ThreatVectr
Tag

#JFrog

4 stories taggedJFrog.

A MacBook Pro laptop on a desk showing virtualization software running, with a privilege escalation vulnerability diagram and an incompatible system requirement
Vulnerabilities

Parallels Desktop Bug Hands Root to Any Mac User, and Older Macs Can't Get the Patch

A flaw in Parallels Desktop for Mac lets a normal user seize full control of the machine. The fix ships only in Parallels Desktop 27, which won't install on Intel-based Macs.

4 min read
A network operations center displaying security alerts and vulnerability notifications on multiple screens, with CISA threat bulletin information visible on the
Vulnerabilities

CISA flags seven actively exploited flaws, including two in SonicWall SMA1000 boxes

The US cyber agency's Known Exploited Vulnerabilities catalog picks up bugs in Sangoma, JFrog, LiteLLM, Kestra, Starlette and a pair in SonicWall's remote access appliances.

4 min read
Illustration: A dim school computer lab at dusk, rows of identical monitors glowing with abstract blue browser windows
Threat Intelligence

Fake Student Proxies on npm Turned Browsers Into a DDoS Weapon

JFrog researchers say 148 malicious packages used npm as free hosting for a booby-trapped proxy site, quietly enlisting students' browsers into an attack campaign that ran for roughly two weeks in May 2024.

3 min read
Illustration: a server rack interior with green and amber status LEDs reflecting off polished cable trays
Vulnerabilities

DirtyClone: New DirtyFrag-Family Kernel Bug Hands Local Users Root

CVE-2026-43503 (CVSS 8.8) corrupts file-backed memory through a cloned network packet. A working PoC is now public.

3 min read
© 2026 Threat Vectr