agentic-ai - DIESEC

The New Trusted User: AI Agent Security in Practice

By Editorial Team | November 4, 2026

AI agent security: an employee badge with a glowing blue chip instead of a photo

AI agents are no longer just chat windows. They read documents, query databases, create tickets, send emails, write code and connect to business systems. That makes them useful. It also means AI agent security is partly an identity question, because an agent looks a lot like another user in your environment. Not a human user,…

Zammad Zero-Day Vulnerabilities Exploited

By Editorial Team | October 6, 2026

Two Zammad zero-day vulnerabilities give attackers root on helpdesk servers. Used against DIVD, on CISA KEV, one flaw had no fix at disclosure.

Two Zammad zero-day vulnerabilities, CVE-2026-102489 and CVE-2026-102490, let an attacker take over the open-source helpdesk and reach root on its server. The Dutch Institute for Vulnerability Disclosure (DIVD) says an automated AI agent chained them against its own network on September 21. CISA has added the first flaw to its Known Exploited Vulnerabilities catalog, and…

JADEPUFFER Agentic AI Ransomware Attack

By Editorial Team | July 8, 2026

JADEPUFFER agentic AI ransomware is, according to Sysdig’s Threat Research Team, the first publicly documented case of a ransomware attack executed start to finish by an autonomous AI agent — from initial access through a Langflow vulnerability to database encryption and extortion, with no human operator directing any step. What Happened Sysdig identified JADEPUFFER, this…