIVD-2026-00015/
- Leadership: public roles
- Not recorded
What they do
SIRDA editorial
At a glance
Dutch security nonprofit whose public case record describes a breach that DIVD attributes to AI agents.
Current work and relevance
In an update published September 30, 2026, DIVD linked the breach to two previously unknown vulnerabilities in the Zammad support platform. DIVD's case record for the breach, DIVD-2026-00014, was last modified October 1; it dates first access to September 21 and records that DIVD blocked access to all systems in its data center on September 22. DIVD attributes the intrusion to AI agents. The public case account does not establish whether their use was directed by an attacker or was beyond the operator's instructions. The separate DIVD-2026-00015 case documents the Zammad vulnerabilities and notification work.
The Dutch National Cyber Security Centre separately confirms active exploitation of the vulnerabilities. That advisory does not independently establish AI involvement in DIVD's breach.
Why SIRDA tracks it
This profile records DIVD's public incident account. The AI-agent attribution and the uncertainty about how the agents were directed remain attributed to DIVD; they are not independent findings by SIRDA.
Sources
- DIVD update on the reported breach (September 30, 2026)
- DIVD technical case record: DIVD-2026-00014, When, not if...
- DIVD technical case record: DIVD-2026-00015
- Dutch NCSC advisory on active exploitation of Zammad vulnerabilities
Editorial note
This is SIRDA editorial content. Inclusion is an educational listing. It does not mean the subject has joined SIRDA, endorsed the founding inquiry, or approved this description. Factual corrections can be incorporated with a visible revision record, and substantive disagreements can be published as attributed responses.
Stated expertise
Expertise the organization has stated in its own published material, not a SIRDA ranking.
No stated expertise recorded.
Key work
No key work recorded.
- Related questions
- None recorded
- Related failure conditions
- None recorded
Sources
Version history
House capitalization in displayed editorial summaries is standardized; stored historical versions are unchanged.
Version 1: Published SIRDA editorial snapshot: 2026-10-01 00:00:00+00
organization · Nonprofit / NGO · listed
- Name
- Dutch Institute for Vulnerability Disclosure (DIVD)
- Profile slug
- divd
- Version
- 1
- Focus areas
- AI cybersecurity
- Incident reporting & learning
- Founded
- Not recorded
- Headquarters
- Not recorded
- Website
- https://csirt.divd.nl/cases/DIVD-2026-00015/
- Leadership: public roles
- Not recorded
What they do
SIRDA editorial
At a glance
Dutch security nonprofit whose public case record describes a breach that DIVD attributes to AI agents.
Current work and relevance
In an update published September 30, 2026, DIVD linked the breach to two previously unknown vulnerabilities in the Zammad support platform. DIVD's case record for the breach, DIVD-2026-00014, was last modified October 1; it dates first access to September 21 and records that DIVD blocked access to all systems in its data center on September 22. DIVD attributes the intrusion to AI agents. The public case account does not establish whether their use was directed by an attacker or was beyond the operator's instructions. The separate DIVD-2026-00015 case documents the Zammad vulnerabilities and notification work.
The Dutch National Cyber Security Centre separately confirms active exploitation of the vulnerabilities. That advisory does not independently establish AI involvement in DIVD's breach.
Why SIRDA tracks it
This profile records DIVD's public incident account. The AI-agent attribution and the uncertainty about how the agents were directed remain attributed to DIVD; they are not independent findings by SIRDA.
Sources
- DIVD update on the reported breach (September 30, 2026)
- DIVD technical case record: DIVD-2026-00014, When, not if...
- DIVD technical case record: DIVD-2026-00015
- Dutch NCSC advisory on active exploitation of Zammad vulnerabilities
Editorial note
This is SIRDA editorial content. Inclusion is an educational listing. It does not mean the subject has joined SIRDA, endorsed the founding inquiry, or approved this description. Factual corrections can be incorporated with a visible revision record, and substantive disagreements can be published as attributed responses.
Stated expertise
Expertise the organization has stated in its own published material, not a SIRDA ranking.
No stated expertise recorded.
Key work
No key work recorded.
- Related questions
- None recorded
- Related failure conditions
- None recorded
Sources
Official Profile
This profile has not yet been claimed. SIRDA has created an educational listing for Dutch Institute for Vulnerability Disclosure (DIVD) and invites an authorized representative to provide their own account.
In the Headlines
- Dutch Security Nonprofit Details Breach It Attributes to AI Agents — Safety & Alignment · 2026-09-30
DIVD linked a September 21 intrusion to two previously unknown Zammad vulnerabilities. Dutch authorities confirm active exploitation of the vulnerabilities, but not the AI-agent attribution.
Listed for educational purposes. Listing does not imply Alliance membership or endorsement. Correction submissions are not yet available.