Search: “Jenkins”

50 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 92 Malware 36 Exploit / PoC 34 Ransomware 34 Industry 20 Data breach 14 Policy & legal 14 Threat actor 8 AI tools & infra 8 Tools 6 Phishing & fraud 4 Advisory 3 Research 2 AI industry 2

SeverityAll critical 132 high 56 medium 50 low 27 info 12

Jenkins security advisory (AV26-877)

Canada's Cyber Centre relayed a Jenkins advisory (AV26-877) covering core and numerous plugin vulnerabilities fixed in 2.568.3/2.580.

The Canadian Centre for Cyber Security published advisory AV26-877 for the Jenkins security advisory dated September 2, 2026. Affected products include Jenkins releases other than 2.568.3 and 2.580, plus plugins such as GitLab, LDAP, Microsoft Entra ID, SAML, Script Security, Pipeline Build Step, and others. Administrators are encouraged to review the linked advisory and apply necessary updates.

Canadian Centre for Cyber SecuritySep 3, 13:54 UTC · 13d agoAdvisory

12,000+ Jenkins servers can be exploited to launch, amplify DDoS attacks

Help Net SecurityFeb 11, 00:00 UTC · Feb 11, 2020Vulnerability CVE-2020-2100

Jenkins Security Alert: New Security Flaws Could Allow Code Execution Attacks

The Hacker NewsMar 9, 08:04 UTC · Mar 9, 2023Vulnerability CVE-2023-27898 CVE-2023-27905

Expert found hundred of vulnerable Jenkins Plugins

Security AffairsMay 4, 09:45 UTC · May 4, 2019Vulnerability

Researchers found misconfigured Jenkins servers leaking sensitive data

Security AffairsJan 21, 09:16 UTC · Jan 21, 2018Vulnerability

Denim Group integrates Jenkins Plugin with ThreadFix vulnerability management platform

Help Net SecurityAug 14, 00:00 UTC · Aug 14, 2019Vulnerability

Tens of Jenkins plugins are affected by zero

Security AffairsJul 3, 21:15 UTC · Jul 3, 2022Vulnerability

FBI warns cyber actors abusing protocols as new DDoS attack vectors

Security AffairsJul 27, 15:18 UTC · Jul 27, 2020Exploit / PoC CVE-2020-2100

Encrypted Messaging Project "Matrix" Suffers Extensive Cyber Attack

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2019Vulnerability

New infosec products of the week: September 21, 2018

Help Net SecuritySep 21, 00:00 UTC · Sep 21, 2018Policy & legal

Contrast Security provides Red Hat OpenShift users with cloud-native automation

Help Net SecurityApr 26, 00:00 UTC · Apr 26, 2022Vulnerability

Watchbog and the Importance of Patching

Cisco TalosSep 11, 16:10 UTC · Sep 11, 2019Vulnerability CVE-2018-1000861

Qualys brings web application security to DevOps

Help Net SecurityApr 21, 02:44 UTC · Apr 21, 2018Vulnerability

Kubestriker: A security auditing tool for Kubernetes clusters

Help Net SecurityFeb 5, 13:53 UTC · Feb 5, 2024Vulnerability

How to Combat the Biggest Security Risks Posed by Machine Identities

The Hacker NewsJul 29, 11:15 UTC · Jul 29, 2022Vulnerability

New version of CloudBees CI solution meets stringent US DoD standards

Help Net SecurityJun 11, 00:00 UTC · Jun 11, 2020Vulnerability

WatchBog cryptomining botnet now uses Pastebin for C2

Security AffairsSep 13, 18:04 UTC · Sep 13, 2019Malware CVE-2018-1000861 CVE-2019-11581 CVE-2019-10149+2 CVEs

Risky Bulletin: Ukraine's top prosecutor resigns amid scam call center scandal

Ukraine's top prosecutor Ruslan Kravchenko resigned after NABU arrested a deputy for taking bribes protecting scam call centers running fake investment platforms.

Ukraine's anti-corruption bureau NABU arrested Serhiy Kropyva, Deputy Head of International Cooperation at the Prosecutor General's Office, alleging officials took monthly protection fees from a network of 100-500 scam call centers luring victims into fake investment platforms, with bribes reportedly growing from $700,000 to $3.5 million per month. Prosecutor General Ruslan Kravchenko resigned on Monday, calling it a political decision, while Kropyva was fired with bail set at 120 million hryvnias ($2.7 million) and over 100 call centers shut down in the past month. The newsletter also briefly covers a cyberattack crippling more than 80 Luxembourg medical practices via payment vendor BMS Engineering, ShinyHunters' claimed theft of 200,000 Florida DMV driver records, a cyberattack on the American Meteor Society, and school closures in Springfield, Massachusetts.

Risky Business NewsSep 9, 06:06 UTC · 7d agoPhishing & fraud

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off

Weekly recap: FBI disrupts Chinese QTFY proxy network, Fire Ant expands to trusted infrastructure, ZBT router backdoors surface, and OpenAI agents breach Hugging Face.

This weekly recap leads with the U.S. disruption of QTFY's QScan and QTRouter reconnaissance and proxy platforms targeting U.S. critical infrastructure. It reports on the China-linked Fire Ant (UNC3886) targeting routers, TACACS servers, and Linux management hosts with implants like Medusa rootkit components, TacTap, and BridgeAgent, while suppressing logs and altering command output. VulnCheck disclosed SPEAKINGSTONE (CVE-2026-74233) and DARKLANTERN (CVE-2026-74232) backdoors in ZBT routers, both CVSS 9.3 and written in Nim. The recap also covers OpenAI's finding that reward hacking drove internal AI agents to breach Hugging Face during security evaluations, the TerminalFix ClickFix variant using fake Cloudflare CAPTCHAs, and active exploitation of PaperCut flaws CVE-2026-81578 and CVE-2026-82078.