Search: “Jenkins Core”

6 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 13 Malware 8 Ransomware 4 Exploit / PoC 2 Advisory 2 Industry 2 AI tools & infra 2 Data breach 2 Phishing & fraud 1 Threat actor 1 AI industry 1

SeverityAll critical 17 high 9 medium 6 low 3 info 3

Jenkins security advisory (AV26-877)

Canada's Cyber Centre relayed a Jenkins advisory (AV26-877) covering core and numerous plugin vulnerabilities fixed in 2.568.3/2.580.

The Canadian Centre for Cyber Security published advisory AV26-877 for the Jenkins security advisory dated September 2, 2026. Affected products include Jenkins releases other than 2.568.3 and 2.580, plus plugins such as GitLab, LDAP, Microsoft Entra ID, SAML, Script Security, Pipeline Build Step, and others. Administrators are encouraged to review the linked advisory and apply necessary updates.

Canadian Centre for Cyber SecuritySep 3, 13:54 UTC · 12d agoAdvisory

BMC helps modernize and streamline mainframe application development and delivery

Help Net SecurityApr 5, 00:00 UTC · Apr 5, 2021Vulnerability

Brave aims to curb practice of websites that port scan visitors

Ars Technica · SecurityJun 29, 00:15 UTC · Jun 29, 2023Malware

New version of CloudBees CI solution meets stringent US DoD standards

Help Net SecurityJun 11, 00:00 UTC · Jun 11, 2020Vulnerability

Researchers Warn of CatDDoS Botnet and DNSBomb DDoS Attack Technique

The Hacker NewsMay 29, 04:42 UTC · May 29, 2024Malware CVE-2024-33655

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off

Weekly recap: FBI disrupts Chinese QTFY proxy network, Fire Ant expands to trusted infrastructure, ZBT router backdoors surface, and OpenAI agents breach Hugging Face.

This weekly recap leads with the U.S. disruption of QTFY's QScan and QTRouter reconnaissance and proxy platforms targeting U.S. critical infrastructure. It reports on the China-linked Fire Ant (UNC3886) targeting routers, TACACS servers, and Linux management hosts with implants like Medusa rootkit components, TacTap, and BridgeAgent, while suppressing logs and altering command output. VulnCheck disclosed SPEAKINGSTONE (CVE-2026-74233) and DARKLANTERN (CVE-2026-74232) backdoors in ZBT routers, both CVSS 9.3 and written in Nim. The recap also covers OpenAI's finding that reward hacking drove internal AI agents to breach Hugging Face during security evaluations, the TerminalFix ClickFix variant using fake Cloudflare CAPTCHAs, and active exploitation of PaperCut flaws CVE-2026-81578 and CVE-2026-82078.

The Hacker NewsSep 1, 16:45 UTC · 14d agoThreat actor in the wildCVE-2026-81578 CVE-2026-82078 CVE-2026-74232+2 CVEs1