From the Frog's mouth

All Blogs

Security

DevOps

AI/ML

IoT

Cloud

Industries

Integrations & Partners

News & Community

JFrog Cloud Native Innovation – Availability, Security Performance and Efficiency at Scale

January 9, 2025 Batel Zohar, JFrog Developer Advocate | 8 min read

JFrog uses open source tools such as Kubernetes, Kubernetes Event-driven Autoscaling (KEDA), and Prometheus to develop its cloud development infrastructure and ensure tight integration with the three leading cloud providers AWS, GCP, and Azure. Let’s explore how JFrog cloud deployments leverage our cloud-native architecture to provide enhanced security and management capabilities for DevOps while ensuring…

CVE-2024-6197 Curl and Libcurl: Use-after-Free on the Stack

December 18, 2024 Ben Gross, Security Researcher Yair Mizrahi, JFrog Security Research Team Leader | 12 min read

On July 24th 2024, Curl maintainers announced a new stack buffer Use After Free (UAF) vulnerability - CVE-2024-6197. This type of vulnerability is very uncommon since UAF issues usually occur on the heap and not on the stack. While the vulnerability can be easily exploited for causing denial of service, in this blog we will…

Integrating Vector Databases with LLMs: A Hands-On Guide

May 15, 2024 Ran Romano, VP of P&E, JFrog | 21 min read

Welcome to our hands-on guide where we dive into the world of Large Language Models (LLMs) and their synergy with Vector Databases. LLMs have been a game-changer in the tech world, driving innovation in application development. However, their full potential is often untapped when used in isolation. This is where Vector Databases step in, enhancing…

Breaking Silos: Unifying DevOps and MLOps into a Cohesive Software Supply Chain – Part 3

January 15, 2025 Yuval Fernbach, JFrog VP and CTO MLOps | 7 min read

The synergy between DevOps and MLOps is more crucial now than ever. However, merging these two paradigms into a coherent software supply chain poses a unique set of challenges that can leave teams feeling overwhelmed. From the complexities of managing model dependencies to adapting conventional CI/CD tools for advanced machine learning (ML) workflows, the path…

Breaking Silos: Unifying DevOps and MLOps into a Cohesive Software Supply Chain – Part 2

December 19, 2024 Yuval Fernbach, JFrog VP and CTO MLOps | 12 min read

In this blog series, we will explore the importance of merging DevOps best practices with MLOps to bridge this gap, enhance an enterprise's competitive edge, and improve decision-making through data-driven insights. Part one discussed the challenges of separate DevOps and MLOps pipelines and outlined a case for integration. In this second of three blogs, we’ll…

JFrog Cloud: Architected for Performance at Scale

December 10, 2024 Eldad Assis, Principal DevOps Architect, JFrog | 7 min read

Petabytes of monthly data transfer. Thousands of concurrent requests per customer. Hundreds of thousands of requests per minute per customer. The JFrog Platform is a mission critical piece of software development and delivery infrastructure for companies that require performance at scale. When you’re supporting thousands of developers, even a minute of downtime or delay can…

Machine Learning Bug Bonanza – Exploiting ML Clients and “Safe” Model Formats

December 4, 2024 Shachar Menashe, JFrog VP Security Research Or Peles, JFrog Vulnerability Research Team Leader Ori Hollander, JFrog Security Researcher Uriya Yavnieli, JFrog Security Researcher | 15 min read

In our previous blog post in this series we showed how the immaturity of the Machine Learning (ML) field allowed our team to discover and disclose 22 unique software vulnerabilities in ML-related projects, and we analyzed some of these vulnerabilities that allowed attackers to exploit various ML services. In this post, we will again dive…

Gain Clarity on Cloud Usage with Enhanced Monitoring from MyJFrog

November 20, 2024 The JFrog Team | 5 min read

We can all agree that visibility into resource usage is crucial for optimizing performance and managing costs to drive your business — especially in today’s cloud-driven world. MyJFrog is a comprehensive management portal for overseeing JFrog cloud platform instances and subscriptions. It provides a centralized control tower to manage and monitor subscriptions, resources, and usage.…

Feature Store Benefits: The Advantages of Feature Stores in Machine Learning Development

October 22, 2024 Pavel Klushin, JFrog Senior Solution Engineering Manager | 9 min read

Feature stores are rapidly growing in popularity as organizations look to improve their machine learning productivity and operations (MLOps). With the advancements in MLOps, feature stores are becoming an essential component of the machine learning infrastructure, helping organizations to improve the performance and ability to explain their models, and accelerate the integration of new models…

CVE-2024-10524 Wget Zero Day Vulnerability

November 18, 2024 Goni Golan, Junior Security Researcher, JFrog Security | 8 min read

While researching CVE-2024-38428 in GNU’s Wget, our team found a new 0-day vulnerability. The vulnerability, later assigned CVE-2024-10524, may lead to various types of attacks - including phishing, SSRF, and MiTM. These attacks can have severe consequences such as resource restriction bypass and sensitive information exposure. Upon discovering this vulnerability, our team responsibly disclosed it…

Welcome to the JFrog Blog

Latest:

Now Available: Evidence Collection with JFrog