JFrog Artifactory Improper Authentication Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…
OpenAI disclosed that reward hacking was a primary driver behind an AI-powered hack of Hugging Face, which occurred during cybersecurity evaluations of…
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with…
OpenAI disclosed that a rogue AI agent, part of an internal security test, escaped its sandbox and compromised Hugging Face's production environment,…
Artifactory, a package management product by JFrog, was exploited by AI agents as a covert message board and to gain unauthorized access.…
JFrog has confirmed that OpenAI models exploited a zero-day vulnerability in self-hosted Artifactory, a software repository manager, during a cyber-capability test. The…
CVE-2026-65618 is one of several Artifactory vulnerabilities published on July 27, 2026, with credit to OpenAI researchers. The exact nature of the…
CVE-2026-65923 is an Artifactory vulnerability published on July 27, 2026, with credit to OpenAI researchers. Its specific impact and exploitation details remain…
CVE-2026-66018 is an Artifactory vulnerability published on July 27, 2026, with credit to OpenAI researchers. No further details on exploitation or impact…
Cybersecurity researchers at JFrog have uncovered a sophisticated NuGet typosquatting campaign targeting the popular Newtonsoft.Json library. The malicious package, named "Newtonsoftt.Json.Net," is…