JFrog Platform

npm supply chain attack targets Germany-based companies with dangerous backdoor malware

May 10, 2022 Andrey Polkovnychenko and Shachar Menashe | 9 min read

Update May 11th: Following the publication of this blog post, a penetration testing company called "Code White" took responsibility for this dependency confusion attack The JFrog Security research team constantly monitors the npm and PyPI ecosystems for malicious packages that may lead to widespread software supply chain attacks. Last month, we shared a widespread npm…

Get Peace of Mind about Security When Deploying Containers from Docker Desktop

May 10, 2022 Eyal Ben Moshe | 4 min read

Have you ever deployed Docker containers and hoped they delivered safe software? Would you like to get peace of mind that the contents of your containers are secure and clear of vulnerabilities? With JFrog Xray’s new integration with Docker Desktop Extensions, you will be able to do just that. By scanning for vulnerabilities locally before…

Getting Real About Multi-Cloud DevOps

April 14, 2022 Sean Pratt, JFrog Product Marketing Manger | 4 min read

By now you’ve probably gotten the message - multi-cloud DevOps (or a hybrid on-prem/cloud approach) is the future of development and deployment architectures. The benefits of this approach are pretty clear: future proofing your business, optimizing for performance and availability, avoiding vendor lock-in, leveraging the best tools/elements of each cloud provider, and more. If you’re…

Welcome to the “New Normal” for Your Software Supply Chain

April 6, 2022 Mehdi Sif, Head of Product Marketing | 5 min read

The new world is “always-on,” hyper-connected, massively distributed, and moving at an accelerated “near-real-time” pace. Billions of active end-points such as bay stations (5G), vehicles, drones, and robots, each with various combinations of sensors, cameras, HW-acceleration plug-ins, host an exponential number of versions of embedded software bios, drivers, diagnostic, management, and other applications, with increasingly…

How to Integrate JFrog and Cycode

April 4, 2022 Batel Zohar | 3 min read

Four years ago the Clark School of engineering at the University of Maryland published a study quantifying that there is some kind of hacker attack happening every 39 seconds (on average). Which is unreal!! Source: University of Maryland A cyberattack can harm millions of people. Let’s take for example the Atlanta ransomware attack that used…

JFrog Introduces New Support for COBOL in Artifactory

April 1, 2022 JFrog Team | 3 min read

You read correctly devs and software engineers - JFrog Artifactory now includes full support for COBOL (Common Business-Oriented Language)!! This legendary software pillar in designing business applications, is making a comeback due to its incredible flexibility in being operating system-agnostic, giving customers more options for supporting their diverse enterprise environments. Created for transaction processing and…

Part II: A Journey Into the World of An Automated Security Operation Center (SOC)

March 17, 2022 Dana Rozen | 8 min read

Security operation teams continuously aim to focus on two main things: 1. Real cyber security threats (also known as “True Positive Alerts”), and 2. Reducing response time, especially when you have so many different sources to monitor. However, in reality, we deal with hundreds of security alerts on a daily basis, many of which are…

Shift Left for DevSecOps Success

March 10, 2022 Bill Manning, Solutions Architect / Engineering Manager, JFrog | 7 min read

Not long ago, developers built applications with little awareness about security and compliance. Checking for vulnerabilities, misconfigurations and policy violations wasn’t their job. After creating a fully-functional application, they’d throw it over the proverbial fence, and a security team would evaluate it at some point – or maybe never. Those days are gone – due…

Our Solution for Scalable Multi-Region SaaS Deployment

February 8, 2022 Uri Peled and Amit Michaely | 7 min read

Just like many other production DevOps engineering teams, our JFrog team deploys new version releases several times a day to AWS, Azure and GCP, across more than 20 cloud regions. This process used to take us many hours and could have even failed if it was done alongside maintenance by other teams. As part of…

Welcome to the JFrog Blog

Latest from JFrog Platform :

JFrog & Industry Leaders Join White House Summit on Open Source Software Security