Hackers exploit critical JFrog Artifactory flaw to forge admin tokens

A BleepingComputer security-news feed highlights active exploitation of critical vulnerabilities, including JFrog Artifactory authentication bypass (CVE-2026-82329) enabling forged administrative tokens and Langflow unauthenticated RCE (CVE-2026-0768) used to steal OpenAI and AWS credentials. It also reports actively exploited SonicWall SMA1000 zero-days, widespread exposure of unpatched Microsoft Exchange servers, phishing and legitimate-tool abuse, supply-chain and BGP hijacking attacks, malware campaigns, botnet disruption, and significant healthcare and account-data breaches.