Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
2026-09-01T19:24:01Z•5ef2c251825e5870406bc499ac6008d3d7606cd33bc93762424eed9b4d75bc68
CVE-2023-49105CVE-2026-0768CVE-2026-66066CVE-2026-76581CVE-2026-76639CVE-2026-76640CVE-2026-82329active-exploitationai-securityauthentication-bypassclickfixcloud-securitycredential-theftcryptocurrencycyber-espionagefinancial-fraudinsider-threatiot-roboticsmalwarenetwork-infrastructureransomwarercesocial-engineeringsupply-chainvulnerability
What happened
The feed reports active exploitation of critical vulnerabilities, credential theft, malware distribution, ransomware activity, espionage campaigns, supply-chain abuse, and fraud. Notable incidents include exploitation of JFrog Artifactory, Langflow, Ruby on Rails, WordPress, ownCloud, PaperCut, and Cosmos EVM flaws; ClickFix social engineering; AI-assisted attacks; router and cloud credential compromise; crypto-wallet theft; and payment-system fraud.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 5ef2c251825e5870406bc499ac6008d3d7606cd33bc93762424eed9b4d75bc68
- Enrichment time
- 2026-09-01T19:24:01Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.