[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:jfrog":3},{"vendor":4,"products":15,"links":35,"research":47,"news":100,"iocs":153,"iocs_total":198,"activity":199},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"jfrog","JFrog","jfrog.com","https:\u002F\u002Fjfrog.com\u002F",null,"Software supply chain company, maker of the Artifactory repository. JFrog Security Research reports malicious packages and vulnerabilities.","\u002Fvendor-logos\u002Fjfrog.png","#40be46","JFrog software supply chain solutions provide an end-to-end pipeline to control your binaries from build to production. Power your software updates to the edge.","2026-10-16T13:44:12.956914+00:00",[16,27],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"jfrog-curation","JFrog Curation","https:\u002F\u002Fjfrog.com\u002Fcuration\u002F","Blocks malicious and risky open-source packages before they enter your repositories.","Automate open-source package vetting and block risky components before they enter your pipeline. Ensure secure, compliant software delivery with JFrog Curation.",[23],{"slug":24,"name":25,"problem":26},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",{"slug":28,"name":29,"url":30,"description":31,"pitch":32,"pitch_source_url":30,"controls":33},"jfrog-xray","JFrog Xray","https:\u002F\u002Fjfrog.com\u002Fxray\u002F","Software composition analysis and SBOM generation for artifacts.","Detect, Prioritize and Remediate Open Source Risks Across your SDLC. Empower developers to find and fix security and compliance issues from the start",[34],{"slug":24,"name":25,"problem":26},[36,40,44],{"kind":37,"label":38,"url":39},"research","JFrog security research","https:\u002F\u002Fresearch.jfrog.com\u002F",{"kind":41,"label":42,"url":43},"review","PeerSpot: JFrog Xray user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fjfrog-xray-reviews",{"kind":41,"label":45,"url":46},"Gartner Peer Insights: JFrog Software Supply Chain Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fjfrog-software-supply-chain-platform",{"total":48,"stories":49},26,[50,55,60,65,70,75,80,85,90,95],{"slug":51,"title":52,"published_at":53,"brief":54},"unpatched-critical-lmcache-flaw-lets-unauthenticated-attackers-run-code-remotely-4d160a","Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely","2026-10-07T15:34:53+00:00","Critical LMCache vulnerability allows unauthenticated remote code execution.",{"slug":56,"title":57,"published_at":58,"brief":59},"attackers-use-malicious-terraform-providers-to-deliver-go-malware-via-hashicorp--d1ccb5","Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry","2026-09-23T18:06:30+00:00","Attackers use malicious Terraform providers and Go modules to distribute Go malware.",{"slug":61,"title":62,"published_at":63,"brief":64},"critical-bifrost-ai-gateway-flaw-lets-attackers-run-commands-without-credentials-ba859a","Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials","2026-09-22T16:41:12+00:00","Critical Bifrost AI Gateway flaw allows unauthenticated command execution.",{"slug":66,"title":67,"published_at":68,"brief":69},"parallels-desktop-flaw-lets-non-admin-mac-users-gain-root-but-intel-macs-can-t-i-f1a5ac","Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix","2026-09-16T13:14:05+00:00","Parallels Desktop flaw allows non-admin Mac users to gain root access.",{"slug":71,"title":72,"published_at":73,"brief":74},"over-400-npm-packages-infected-in-chaindrop-supply-chain-attack-79cdb2","Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack","2026-08-05T08:56:58+00:00","ChainDrop attack infects over 400 NPM packages with malware to steal secrets.",{"slug":76,"title":77,"published_at":78,"brief":79},"trojanized-newtonsoft-json-fork-hides-game-rigging-code-in-a-working-library-6485f6","Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library","2026-07-22T06:00:06+00:00","Trojanized NuGet package 'Newtonsoftt.Json.Net' targets Digitain's gaming platform.",{"slug":81,"title":82,"published_at":83,"brief":84},"148-npm-packages-disguised-as-student-proxies-turned-browsers-into-a-ddos-botnet-7eacb3","148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet","2026-07-14T07:08:36+00:00","148 npm packages disguised as student proxies became a DDoS botnet.",{"slug":86,"title":87,"published_at":88,"brief":89},"north-korea-linked-npm-packages-mimic-rollup-polyfills-to-steal-developer-secret-af919c","North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets","2026-07-03T16:07:15+00:00","North Korea-linked npm packages mimic Rollup polyfills to steal developer secrets.",{"slug":91,"title":92,"published_at":93,"brief":94},"weekly-recap-linux-kernel-flaws-ai-malware-tricks-turla-backdoor-infostealers-an-392062","⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More","2026-06-29T14:41:07+00:00","Weekly recap covers Linux kernel flaw DirtyClone, PTC Windchill RCE, OpenAI GPT models for security, Gaslight macOS",{"slug":96,"title":97,"published_at":98,"brief":99},"dirtyclone-linux-kernel-vulnerability-leads-to-root-access-c78a28","‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access","2026-06-29T11:20:13+00:00","Linux kernel vulnerability CVE-2026-43503 allows local users to gain root privileges.",{"total":101,"stories":102},25,[103,108,113,118,123,128,133,138,143,148],{"slug":104,"title":105,"published_at":106,"brief":107},"three-jfrog-artifactory-flaws-exploited-for-backdoor-deployment-31900a","Three JFrog Artifactory Flaws Exploited for Backdoor Deployment","2026-09-14T09:27:29+00:00","Three JFrog Artifactory flaws are being exploited to deploy backdoors and gain admin privileges.",{"slug":109,"title":110,"published_at":111,"brief":112},"cisa-adds-5-actively-exploited-artifactory-screenconnect-and-routeros-flaws-to-k-0ddc7c","CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV","2026-09-12T15:54:45+00:00","CISA adds 5 actively exploited vulnerabilities in Artifactory, ScreenConnect, and RouterOS to its KEV catalog.",{"slug":114,"title":115,"published_at":116,"brief":117},"artifactory-flaws-chained-in-attacks-deploying-backdoor-malware-a9e03a","Artifactory flaws chained in attacks deploying backdoor malware","2026-09-11T16:29:44+00:00","Attackers exploit Artifactory flaws to gain admin access and deploy Rust backdoor.",{"slug":119,"title":120,"published_at":121,"brief":122},"cisa-adds-three-known-exploited-vulnerabilities-to-catalog-e86389","CISA Adds Three Known Exploited Vulnerabilities to Catalog","2026-09-11T12:00:00+00:00","CISA adds three exploited vulnerabilities to KEV Catalog, impacting JFrog Artifactory and ConnectWise ScreenConnect.",{"slug":124,"title":125,"published_at":126,"brief":127},"attackers-chain-jfrog-artifactory-flaws-to-gain-admin-control-and-plant-backdoor-6d77d0","Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors","2026-09-11T07:31:05+00:00","Attackers chained two JFrog Artifactory flaws to gain admin control and plant backdoors.",{"slug":129,"title":130,"published_at":131,"brief":132},"sangoma-switchvox-vulnerabilities-exploited-in-the-wild-d0d77f","Sangoma Switchvox Vulnerabilities Exploited in the Wild","2026-09-04T13:23:12+00:00","Sangoma Switchvox vulnerability CVE-2026-9586 is being exploited in the wild.",{"slug":134,"title":135,"published_at":136,"brief":137},"cisa-adds-seven-exploited-flaws-as-attackers-deploy-reverse-shells-and-crypto-mi-bf0dad","CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners","2026-09-03T05:19:04+00:00","CISA adds seven exploited vulnerabilities to KEV catalog, enabling reverse shells and crypto miners.",{"slug":139,"title":140,"published_at":141,"brief":142},"hackers-exploit-critical-jfrog-artifactory-flaw-to-forge-admin-tokens-2a5f36","Hackers exploit critical JFrog Artifactory flaw to forge admin tokens","2026-09-02T15:47:08+00:00","Critical JFrog Artifactory flaw (CVE-2026-82329) allows attackers to forge admin tokens.",{"slug":144,"title":145,"published_at":146,"brief":147},"attackers-pounce-on-critical-artifactory-flaw-following-disclosure-a73d4a","Attackers Pounce on Critical Artifactory Flaw Following Disclosure","2026-09-01T21:05:53+00:00","Critical Artifactory flaw CVE-2026-82329 allows attackers admin access post-disclosure.",{"slug":149,"title":150,"published_at":151,"brief":152},"critical-jfrog-artifactory-vulnerability-reportedly-exploited-in-the-wild-8d3d09","Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild","2026-09-01T09:59:44+00:00","Critical JFrog Artifactory vulnerability CVE-2026-82329 is being exploited in the wild.",[154,157,159,161,162,163,165,166,168,170,171,172,173,174,175,176,177,178,179,181,183,185,187,189,190,191,192,193,195,197],{"type":155,"value":156,"article_slug":104,"article_title":105,"published_at":106},"cve","CVE-2026-42016",{"type":155,"value":158,"article_slug":104,"article_title":105,"published_at":106},"CVE-2026-42018",{"type":155,"value":160,"article_slug":104,"article_title":105,"published_at":106},"CVE-2026-82329",{"type":155,"value":156,"article_slug":109,"article_title":110,"published_at":111},{"type":155,"value":158,"article_slug":109,"article_title":110,"published_at":111},{"type":155,"value":164,"article_slug":109,"article_title":110,"published_at":111},"CVE-2026-67277",{"type":155,"value":160,"article_slug":109,"article_title":110,"published_at":111},{"type":155,"value":167,"article_slug":109,"article_title":110,"published_at":111},"CVE-2026-84869",{"type":155,"value":169,"article_slug":109,"article_title":110,"published_at":111},"CVE-2026-86060",{"type":155,"value":156,"article_slug":114,"article_title":115,"published_at":116},{"type":155,"value":158,"article_slug":114,"article_title":115,"published_at":116},{"type":155,"value":160,"article_slug":114,"article_title":115,"published_at":116},{"type":155,"value":156,"article_slug":119,"article_title":120,"published_at":121},{"type":155,"value":158,"article_slug":119,"article_title":120,"published_at":121},{"type":155,"value":167,"article_slug":119,"article_title":120,"published_at":121},{"type":155,"value":156,"article_slug":124,"article_title":125,"published_at":126},{"type":155,"value":158,"article_slug":124,"article_title":125,"published_at":126},{"type":155,"value":160,"article_slug":124,"article_title":125,"published_at":126},{"type":155,"value":180,"article_slug":129,"article_title":130,"published_at":131},"CVE-2026-48710",{"type":155,"value":182,"article_slug":129,"article_title":130,"published_at":131},"CVE-2026-49869",{"type":155,"value":184,"article_slug":129,"article_title":130,"published_at":131},"CVE-2026-59822",{"type":155,"value":186,"article_slug":129,"article_title":130,"published_at":131},"CVE-2026-9586",{"type":155,"value":188,"article_slug":134,"article_title":135,"published_at":136},"CVE-2026-42271",{"type":155,"value":180,"article_slug":134,"article_title":135,"published_at":136},{"type":155,"value":182,"article_slug":134,"article_title":135,"published_at":136},{"type":155,"value":184,"article_slug":134,"article_title":135,"published_at":136},{"type":155,"value":160,"article_slug":134,"article_title":135,"published_at":136},{"type":155,"value":194,"article_slug":134,"article_title":135,"published_at":136},"CVE-2026-83548",{"type":155,"value":196,"article_slug":134,"article_title":135,"published_at":136},"CVE-2026-83549",{"type":155,"value":186,"article_slug":134,"article_title":135,"published_at":136},76,[200,203,206,210,214,216],{"month":201,"reported":202,"affected":202},"2026-05-01",0,{"month":204,"reported":205,"affected":202},"2026-06-01",12,{"month":207,"reported":208,"affected":209},"2026-07-01",3,6,{"month":211,"reported":212,"affected":213},"2026-08-01",1,7,{"month":215,"reported":208,"affected":205},"2026-09-01",{"month":217,"reported":212,"affected":202},"2026-10-01"]