security<\/p>\n
Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit<\/p>\n
Security researchers reported that someone is exploiting CVE-2026-82329, a critical JFrog Artifactory authentication-bypass bug, just days after the vendor patched the 9.8-rated flaw. And we don’t know if that someone is human.<\/p>\n
Artifactory is a widely used tool for managing software artifacts, packages, binaries, and AI models. It\u2019s also popular with AI agents that go rogue and need to communicate with each other while remaining undetected by their human babysitters.<\/p>\n
In July, OpenAI and JFrog revealed that OpenAI\u2019s models broke out of their cages to hack Hugging Face by exploiting Artifactory zero-days<\/a>, and at Black Hat, the model provider said agents used Artifactory to build message boards<\/a> and help each other access the open internet.<\/p>\n JFrog disclosed CVE-2026-82329<\/a> on Friday, and by Tuesday, attackers had already begun exploiting internet-exposed systems, according to exposure-management biz watchTowr\u2019s threat-intel team, which reported<\/a> \u201cattackers minting themselves admin tokens.\u201d\u00a0<\/p>\n In addition to creating new administrative credentials, watchTowr\u2019s honeypot network caught miscreants \u201cenumerating users, groups, credential sets and federated access topologies,\u201d Yordan Ganchev, principal threat intelligence specialist at watchTowr, told The Register.<\/p>\n \u201cRight now, we\u2019re observing exploitation from a small number of IP addresses from varying geographies exploiting multiple of our honeypots,\u201d Ganchev said. \u201cBroad-scale scanning and mass exploitation has not been observed, but that is unlikely to stay the case for long.\u201d<\/p>\n Ganchev urged organizations running vulnerable versions to \u201curgently patch\u201d internet-exposed systems, and treat them as being potentially compromised – so inspect audit logs, rotate credentials, and investigate connected systems for any unusual changes or backdoor implants.<\/p>\n \u201cWhen attackers gain admin level access to a central software supply chain system, they can do what every engineering team does best – build, ship and distribute software fast,\u201d he said. \u201cFrom there, they could tamper with build pipelines, move laterally into production systems and potentially push malicious changes downstream to customers.\u201d<\/p>\n JFrog did not immediately respond to The Register\u2019s inquiries. We will update this story when we receive any response. \u00ae<\/p>\n","protected":false},"excerpt":{"rendered":"security Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit Security researchers reported that…\n","protected":false},"author":2,"featured_media":757527,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[554,733,4308,86,56,54,55],"class_list":["post-757526","post","type-post","status-publish","format-standard","has-post-thumbnail","category-artificial-intelligence","tag-ai","tag-artificial-intelligence","tag-artificialintelligence","tag-technology","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/757526","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=757526"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/757526\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/757527"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=757526"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=757526"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=757526"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}