JFrogプレスルーム

Security researchers blame the repository’s lack of moderation.

The discovery is the latest in a long line of attacks in recent years that abuse the receptivity of open source repositories, which millions of software developers rely on daily. 

As many as eight Python packages that were downloaded more than 30,000 times have been removed from the PyPI portal for containing malicious code. 

The acquisition delivers end-to-end continuous security from development to device in a unified DevOps platform

JFrog today announced that it will report financial results for the second quarter of fiscal year 2021 on Thursday, August 5, 2021.

DevOps platform provider JFrog is touting its new Private Distribution Network (PDN) as an “industry first,” because it allows DevOps teams to accelerate application updates.

The SolarWinds breach also highlighted how too many siloed DevOps tools from different vendors can lead to greater security risks, since there are more avenues for hackers to attack your company.

“If any DevOps company isn’t also a security company, it is solving only a small piece of the puzzle,” said Netanel (Nati) Davidi, co-founder and CEO of Vdoo.

Vdoo’s technology for analyzing and securing software packages will fuel JFrog’s security and runtime technology expansion.