JFrog Artifactory

Reported Context (10)

are moving package downloads through approved registries such as StepSecurity Secure Registry or JFrog Artifactory. Discovering which jobs still contact public registries directly is a practical challenge. StepSecurity Compares Harden-Runner With GitHub Actions’ Native Egress Firewall
JFrog Artifactory Recorded Future Reports 94 High-Impact Vulnerabilities in September 2026, Including 80 Actively Exploited
NetScaler, Apple, Cisco SD-WAN, and FortiMail, alongside a major breach of OpenInfra Europe’s JFrog Artifactory and a reported FBI portal compromise linked to ShinyHunters. Week in Review: NetScaler Zero-Days Exploited as Researcher Accesses Microsoft Analytics Service
Attackers compromised a self-hosted JFrog Artifactory instance operated by OpenInfra Europe by exploiting CVE-2026-82329, an authentication bypass flaw that granted admin-level access. OpenInfra Europe’s Artifactory Instance Compromised Through Authentication Bypass
In its postmortem published late last month, OpenAI said it observed its agents exploiting JFrog Artifactory’s JRuby-backed RubyGems processing to obtain the signing key and forge administrator credentials as part of an Researchers Link RubyGems Campaign to OpenAI Agents and Report Code Execution on RubyDoc Servers

CVE (78)

Malware (7)

People (9)

Threat Actors (9)

MITRE ATT&CK (12)

Vendors (22)

Products (79)

Tools (7)

Industries (4)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.