Security researchers at Wiz observed threat actors chaining two vulnerabilities in self-hosted JFrog Artifactory servers to achieve administrative takeover and deploy backdoors. The active exploitation occurred between August and September, targeting unpatched build pipeline infrastructure.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →