Welcome to the JFrog Blog

Latest:

ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell

September 15, 2026 Yuval Moravchick, JFrog Vulnerability Research Team Lead

9 min read

Your Mac runs a vulnerable version of Parallels Desktop. A malicious package, compromised CI job, or other unprivileged process is already running on it. No admin access. No Parallels-signed client. One appliance-install request later, attacker-controlled code runs as root. While testing Desktop 26.4.0 (build 57513) on Apple silicon, we found that an unprivileged local user…

Read More

All Blogs

JFrog Artifactory Supports LuaRocks Hosting for NGINX, OpenResty and Kong

JFrog Artifactory Supports LuaRocks Hosting for NGINX, OpenResty and Kong

September 16, 2026 Dean Lalezar, JFrog Product Manager | 6 min read

If your NGINX/OpenResty servers or Kong gateways pull Lua modules straight from public luarocks.org, one upstream outage can stall every build and deploy that depends on a “rock”. With LuaRocks support in JFrog Artifactory, you host and proxy those modules from a private LuaRocks registry you control, using the native experience you expect, not a…
Read More
Extending the Single Source of Truth to the Agentic Software Supply Chain

Extending the Single Source of Truth to the Agentic Software Supply Chain

September 2, 2026 The JFrog Team | 15 min read

Every developer on your team now runs multiple agents. None of them are waiting for human sign-off to act. That's exactly the gap we discussed and closed at swampUP 2026. JFrog unveiled new capabilities that extend the JFrog Platform as not only the Single Source of Truth for OSS and heritage software, but now the…
Read More
Live From the Show Floor: swampUP 2026

Live From the Show Floor: swampUP 2026

September 2, 2026 The JFrog Team | 34 min read

Live updates from this event have concluded. swampUP 2026 is officially LIVE in New York City! Three days, one stage, one mission: rebuild trust for a software supply chain that increasingly ships itself. Keynote updates land here as they happen, September 1–3, 2026. Let’s go! Conference Day 2, September 3rd [11:00 a.m.] The Great Model…
Read More
Every New Compliance Framework Restarts the Same Fire Drill. It Doesn’t Have To.

Every New Compliance Framework Restarts the Same Fire Drill. It Doesn’t Have To.

September 2, 2026 Ronny Belenitsky, JFrog Director of Product | 7 min read

Every compliance audit starts the same way: Someone flags a deadline, the team scrambles to pull evidence, map controls, and prove that the policies running in production actually match what the framework requires. They make it through. They exhale. Six months later, a new framework arrives, and the fire drill starts all over again. Most…
Read More
DevGovOps: How the AI Era Dictates That Governance Lives Inside the Pipeline

DevGovOps: How the AI Era Dictates That Governance Lives Inside the Pipeline

September 2, 2026 Roy Goldenberg, JFrog Product Marketing Manager, AppTrust | 6 min read

For decades, proving compliance meant having a person behind every decision - an engineer who remembered the approval, an auditor who could call someone and get an answer. That model worked because humans wrote, reviewed, and shipped every line of code. When agents do it instead, that dependency breaks. And so does your ability to…
Read More
The Evolution of JFrog AI Catalog: Your AI Control Plane for Agentic Development

The Evolution of JFrog AI Catalog: Your AI Control Plane for Agentic Development

September 2, 2026 Guy Eshet, Senior Manager, Product Management | 8 min read

In a single morning, a coding agent can pull an open-source model, connect to an unvetted MCP server, and execute a code-optimizing skill from the web. In the rush toward agentic automation, these AI assets quietly bypass traditional security reviews, creating new attack vectors across the software supply chain. Closing this blind spot has been…
Read More

Popular Tags