--- title: Artifactory RCE chain hits prod, Docker AI agents go... description: Three chained JFrog Artifactory bugs are giving attackers unauthenticated admin access in under five minutes, and it's actively exploited right now. A new... canonical: https://daily.dev/posts/artifactory-rce-chain-hits-prod-docker-ai-agents-go-hunting-for-api-keys-lnkvw3wx9 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Artifactory RCE chain hits prod, Docker AI agents go hunting for API keys | daily.dev og:description: Three chained JFrog Artifactory bugs are giving attackers unauthenticated admin access in under five minutes, and it's actively exploited right now. A new... og:url: https://daily.dev/posts/artifactory-rce-chain-hits-prod-docker-ai-agents-go-hunting-for-api-keys-lnkvw3wx9 og:image: https://api.daily.dev/og/posts/LnKvW3wX9.png og:image:alt: Artifactory RCE chain hits prod, Docker AI agents go hunting for API keys og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Artifactory RCE chain hits prod, Docker AI agents go hunting for API keys **[Security Digest](https://daily.dev/sources/security_digest)** · 5 min read · 0 upvotes · 0 comments ## Summary Three chained JFrog Artifactory bugs are giving attackers unauthenticated admin access in under five minutes, and it's actively exploited right now. A new botnet called Carbonato is compromising exposed Docker hosts and deploying its own AI agent to specifically hunt for stolen AI API keys. Dutch police arrested a suspect tied to ShinyHunters just as the group escalates against Cl0p and the FBI. Meanwhile Japan had a rough week: Keio Corporation got hit with ransomware and Times Car confirmed a breach touching 6.6 million accounts. ## Content **TLDR:** Three chained JFrog Artifactory bugs are giving attackers unauthenticated admin access in under five minutes, and it's actively exploited right now. A new botnet called Carbonato is compromising exposed Docker hosts and deploying its own AI agent to specifically hunt for stolen AI API keys. Dutch police arrested a suspect tied to ShinyHunters just as the group escalates against Cl0p and the FBI. Meanwhile Japan had a rough week: Keio Corporation got hit with ransomware and Times Car confirmed a breach touching 6.6 million accounts. --- ## JFrog Artifactory under active exploitation via chained auth-bypass bugs CVE-2026-42018, CVE-2026-42016, and CVE-2026-82329 chain together to let an unauthenticated attacker grab an admin-scoped JWT with plain HTTP requests, sometimes in under five minutes. Once in, attackers have been creating persistent admin accounts, deploying malicious Groovy plugins, and stealing signing keys. Given Artifactory sits at the center of a lot of build pipelines, this is a straight shot at your supply chain if you're running an unpatched, internet-exposed instance. Patch to 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, 7.161.20 or newer, and go hunt for signs someone already got in, because patching won't kick out an attacker who's already inside. [Read more](https://daily.dev/posts/39GSdIrjz) ## Docker botnet Carbonato deploys its own AI agent to steal your AI keys Malwarebytes found a botnet, active since late 2024, targeting Docker hosts with the API exposed on port 2375 with no auth (a misconfiguration Docker itself has warned about since 2013). Once inside, it installs an agent built on the open-source Hermes Agent framework, nicknamed GH0ST, that takes instructions over Telegram and can reason through multi-step tasks rather than just running a fixed script. Its first priority on a compromised host: AI API keys, then SSH creds and access tokens. It also worms to nearby Docker hosts and sets up reverse SSH tunnels for persistence. If your Docker daemon is reachable from the internet without auth, that's the whole story right there. [Read more](https://daily.dev/posts/i7SLWUX6m) ## ShinyHunters escalates against Cl0p and the FBI as Dutch police make an arrest Dutch police confirmed the arrest of a 24-year-old Amsterdam man, identified as Pepijn van der Stap (previously known as 'Umbreon'), tied to the ShinyHunters investigation; he was already on probation from a 2023 hacking conviction and is due in court today. Separately, ShinyHunters appears to be picking fights with both the Cl0p ransomware gang and the FBI, an escalation that multiple security researchers are watching as a possible turning point for the group. Worth tracking whether the arrest slows anything down or if ShinyHunters just keeps operating as a loose collective regardless. [Read more](https://daily.dev/feed-by-ids?id=j6hZ0KvI7&id=ja6dbFEsc&id=r7yJS7vdI) ## Japan takes a beating: Keio ransomware, Times Car breach hits 6.6 million accounts Keio Corporation, which runs railways and hotels including Keio Plaza Hotel Tokyo, confirmed a ransomware attack that disrupted business and payment systems starting September 26, though trains kept running and no group has claimed credit yet. Separately, Times