Critical Flaw in JFrog Artifactory Allows Hackers to Forge Admin Access
PremiumCVE-2026-82329 in JFrog Artifactory is exploited to forge admin tokens, granting attackers administrative access to repos.
§Source · Bleeping Computer
Bleeping Computer
Every dispatch we have aggregated from Bleeping Computer.
All dispatchesFriday, September 4
Wednesday, September 2
PaperCut Vulnerabilities Exploited for Data Breaches Before Patches Released
PaperCut NG/MF zero-day vulnerabilities were exploited in-the-wild to steal data before emergency patches were released.
Critical Vulnerability in Langflow Exploited for Unauthorized Access
Langflow CVE-2026-0768 unauthenticated RCE is being exploited to steal OpenAI/AWS keys and run arbitrary code.
Monday, August 31
Stealthy Chrome Extensions Exploit Users for Cryptocurrency and Data Theft
PremiumMultiple Chrome and Edge extensions delivered malware modules that steal crypto wallets, browser data, and inject ClickFix social engineering.
Critical Flaw in GiveWP Plugin Threatens WordPress Sites
PremiumGiveWP plugin contains max-severity flaw allowing unauthenticated attackers to execute arbitrary server commands on hosts.
Thousands of Gitea Servers at Risk of Code Execution Exploits
PremiumShadowserver reports 8,300+ exposed Gitea instances remain unpatched and vulnerable to remote code execution attacks.
Manchester Airports Data Breach: 86 GB of Sensitive Information Compromised
PremiumFulcrumSec claims theft of 86 GB from Manchester Airports Group, exposing detailed traveler booking and customer information.
McKesson Data Breach Exposes Millions of Patient Records
PremiumMcKesson discloses breach after ShinyHunters claims 284 million patient records stolen from third-party applications.
Friday, August 28
ATF Confirms System Breach Following Qilin Ransomware Attack
PremiumATF confirms a system compromise linked to Qilin ransomware claims affecting investigation-related data access.
Avada WordPress Theme Vulnerability Exposes Sites to Remote Attacks
PremiumCritical Avada WordPress theme vulnerability enables unauthenticated zero-click PHP remote code execution on affected sites.
PaperCut NG/MF Vulnerability Exploited in Active Zero-Day Attacks
PremiumPaperCut NG/MF zero-day is actively exploited across all versions; vendor issued emergency patches and confirmed customer incidents.
Federal Agencies Face Urgent Deadline to Patch Citrix NetScaler Vulnerability
PremiumCISA mandates immediate patching of Citrix NetScaler (CVE-2026-8452) after active exploitation; federal agencies have an urgent deadline.
Wednesday, August 26
Nutex Health Cyberattack Compromises Sensitive Patient Data
Nutex Health reports unauthorized access and exfiltration of sensitive healthcare data from company servers.
Zimbra Servers Under Siege by Exploiting RCE Vulnerability
Over 270 Zimbra servers compromised via CVE-2026-73570 RCE; CISA issued a rapid patch directive.
Monday, August 24
Leaked AWS Access Keys Expose Corporate Accounts to Risk
PremiumOver 9,300 exposed AWS access keys remain active between 2022-2026, enabling potential full control over corporate accounts.
Android Car Head Units Compromised by Botnet Malware
PremiumSupply-chain compromise of Android car head unit updater spreads malware to build ad-fraud and proxy botnet on vehicles.
ToxicPanda Malware Exploits VPN Permissions to Target Android Users
PremiumToxicPanda Android malware abuses VPN permissions to block Google Play and expand remote command control across apps.
CISA Demands Immediate Patching of TrueConf Server Vulnerabilities
PremiumCISA ordered immediate patching of TrueConf Server vulnerabilities that are being actively abused to deploy malware.
Friday, August 21
Get these articles delivered to your inbox.
Subscribe free