Share story
Security

Attackers exploit Artifactory authentication-bypass flaw

Attackers exploit Artifactory authentication-bypass flaw Image: Primary
Threat actors began exploiting CVE-2026-82329 in JFrog Artifactory on September 1, according to watchTowr. The critical authentication-bypass flaw can allow an unauthenticated network attacker to obtain administrative privileges under default configuration. WatchTowr said exploitation has included minting administrator tokens and enumerating users, groups, credential sets and federated-access topologies. JFrog released Artifactory 7.161.20 on August 28 to patch the issue; several prior release ranges are affected.
Sources
The Hacker News BleepingComputer BleepingComputer
Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News, BleepingComputer, BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Capital Products
Capital Products

Scanntech raises $180M Series F for retail intelligence business

Scanntech raised $180M in Series F financing led by L Catterton and Partners Group, FinSMEs reported. The Montevideo, Uruguay-based company develops market intelligence tools using point-of-sale data and provides a platform for re...

Techmeme
Security
Security

GitHub expands malware advisories from npm to eight package ecosystems

GitHub has integrated OpenSSF's malicious-package reports into its Advisory Database, expanding malware coverage from npm to eight package ecosystems, OpenSSF said. The collection now covers npm, PyPI, Maven, RubyGems, NuGet, Go, ...

Open Source Security Foundation
Security Infrastructure
Security Infrastructure

Google Cloud introduces managed Wiz security sensor preview for GKE

Google Cloud introduced a preview of a managed Wiz Runtime Sensor add-on for Google Kubernetes Engine, covering Standard and Autopilot clusters. Google says GKE handles sensor deployment, credential injection and lifecycle updates...

Cloud Blog