DIVD breached by autonomous AI agent in "messy" attack
The Dutch Institute for Vulnerability Disclosure (DIVD) has been hit by a cyberattack that it says was carried out by an autonomous AI agent. The nonprofit called the intrusion "loud and very very messy." Investigators have found evidence that the attacker got in through a vulnerability, but what the attacker wanted and how much damage was done are still unclear.
DIVD is run by volunteer security researchers. They scan the internet for systems exposed to known vulnerabilities, alert the owners of those systems, and share guidance on how to reduce the risk.
First incident in seven years
The organization disclosed the breach late last week. It said this was the first time it had been hacked in seven years of operations. According to DIVD, the attack stood out less because it was a first and more because of how it was carried out.