Car confirmed a breach of roughly 6.6 million member accounts including names, addresses, driver's license images, and passwords (stored unrecoverably, so at least that part held). Tokyo Metro also disclosed exposure of 59,000 member emails around the same window, and it's unclear if any of these are connected. [Read more](https://daily.dev/feed-by-ids?id=2DjaSGemj&id=1MdA3XbE8) --- ## Also notable - **16,000+ exposed Supabase databases, many tied to vibe-coded apps:** UpGuard scanned 300,000 Supabase-hosted domains and found over 16,000 with publicly readable tables exposing plaintext passwords, auth tokens, and personal data, a pattern strongly correlated with AI-generated apps that shipped without anyone checking row-level security. [Read more](https://daily.dev/posts/l5fvS1MIv) - **Athena coalition discloses 14 'silent' Java vulnerabilities with no CVEs:** Chainguard's Athena coalition disclosed 14 previously-unassigned Java vulnerabilities (one critical, one high) that were fixed upstream but never got a CVE, publishing patched versions with a '-0cgr.n' suffix that developers can drop into their lockfile with no code changes. [Read more](https://daily.dev/posts/K1ITUzGMB) - **US soldier gets 70 months for AT&T/Verizon hacking and Snowflake extortion:** Cameron John Wagenius ('kiberphant0m') was sentenced to 70 months and ordered to pay $294,978 restitution for stealing call/text metadata on over 100 million AT&T customers via credential-stuffed Snowflake accounts, and was later caught in jail trying to get AI tools to generate exploit code. [Read more](https://daily.dev/posts/CqRxTjLjd) - **JadePuffer wipes 100+ Azure storage accounts in a 7-minute automated burst:** Microsoft documented Storm-3168 using a compromised Azure service principal (credentials leaked in a public GitHub issue's edit history) to delete over 100 storage accounts and attempt backup-lock removal in roughly seven minutes, consistent with scripted rather than manual execution. [Read more](https://daily.dev/posts/yEWFfHUWE) - **New RSA signature-forgery attack needs 1,380 CPU core-years, doesn't touch padded RSA:** A subexponential attack from Nadia Heninger's team forges RSA signatures without factoring the key, but it only works on unpadded 'textbook' RSA and required 1,380 CPU core-years just for 1024-bit keys, so PKCS#1/PSS-padded 2048-bit+ deployments are unaffected. [Read more](https://daily.dev/posts/t0pAGN1T1) ## Similar posts on daily.dev - [Artifactory Vulnerabilities Under Active Exploitation Enable Authentication Bypass and Admin Access](https://daily.dev/posts/artifactory-vulnerabilities-under-active-exploitation-enable-authentication-bypass-and-admin-access-39gsdirjz) · InfoQ · 0 upvotes · 0 comments - [Exploited JFrog Artifactory bug puts software supply chain on alert](https://daily.dev/posts/exploited-jfrog-artifactory-bug-puts-software-supply-chain-on-alert-fl2nmmecb) · CSO Online · 2 upvotes · 0 comments - [CVE-2026-82329: Unauthenticated Administrative Access in…](https://daily.dev/posts/cve-2026-82329-unauthenticated-administrative-access-in--jp5ers0bt) · Sliver C2 Documentation · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#docker](https://daily.dev/tags/docker), [#ransomware](https://daily.dev/tags/ransomware), [#artifactory](https://daily.dev/tags/artifactory) [View this post on daily.dev](https://daily.dev/posts/artifactory-rce-chain-hits-prod-docker-ai-agents-go-hunting-for-api-keys-lnkvw3wx9) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/artifactory-rce-chain-hits-prod-docker-ai-agents-go-hunting-for-api-keys-lnkvw3wx9","headline":"Artifactory RCE chain hits prod, Docker AI agents go hunting for API keys","text":"Three chained JFrog Artifactory bugs are giving attackers unauthenticated admin access in under five minutes, and it's actively exploited right now. A new botnet called Carbonato is compromising exposed Docker hosts and deploying its own AI agent to specifically hunt for stolen AI API keys. Dutch police arrested a suspect tied to ShinyHunters just as the group escalates against Cl0p and the FBI. Meanwhile Japan had a rough week: Keio Corporation got hit with ransomware and Times Car confirmed a breach touching 6.6 million accounts.","url":"https://daily.dev/posts/artifactory-rce-chain-hits-prod-docker-ai-agents-go-hunting-for-api-keys-lnkvw3wx9","datePublished":"2026-09-29T04:17:40.174Z","dateModified":"2026-09-29T04:18:03.853Z","author":{"@type":"Organization","name":"Security Digest","logo":"https://media.daily.dev/image/upload/s--m4ZKB_C0--/f_auto,q_auto/v1779959612/logos/security_digest","url":"https://daily.dev/sources/security_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/security_digest","name":"Security Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Digest","item":"https://daily.dev/sources/security_digest"},{"@type":"ListItem","position":3,"name":"Artifactory RCE chain hits prod, Docker AI agents go hunting for API keys"}]} ```