Automated AI agent used to breach cybersecurity nonprofit DIVD

Summary

The Dutch Institute for Vulnerability Disclosure (DIVD), a nonprofit of volunteer security researchers, says an AI agent autonomously breached its network after exploiting an undisclosed technical vulnerability in a system that was not Citrix NetScaler. DIVD described the agent as sloppy and loud, and reported the incident to the police, the Autoriteit Persoonsgegevens and the National Cyber Security Center. The attack's purpose and impact remain unclear, and DIVD has withheld full details to protect the investigation.

Topics

• AI agents

Related items

• CriticalCVE-2026-108263: Astron Agent code-node execution as root through workflow run endpointsSimilar attack · NVD/CVE Database
• MediumHackers abuse Google Ads, Bing redirects to push Claude ClickFix attacksSimilar attack · BleepingComputer
• CriticalHermes Agent - PKCE Session Takeover via Redirect-URI Parser ConfusionSimilar attack · Tenable Research Advisories
• LowSocial Engineering AI Agents: The New BEC for 2026Similar attack · Dark Reading
• HighGHSA-cv3g-hj65-pcfh: PraisonAI: Shell command allowlist bypass via find -exec built-in actionSimilar attack · GitHub Advisory Database