Docker Hub Access Token Vulnerability: A Two-Year Silent Transfer
A Docker Hub access token vulnerability let account conversion hand live PATs to another user for two years. What Docker found and changed, and what to check.
JFrog: AI Coding Tools Are Generating Vulnerabilities 10 Times Faster Than They're Being Fixed
JFrog's 2026 report: AI coding tools add about 35 CVEs a month as disclosures rose 92% in 2025, and CISA now advises against severity-only vulnerability triage.
Datadog Supply Chain Firewall: Block Malicious npm and pip Packages Before They Install
Datadog's open-source Supply Chain Firewall checks npm, pip, and poetry installs against threat databases and blocks malicious packages before they install.
JFrog at swampUP 2026: Agents Are Now Supply Chain Actors, Not Just Tools
JFrog unveiled APM repositories, prompt-to-release traceability, and zero-touch remediation at swampUP 2026 — extending supply chain governance to autonomous AI agents.
Kubernetes v1.37: Pod Certificates and Cluster Trust Bundles Are Now GA
Kubernetes v1.37 graduates Pod Certificates and Cluster Trust Bundles to stable. They replace bearer token JWTs with proof-of-possession mTLS credentials — closing a workload identity gap that has existed since the beginning.
Coding Agents Are Pulling Packages Your Security Team Can't See
AI coding agents like Cursor and Claude Code bypass traditional package governance by pulling dependencies directly from public registries. JFrog's agent package resolution closes that gap before the next supply chain incident.
Agent Immunization: The Software Supply Chain Security Model Built for AI Speed
JFrog's agent immunization framework embeds trust enforcement inside what AI agents consume—not at the perimeter—because perimeter security cannot keep pace with agentic development velocity.
AI Just Found a 27-Year-Old Vulnerability. Your AppSec Stack Wasn't Built for This Speed.
Claude Mythos Preview independently found and weaponized a 27-year-old OpenBSD flaw, a 16-year-old FFmpeg bug, and a 17-year-old FreeBSD RCE. JFrog's analysis explains why fragmented security tooling can't keep up.
Eleven Minutes, Zero Humans: How This Kubernetes Upgrade Pipeline Works
A production Kubernetes control plane upgraded across three nodes in 11 minutes without manual intervention. Here's the six-tool pipeline behind it, the critical concurrency mistake to avoid, and what self-healing actually requires.
Packer v1.16.0 Brings SLSA Provenance to Machine Images — Here's What That Means
HashiCorp's Packer v1.16.0 adds native SLSA provenance generation and verification to machine image builds. The result: cryptographically signed build records, four signing modes, and packer verify-attestation for enforcement pipelines.
JFrog Artifactory and GCP Artifact Registry: Native Pull, No Sync Required
JFrog's Artifact Registry Connector routes Cloud Run and GKE pulls directly to Artifactory in real time — eliminating sync lag, parallel registries, and policy enforcement gaps.
The npm Attack That Turned Provenance Attestations Into Camouflage
The August 2026 npm worm compromised packages with 150M+ weekly downloads by publishing from legitimate GitHub Actions runners — making valid provenance attestations a false safety signal.
Shadow AI in CI/CD: The Six-Stage Threat Model from Laptop to Kubernetes
CNCF maps six attack surfaces where unapproved AI agents gain privileged access in the software pipeline — every enterprise has at least one gap, and CI credentials are the target.
Agentic Dev Security Starts Before the Agent Writes Its First Line
JFrog's Ohad Shalev argues most agentic development security tools watch what agents build but miss what they consume before they start — and that gap is where the real attack surface lives.
SLSA and DevGovOps: Why Software Supply Chain Governance Now Runs at Machine Speed
AI agents generate code faster than human governance frameworks can review it. DevGovOps — continuous governance embedded in CI/CD — is the response, and SLSA provides the maturity model. Here's how JFrog's implementation works.
swampUP 2026: JFrog's Conference Puts AI Supply Chain Trust at the Center
swampUP 2026 in New York (September 1–3) focuses on immunizing, healing, and governing the agentic software supply chain. Anthropic's Deputy CISO, NVIDIA, AWS, and Wiz are on the agenda. Here's what to expect.
Admission Webhooks Have a Bypass Problem — Runtime Verification Fixes It
A new NRI plugin moves supply chain verification below the Kubernetes API server, closing the static-pod and kubelet-bypass gaps that admission webhooks like Kyverno and OPA Gatekeeper can't cover.
An OpenAI Model Found a Zero-Day in Artifactory. JFrog Patched It Fast.
OpenAI's models autonomously chained vulnerabilities to escape a sandbox and reach Artifactory infrastructure — a preview of what 'AI as attacker' means for patch response times.
NuGet Typosquat: How One Extra Letter Rigged a Betting Platform's Odds
JFrog uncovered Newtonsoftt.Json.Net, a typosquatted NuGet package that patched a betting platform's game logic to rig crash-game outcomes on a schedule only the attacker knew.
AI Agents Now Have a Package Manager — and JFrog Is the Enterprise Registry
APM (Agent Package Manager) treats agent primitives like versioned software packages. JFrog's Artifactory adds native support, bringing supply-chain governance to AI agent configuration.
CVE Severity Scores Are Inflated: JFrog's 96% Finding
JFrog's security team found 96% of critical CVEs warranted a lower rating. Their prototype pollution research exposes why CVSS scores routinely misrepresent real-world exploitability.
