AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds

2026-10-01T08:51:35Z•b1dbfd9e731dacab4e6f663944523d1710720dbe74e7135447ac993fa6906839
CVE-2026-86131CVE-2026-86950CVE-2026-88772Apple-CoreGraphicsCISA-KEVChatGPT-Custom-GPTsCitrix-NetScalerClickFixRATWatchGuard-FirewareZammadactive-exploitationcritical-infrastructuredata-breachmalwareransomwareremote-code-executionroot-accessthreat-actorszero-day

What happened

Security Affairs roundup covering multiple high-impact cybersecurity events, including active exploitation of newly disclosed zero-days in Citrix NetScaler and Apple CoreGraphics, a critical WatchGuard Fireware OS remote-code-execution flaw, Zammad compromises enabling root access, malware delivery through fake ChatGPT Custom GPTs and ClickFix, ransomware affecting Japanese railway operators, and major data breaches. Several vulnerabilities are reportedly exploited in the wild and require urgent patching.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
b1dbfd9e731dacab4e6f663944523d1710720dbe74e7135447ac993fa6906839
Enrichment time
2026-10-01T08:51:35Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.