The Dutch Institute for Vulnerability Disclosure (DIVD) reported that its network was breached due to the exploitation of two zero-day vulnerabilities in the Zammad ticketing system, which is open-source software used by various organizations. This breach raises concerns about the security of open-source applications, as attackers were able to leverage these vulnerabilities to gain unauthorized access. The incident emphasizes the need for users of Zammad and similar systems to ensure they are up to date with security patches and to monitor their networks for any suspicious activity. As the details of the breach unfold, it serves as a reminder for organizations to prioritize vulnerability management and implement robust security measures to protect their data and infrastructure.