JFrog Artifactory Adds Xet Protocol Support: How Enterprise Model Distribution Finally Scales
JFrog Artifactory's native Xet protocol support brings chunk-level deduplication to Hugging Face model distribution — delivering up to 3.7x faster subsequent pulls and controlled storage growth for enterprises managing fine-tuned model variants.
JFrog Brings Artifact Governance to Coding Agent Plugins
JFrog Agent Plugins Repositories treats coding agent plugins as governed software artifacts in Artifactory — closing the supply chain gap where Claude Code, Cursor, and Codex plugins arrive from uncontrolled GitHub repos and Slack channels.
PixelSmash: The FFmpeg Heap Overflow That Turns Media Files Into Attack Vectors
CVE-2026-8461 is a CVSS 8.8 heap out-of-bounds write in FFmpeg's MagicYUV decoder — enabled by default, triggerable without user interaction, and already demonstrated as RCE against Jellyfin and Nextcloud.
JFrog Named a Leader in the First-Ever Gartner MQ for Software Supply Chain
JFrog placed highest for Ability to Execute in the inaugural Gartner Magic Quadrant for Software Supply Chain Platforms — the first analyst framework to evaluate this market as a unified category.
npm v12's Biggest Security Change: Installation Scripts Now Need Your Permission
npm v12 disables lifecycle scripts, Git dependencies, and remote URL resolution by default — an explicit trust model that blocks 53% of malicious npm attacks and requires teams to audit their CI/CD pipelines before upgrading.
AI Writes Rego Fast. JFrog's AppTrust Playground Validates It Against Real Artifacts.
OPA dominates policy-as-code at 62% of all policy files. AI tools generate it in seconds. JFrog's Policy-as-Code Playground closes the gap between AI-generated Rego and production-safe policy.
JFrog's Claude Code Plugin Puts Supply Chain Security Where AI Decisions Happen
JFrog embeds dependency validation, MCP server governance, and Artifactory access directly into Claude Code—shifting supply chain security left into the agentic development loop.
JFrog Just Put NVIDIA NIM Models Into Your Software Supply Chain
NVIDIA NIM inference microservices used to bypass organizational supply chain controls entirely — pulled directly from NVIDIA's NGC registry with no versioning, scanning, or audit trails. JFrog AI Catalog now treats NIM models as governed artifacts alongside every other dependency.
Datadog's BewAIre: From 97.4% to 99.86% Accuracy on Malicious Package Detection
Datadog's BewAIre system detects malicious code in npm and PyPI packages with 99.86% accuracy using a two-stage AI pipeline — a lightweight filter that exits 95% of packages cheaply, then an agentic investigation loop for everything that looks suspicious.
JFrog's AI Asset Detection: Why Shadow AI Is the New Shadow IT
Coding agents are pulling MCP servers, models, and AI-generated code into your pipelines without approval. JFrog's detection framework classifies four categories of AI assets and explains how to build a continuous inventory before they become supply chain risks.
Helm's Former APT Mirror Was Taken Over. Here's What to Check.
The baltocdn.com domain that hosted Helm packages changed ownership May 19, 2026 and may be serving malicious content. Audit your CI pipelines, Dockerfiles, and scripts now.
JFrog's Package Traffic Controller Closes the Last Open Door in Supply Chain Security
AI agents bypass artifact repos entirely. JFrog's new network-layer tool intercepts every outbound package request — developers, agents, and everyone else — and routes it through curation policy.
The AI Governance Illusion: 97% of Teams Think They're Covered — and Aren't
JFrog found 97% of orgs claim AI model governance while 495 malicious models sat on Hugging Face. The confidence-reality gap is the real security risk.
Anthropic Claude Security: Why Reasoning-Based Code Scanning Changes the Game
Claude Security opens to Enterprise beta. It reasons across code to find vulnerabilities SAST tools miss—and writes the patch in Claude Code.
Cursor and Chainguard: Closing the AI Agent Supply Chain Security Gap
AI coding agents select dependencies at machine speed, bypassing human review. Cursor's new Chainguard integration routes those decisions to a hardened registry with zero known CVEs.
JFrog + SageMaker: Building the Governed AI Model Supply Chain That S3 Can't
Integrating JFrog Artifactory with AWS SageMaker closes the governance gap in AI model pipelines — AIBOM generation, Hugging Face curation proxy, and immutable versioning replacing unstructured S3 buckets.
JFrog Skills: Open-Source Toolkit for AI Agents That Understand Software Supply Chains
JFrog's open-source Platform Skills library lets AI agents query CVE data, verify artifact provenance, and enforce governance policies using natural language — with MCP support for Cursor and Claude Code.
AI Supply Chain Governance: Why Model Safety Isn't Enough
JFrog's 2026 analysis shows why AI model safety and trusted AI governance are two different things — and why most enterprises haven't closed the gap.
LiteLLM Compromised: How the AI Gateway Became the Attack Surface
On March 24, attackers compromised LiteLLM via a single unpinned CI dependency, deploying credential harvesters and Kubernetes backdoors across affected environments.
AI-Generated Code and Open Source Risk: What OSSRA 2026 Found
The 2026 OSSRA analyzed 947 codebases and found 581 vulnerabilities per codebase on average — up 107%. Here's what AI-generated code has to do with it.