JF_Baxnner_JFrog-Names-Nine-Global-Winners-for-the-Inaugural-Software-Supply-Chain-Excellence-Awards_203X148

JFrog Names Nine Global Winners for Inaugural Software Supply Chain Excellence Awards

JFrog announced completion of the first-ever Software Supply Chain Excellence Awards, recognizing the teams who have turned their software supply chain into a competitive advantage – unifying development, security and operations around a governed, automated ecosystem that delivers trusted software at scale. The nine honorees span the Americas, Europe, and Asia-Pacific, across three categories: Unified …

JF_Banner_The-impact-of-AI-Era-on-vulnerability-research-and-CVEs_203X148 (1)

The Impact of AI on CVEs: Industry Challenges

Integrating artificial intelligence into cybersecurity has fundamentally changed vulnerability research – and not necessarily for the better. For decades, discovering and verifying Common Vulnerabilities and Exposures (CVEs) required deep technical expertise, creating a disciplined process that kept disclosure volume relatively manageable. Today, Generative AI has obliterated that barrier to entry. While AI empowers seasoned security …

Why Self-Healing Is the Only Way to Secure at Frontier AI Speed

For twenty years, the software security playbook has worked the same way. You find the vulnerability, score it, open a ticket, assign it to a human, wait for the fix, ship the patch, and prove it happened. Every step in that sequence assumes humans can review each fix individually and still keep up. Frontier AI …

Why Uniform Governance Fails with Enterprise AI Agents (And How to Fix It)

Notice: JFrog AI Catalog is now JFrog AI Security. AI registries have moved to Artifactory, while AI asset curation is now managed in Curation. Learn more. As organizations aggressively shift from static Large Language Model (LLM) chatbots to fully dynamic, autonomous AI agents (e.g. systems designed to plan workflows, call APIs, write runtime code, and …

AI Models Won’t Pick Sides in the Security War. Governance and Policy Will.

Two significant software supply chain cybersecurity attacks, seven days apart, with one hundred and eighty million weekly downloads between them. The chaos from development teams to the boardroom is real. And the pace is only going to get faster. Much, much faster… On March 24, the LiteLLM Python package, the proxy through which millions of …

Trusted AI Adoption (Part 1): Consolidation

Trusted AI Adoption (Part 1): Consolidation

Imagine your lead Software Engineer walks into your office and says, “Good news! I just deployed that critical update to production. I wrote the code on my personal laptop, didn’t run it through CI/CD, skipped the security scan, and just copied the files directly to the server with a USB drive.” You would fire them. …