Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of selfhosted servers and plant backdoors, cloud security company Wiz said in a report. Wiz saw the attacks between August 15 and September 8. JFrog had fixed both flaws before then, so only servers that had not been updated were open to them.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity