swampUP 2026: JFrog's Conference Puts AI Supply Chain Trust at the Center
swampUP 2026 in New York (September 1–3) focuses on immunizing, healing, and governing the agentic software supply chain. Anthropic's Deputy CISO, NVIDIA, AWS, and Wiz are on the agenda. Here's what to expect.
Gateway API v1.6: TCP and UDP Routing Are Finally Production-Ready
Kubernetes Gateway API v1.6 graduates TCPRoute and UDPRoute from experimental to Standard, letting platform teams route databases, DNS, and gaming traffic without vendor lock-in.
Kubernetes v1.37: The Deprecations Platform Teams Need Now
cgroup v1 nodes now fail kubelet initialization by default, kube-proxy IPVS mode is deprecated, and Static Pods lose Secret/ConfigMap references in v1.37.
JFrog's Agent Guard Targets the MCP Servers Nobody in Security Approved
36% of MCP servers and agent skills tested carry a security flaw. JFrog's Agent Guard adds an approved-only proxy so developers can't connect coding agents to ungoverned tools.
Why the controller-runtime Cache Keeps Kubernetes Stable
Every Kubernetes controller reads through a local cache, not the API server directly — the list-watch mechanism that makes that possible, and where it breaks.
The Practical Guide to AI Sandboxes for Developers
AI coding agents have deleted home directories and a production database. What an AI sandbox is, how isolation levels differ, and where it fits.
Datadog's Mambark: A 97M-Parameter Filter That Cuts AI Security Costs 10,000x
Datadog's Mambark, a 96.9M-parameter state-space model, screens 10 billion daily security events down to ~10,000 candidates before an AI agent ever runs.
An OpenAI Model Found a Zero-Day in Artifactory. JFrog Patched It Fast.
OpenAI's models autonomously chained vulnerabilities to escape a sandbox and reach Artifactory infrastructure — a preview of what 'AI as attacker' means for patch response times.
Remote MCP Servers: Why 'Just Run It Locally' Stopped Working
Remote MCP servers move tool access from a developer's laptop to hosted infrastructure — here's the architecture shift and why CircleCI built one for CI/CD.
Model Routing Promises 85% Savings. One Switch Can Erase All of It.
JFrog's research shows model routing cuts AI agent costs by 40-85% — but a single mid-session model switch can cost more than the savings it was meant to create.
Terraform's New Undo Button Fixes Its Scariest Failure Mode
HCP Terraform's new Stacks restore feature undoes accidental workspace deletion with one click — part of a broader release addressing monorepo sprawl and migration friction.
Autonomous Infrastructure for Agentic Workflows
HashiCorp's seven-layer model for governing infrastructure as AI agents make changes at machine speed, from code to policy-bound self-service.
AI Coding Speed Is Outrunning Secrets Security
Nearly 30 million secrets leaked on GitHub in 2025 (up 34% YoY). AI-assisted code leaks at nearly 2x the rate. What DevOps security teams should do now.
Datadog JFR: Why CPU-Time Profiling Beats Wall-Clock in JDK 25
JDK 25 adds unbiased CPU-time profiling to Java Flight Recorder, fixing wall-clock sampling bias that misleads Java performance work.
NuGet Typosquat: How One Extra Letter Rigged a Betting Platform's Odds
JFrog uncovered Newtonsoftt.Json.Net, a typosquatted NuGet package that patched a betting platform's game logic to rig crash-game outcomes on a schedule only the attacker knew.
DevGovOps: The Compliance Framework AI-Speed Development Actually Needs
AI agents commit 10–50x faster than human developers. EU DORA compliance requires continuous proof of controls. DevGovOps is the framework that reconciles the two.
Datadog's MCP Security Agents: What Production Looks Like Beyond the Demo
Datadog built MCP tools for Cloud SIEM operations and published the engineering decisions. Progressive disclosure cut token usage 41%. Here's the architecture.
Datadog: What a Sixth Gartner Lead Means for AI-Driven Ops Teams
For the sixth straight year, Datadog tops Gartner's Observability MQ. Here's what the recognition reveals about observability in an AI-native world.
Atlassian's Jira Gets a Coding Agent: What the Teamwork Graph Actually Changes
Jira Coding Agent is now live on all paid plans. Atlassian's Teamwork Graph provides project context to connected AI coding tools — here's what that means for platform teams managing AI-assisted development at scale.
AI Agents Now Have a Package Manager — and JFrog Is the Enterprise Registry
APM (Agent Package Manager) treats agent primitives like versioned software packages. JFrog's Artifactory adds native support, bringing supply-chain governance to AI agent configuration.
The Velocity Gap Is Getting Worse: What CircleCI's Q2 2026 Data Shows
Elite engineering teams now run 9x more main-branch workflows than median teams — up from 8x in Q1. CircleCI's Q2 Pulse report introduces a new metric, MER, that explains why the gap compounds.
CircleCI Rewrote Its CLI in Go Because Coding Agents Needed Predictability
CircleCI's CLI rewrite isn't a developer ergonomics play—it's infrastructure for agentic CI/CD. Consistent JSON, stable exit codes, and a first-class MCP server are now the requirements.
JFrog Boost: The Free CLI That Cuts AI Coding Token Bills Before You Hit the Limit
JFrog Boost enters public preview with 80% payload reduction in CI scenarios—addressing the token-cost problem quietly becoming every platform team's biggest AI line item.
CircleCI Q2 2026: The 9x Velocity Gap Between Elite Teams and Everyone Else
CircleCI analyzed 20 million workflows and found the gap between top 5% engineering teams and median teams widened to 9x in Q2 2026. The differentiator isn't AI — it's what happens to code before it reaches the AI pipeline.