https://www.bleepingcomputer.com/news/security/artifactory-flaws-chained-in-attacks-deploying-backdoor-malware/
Artifactory flaws chained to deploy Rust backdoor Threat actors are actively exploiting multiple JFrog Artifactory flaws on self-hosted servers, with CVE-2026-42018 and CVE-2026-42016 used in sequence to obtain an internal JWT, escalate to admin scope, create rogue administrator accounts, and install malicious Groovy plugins. Wiz observed the activity between August 15 and September 8