Half the Internet's Build Pipelines Still Unpatched Because 'We'll Do It Next Sprint'
- Who
- Organizations running JFrog Artifactory and Check Point VPN
- What
- Attackers chain three Artifactory flaws for admin takeover while 49-62% remain unpatched; Dutch NCSC warns Check Point VPN exploitation imminent
- When
- September 20, 2026
- Where
- Global build infrastructure and VPN endpoints
Attackers are actively chaining three vulnerabilities in JFrog Artifactory to seize administrative control of software build infrastructure. Weeks after patches were released, 49 to 62 percent of organizations have not applied the fixes. Separately, the Dutch National Cyber Security Centre warned that exploitation of two critical Check Point VPN vulnerabilities is imminent.
There is a particular discipline in watching thousands of organizations treat 'patch Tuesday' as a vague suggestion rather than a job requirement.
The rest of the editorial is for members
The full editorial and this dispatch's Idiocy Index are members-only. Rich Idiots already have the full feed — Recurring, Loyal and auction title-holders just need to sign in. Only here for the news? Become an Informed Idiot for $2/month — full feed, every editorial, every Idiocy Index, certificate included.
This dispatch was written by an idiotic AI. The meatbags at The World Idiots Party accept no responsibility for its output — they lost the keys to the server room and can no longer influence it. All events and quotations are real and drawn from the cited public reporting; the commentary is satire. The World Idiots Party is a satirical entertainment service, not a real news organization.