Welcome to the JFrog Blog

Latest:

Agent Immunization: A New Model for Building Trusted AI Agents

August 24, 2026 Ohad Shalev, JFrog Product Marketing Manager, AI/ML

5 min read

The riskiest thing an AI agent does all day isn't writing code. It's shopping. Every few minutes, it reaches out for a package, an AI asset, or a tool, and pulls it in with no real way to check what's inside. We think the fix is agent immunization: security that lives inside what an agent…

Read More

All Blogs

Coding Agents Just Reopened Your Software Supply Chain Blind Spot

Coding Agents Just Reopened Your Software Supply Chain Blind Spot

August 25, 2026 Yonatan Philip, JFrog Senior Product Manager | 6 min read

Most organizations spent years hardening their software supply chain. The model is familiar: dependencies flow through a controlled repository, policies determine what is allowed, scanning catches what slips through, and every action is logged for auditability. It works because human developers operate within environments that enforce these rules. AI coding agents break that assumption entirely.…
Read More
Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory

Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory

August 21, 2026 Carmit Hershman, JFrog Senior Software Architect, CTO Office Dan Cohen, AWS Senior Solutions Architect | 19 min read

  Join us at swampUP New York, September 1-3, for our joint session Trusted AI Delivery at Scale: Securing Every Artifact from Curation to Cloud, where we walk the full chain of custody from the moment a package enters your organization to the moment your agent runs on Amazon Bedrock AgentCore. Register here. AI agents…
Read More
Frontier AI Application Security: Every Second Counts

Frontier AI Application Security: Every Second Counts

August 18, 2026 Matan Libis, JFrog Director of Product for Application Security | 8 min read

Somewhere in the last few months, the math of application security quietly broke. Anthropic's Claude Mythos Preview didn't just analyze code, it found a 27-year-old vulnerability in OpenBSD, a 16-year-old bug in FFmpeg, and a 17-year-old remote code execution flaw in FreeBSD, entirely on its own. Then it went further: it built working exploits for…
Read More
JFrog Artifactory Now Integrates Natively with Artifact Registry in Google Cloud

JFrog Artifactory Now Integrates Natively with Artifact Registry in Google Cloud

August 12, 2026 Eldad Assis, JFrog Principal DevOps Architect, CTO Office | 6 min read

Teams running containerized workloads on Google Cloud have long relied on JFrog as their single source of truth for container images. The missing piece has been getting Google Cloud's own runtime services — like Cloud Run and Google Kubernetes Engine (GKE) — to pull directly from JFrog for every container image pull. I’m happy to…
Read More
Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings

Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings

July 27, 2026 Yoav Landman, JFrog CTO | 5 min read

UPDATE August 5, 2026: This week at Black Hat USA, the OpenAI team presented a detailed reconstruction of the chain of events behind the Hugging Face incident. I was glad to watch OpenAI speaking openly about it. This kind of transparency reflects the same spirit of collaboration we experienced working with their team behind the…
Read More
The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results

The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results

July 21, 2026 Guy Korolevski, JFrog Security Researcher | 14 min read

The JFrog Security Research team has discovered and disclosed a typosquatted NuGet package named Newtonsoftt.Json.Net. Note the double t and the .Net suffix.  This package has been masquerading as the popular Newtonsoft.Json library while quietly shipping a trojanized fork. The trojan rigs Digitain, an online betting platform, and in later generations, exfiltrates rigged round results…
Read More

Popular Tags