JFrog·Dark Reading·
Attackers Pounce on Critical Artifactory Bug Following Disclosure
CVE-2026-82329 is an authentication bypass flaw in JFrog's repository manager that enables bad actors to gain admin-level access on affected systems.
Manufacturing cybersecurity
Industrial control systems, OT networks and supply chains. 4 stories tracked, ranked by severity and corroboration.
The weekly manufacturing briefing is written every Monday from the week just gone. The first edition appears here once there is a week of tracked activity to write it from. Get it by email.
BleepingComputer·
Trezor data breach impact now reaches 81,000 customers
Cryptocurrency hardware wallet maker Trezor says an August data breach at its shipping and logistics provider, ShipMonk, affects an additional 67,000 U.S. customers. [...]
The Hacker News·
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in a breach at its shipping provider ShipMonk. The exposed information includes customer names, email addresses, phone numbers, shipping addresses, and order numbers between November 2019 and August 2021. The breach does not affect the security of the company's hardware wallets
AMD·Hacker News·
Geekom admits to shipping malware-laced network drivers for AMD mini PCs
A story is tagged manufacturing when the reporting names the industry, an organisation in it, or a product specific to it. Tagging errs towards leaving a story out: one obviously unrelated item does more damage to an industry briefing than a short one does.