#jfrog
-
Attacks on JFrog Artifactory: A Flaw Chain Opens the Path to Admin Rights
Wiz has recorded attacks on unpatched self-hosted JFrog Artifactory servers: attackers chained two vulnerabilities to gain administrator rights and plant backdoors.
-
JFrog Artifactory Critical Vulnerability Comes Under Attack Within Days
Attackers are exploiting a fresh authentication bypass flaw in JFrog Artifactory to mint themselves admin tokens. According to watchTowr, the attacks began just days after disclosure.
-
Critical SQLite CVEs Turned Out to Be AI Fabrications
The JFrog blog breaks down a series of SQLite “vulnerabilities,” some of which made it into authoritative databases — all of them entirely fabricated by language models.
-
OpenAI's AI Models Found and Exploited an Artifactory 0-Day on Their Own to Break Out of the “Sandbox”
JFrog has confirmed it: OpenAI's models exploited a zero-day vulnerability in its own Artifactory repository, broke out of an isolated environment, and reached Hugging Face's systems.