Security AffairsPierluigi Paganini
Security Weekly Roundup Covers Cisco, Chrome and Windows Attacks
Part of the CVE-2026-42016 story · since 11 Sep
- Fri 11 Sep, 01:30 UTC. SecurityOnline, first report. JFrog Artifactory Flaws Exploited to Seize Admin Control. Cites a CVE in CISA KEV.
- Fri 11 Sep, 07:48 UTC. The Hacker News, its first report on the story. Attackers Chain JFrog Artifactory Flaws to Seize Admin Control. Cites a CVE in CISA KEV.
- Fri 11 Sep, 20:32 UTC. CISA, its first report on the story. CISA Warns of Actively Exploited JFrog Artifactory Flaw. Cites a CVE in CISA KEV.
- Sat 12 Sep, 17:53 UTC. The Hacker News. CISA Flags Artifactory, ScreenConnect and RouterOS Attacks. Cites a CVE in CISA KEV.
- Sun 13 Sep, 15:00 UTC. Security Affairs, its first report on the story. Security Weekly Roundup Covers Cisco, Chrome and Windows Attacks. Cites a CVE in CISA KEV. This article, 5th of 8.
- Sun 13 Sep, 18:30 UTC. Security Affairs. Security Affairs Tracks Malware, Ransomware and Active Exploits. Cites a CVE in CISA KEV.
- Mon 14 Sep, 09:36 UTC. SecurityWeek, its first report on the story. Hackers Exploit JFrog Artifactory Bugs to Install Persistent Backdoors. Cites a CVE in CISA KEV.
- Mon 14 Sep, 15:26 UTC. Security Affairs. CISA Flags Artifactory, ScreenConnect and GitLab Flaws as Exploited. Cites a CVE in CISA KEV.
Security Affairs published its 594th weekly newsletter on 13 September 2026, presenting a selection of the site’s recent cybersecurity reporting alongside links to international coverage. The main selection spans artificial intelligence security, ransomware, vulnerability exploitation, malware, data breaches and cybercrime.
Featured reports include attacks involving a critical Cisco Secure Firewall Management Center flaw and a SonicWall vulnerability, additions to the US Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities catalogue, an actively exploited Chrome zero-day, and Microsoft’s September 2026 update covering 974 CVEs, two zero-days and 20 wormable bugs.
The newsletter also highlights reports about a fileless Linux rootkit targeting F5 BIG-IP APM Server memory, a WeChat account-hijacking worm, exposed passport and flight data in a Vietnam-linked API database, a North Korea-linked backdoor hidden in HAProxy, and an alleged breach involving 32.8 million Condé Nast user records.
Its international press section links to external reporting on Berlin’s response to published stolen data, IT help-desk vishing and residential-proxy abuse, active exploitation of MikroTik RouterOS and Artifactory vulnerabilities including CVE-2026-42016, CVE-2026-42018 and CVE-2026-82329, as well as state-linked activity involving Chrome and Windows zero-days.
The newsletter is a roundup rather than a single incident report, and the supplied article does not provide additional technical detail or response guidance for the individual stories.
How the story developed
8 articles from 5 outlets since 11 Sep. Quiet since 14 Sep. This was the 5th report, 3 days after the first.
- Fri 11 Sep, 01:30 UTC. SecurityOnline, first report. JFrog Artifactory Flaws Exploited to Seize Admin Control. Cites a CVE in CISA KEV.
- Fri 11 Sep, 07:48 UTC. The Hacker News, its first report on the story. Attackers Chain JFrog Artifactory Flaws to Seize Admin Control. Cites a CVE in CISA KEV.
- Fri 11 Sep, 20:32 UTC. CISA, its first report on the story. CISA Warns of Actively Exploited JFrog Artifactory Flaw. Cites a CVE in CISA KEV.
- Sat 12 Sep, 17:53 UTC. The Hacker News. CISA Flags Artifactory, ScreenConnect and RouterOS Attacks. Cites a CVE in CISA KEV.
- Sun 13 Sep, 15:00 UTC. Security Affairs, its first report on the story. Security Weekly Roundup Covers Cisco, Chrome and Windows Attacks. Cites a CVE in CISA KEV. This article, 5th of 8.
- Sun 13 Sep, 18:30 UTC. Security Affairs. Security Affairs Tracks Malware, Ransomware and Active Exploits. Cites a CVE in CISA KEV.
- Mon 14 Sep, 09:36 UTC. SecurityWeek, its first report on the story. Hackers Exploit JFrog Artifactory Bugs to Install Persistent Backdoors. Cites a CVE in CISA KEV.
- Mon 14 Sep, 15:26 UTC. Security Affairs. CISA Flags Artifactory, ScreenConnect and GitLab Flaws as Exploited. Cites a CVE in CISA KEV.
- Known exploited CVE
- No CVE
- Larger: an outlet’s first report
- Square: official source
- Coverage over time
- Quiet time, folded
Show all 8 articles as a listHide the list
- Fri 11 SepDay 03
- JFrog Artifactory Flaws Exploited to Seize Admin Control01:30 · SecurityOnline · First report · Exploited CVE · Known exploited CVE
- Attackers Chain JFrog Artifactory Flaws to Seize Admin Control07:48 · The Hacker News · Known exploited CVE
- CISA Warns of Actively Exploited JFrog Artifactory Flaw20:32 · CISA · official · CISA alert · Known exploited CVE
- Sat 12 SepDay 11
- CISA Flags Artifactory, ScreenConnect and RouterOS Attacks17:53 · The Hacker News · Known exploited CVE
- Sun 13 SepDay 22
- Security Weekly Roundup Covers Cisco, Chrome and Windows Attacks15:00 · Security Affairs · Known exploited CVE · This article, 5th of 8
- Security Affairs Tracks Malware, Ransomware and Active Exploits18:30 · Security Affairs · Known exploited CVE
- Mon 14 SepDay 32
- Hackers Exploit JFrog Artifactory Bugs to Install Persistent Backdoors09:36 · SecurityWeek · Known exploited CVE
- CISA Flags Artifactory, ScreenConnect and GitLab Flaws as Exploited15:26 · Security Affairs · Known exploited CVE