Tag archive
An authentication bypass in a self-hosted artifact repository puts build pipelines and signed packages within reach of an unauthenticated attacker.
Choosing an artifact repository is less about who has the longest feature list, and more about which...
Two JFrog Artifactory flaws chain from zero credentials to administrator control. This article covers the affected version branches, the observed post-exploitation sequence and the remediation order.
Hey all 👋 Here is a problem that sounds boring until you try it: move twenty-five container images...
Incident response guidance for a compromised artifact repository, using the September 2026 JFrog Artifactory exploitation as the case.
What ZoomEye's 17,881 observable JFrog Artifactory instances mean for the CVE-2026-82329 authentication bypass and perimeter checks.
How a default empty join key in JFrog Artifactory allowed unauthenticated attackers to mint administrator tokens, and what defenders should verify.
ZoomEye measurement of DevOps and data platform exposure, with interpretation of default-configuration risk.
Measuring internet-facing JFrog Artifactory exposure with ZoomEye to contextualize the CVE-2026-82329 authentication bypass.
ZoomEye fingerprints 17,877 internet-reachable JFrog Artifactory deployments. Here is what that measurement supports, and what it does not.
Why repository selection still matters in 2026 Ten years ago, an artifact repository was...
CVE-2026-82329 in JFrog Artifactory turned a default configuration gap into unauthenticated administrative access, with supply-chain consequences beyond the affected server.