JFrog

Driven by a “Liquid Software” vision, the JFrog Software Supply Chain Platform powers organizations to build, manage, and distribute software quickly & securely

[JFrog @jfrog]

#AppSec knows what you built and scanned. #CloudSecurity knows what’s running. But neither team has the full security picture. 📸

On Tuesday, November 10 at 10am PT, JFrog and @wiz_io are showing how to close that gap with an agentless, API-driven integration:
→ One view of what’s running, who owns it, and whether it’s secure
→ Less alert noise, with runtime context tied to binary-level lineage
→ Day-one detection of shadow deployments and pipeline bypasses

Demo included. Save your seat: https://t.co/sKKmtEj2CT

#AppSec #CloudSecurity #SupplyChainSecurity #CNAPP

[JFrog @jfrog]

That is a wrap on our #Securing the Agentic #SoftwareSupplyChain evening in Mumbai! 🇮🇳 ✨

Leaders from across the financial services industry joined us for a closed-door evening of candid, thoughtful conversations on keeping software delivery secure in the age of #AIagents.

The big question on the table: as AI agents start pulling code, packages, and models on their own, how do you control what enters, act on real exposure, and prove exactly what you shipped?

A heartfelt thank you to Suman Banerjee and Gajendra Kanse for sharing real-world perspectives, and to every leader who gave us an evening of their time. 💚

We look forward to continuing these conversations! 🐸
#DevSecOps #EveryOps #DevGovOps

[JFrog @jfrog]

Agents pull in code around the clock. Who inspects the models and plugins? 🐸

That was one of the questions on our minds at #DevOps summit NSW, where we had great conversations with industry leaders about building trust into the #AI driven #softwaresupplychain.

Thank you everyone who stopped by to chat. Already looking forward to the next one!

Missed catching up with us in Sydeny? Let's connect here: https://t.co/2sVUdopfP9
Until the next one 🐸

#DevOpsSummit #DevSecOps #SoftwareSupplyChain

[JFrog @jfrog]

One workflow misconfiguration can hand an attacker your repository.

Barak Haryati, Senior Director of Product Security at JFrog, built RepoHunter in 48 hours.

It’s an AI-driven research bot that pairs static analysis with #LLM reasoning to find exploitable #CICD workflows at scale. This led to responsibly disclosing 30+ critical vulnerabilities across major open-source and enterprise projects.

At @owasp Global AppSec USA, he shows how these attacks work and how you can combine static analysis with AI reasoning to catch the next CI/CD supply chain attack before it ships.

If you own a pipeline, add this session to your schedule: https://t.co/ByQHqMqPMP

#AppSec #OWASP #SoftwareSupplyChain #DevSecOps

[JFrog @jfrog]

🏆Announcing the winners of the first-ever JFrog Software Supply Chain Excellence Awards!

From securing #AI models to consolidating global developer workflows, congrats to our 9 honorees across the Americas, EMEA, and APAC: @Ford, Schottel Group, @RakutenSymphony, NVIDIA, Husqvarna, @SingaporeAir, @SPGlobal, TSB Bank, and Iress. 🚀

See how they transformed their #SoftwareSupplyChain into competitive advantages: https://t.co/cp1uAATAi3

#SSCEA #FrogStars #DevSecOps #DevGovOps

[JFrog @jfrog]

🏁 In F1, where every millisecond counts, the teams that win aren't just the fastest on the straight.

They're the ones who eliminated every unnecessary slowdown before race day.

Rate limits, throttling, and downtime are the pit stops your pipeline never scheduled.

JFrog Cloud Pro: Zero pit stops, zero rate limits, and unlimited Docker pulls all with a 99.9% uptime SLA.

$50/month through the end of race season — plus $200 in AWS credits for new signups.

Sign up today: https://t.co/0Dw8gpDUCT

#F1 #DevSecOps #CI/CD #SoftwareSupplyChain

[JFrog @jfrog]

Nullcon Berlin brings researchers, hackers, and defenders together on November 5 to 6, and the JFrog team will be there!

Bring your toughest questions about #softwaresupplychain risk, open source packages, and securing what you ship.

Let’s talk about what’s actually working in the real world.

Schedule a meeting with the JFrog team at Nullcon Berlin: https://t.co/NGxdrund7d

#Nullcon #SoftwareSupplyChain #AppSec

[JFrog @jfrog]

Missed #swampUP Europe in Barcelona? Everything that happened on stage is coming to you. 🐸

Join us on 24 November for a virtual deep dive into the biggest announcements in #softwaresupplychain security, from #AI Security and #AgentSecOps to zero-touch remediation, self-healing SSC, and #DevGovOps at scale.

Register now: https://t.co/7yRrDGzhLn

#swampUP #DevSecOps #TrustedIntelligence

[Barak Haryati @BarakHari]

🚀 Excited to speak at #OWASP Global AppSec USA 2026!

RepoHunter: AI-Driven Discovery of CI/CD Supply Chain Vulnerabilities at Scale

Real-world research, critical vulnerabilities, and AI-powered security discovery.

Proud to represent @jfrog !

San Francisco | Nov 6

[JFrog @jfrog]

#AI has broken the vulnerability research ecosystem.

While AI helps find complex zero-days faster, it is also flooding maintainers with low-effort "slop" and fabricated advisories. 📉

Key takeaways from JFrog's latest research include the effect on bug bounty programs, severity score inflation, NVD backlogs, the patching gap and more.

Read Part 1 of the series here: https://t.co/9UyD8GK0J6

#CyberSecurityAwarenessMonth #AppSec #AI #CVE #DevSecOps #OpenSource

[JFrog @jfrog]

🏆 We named the global winners of our inaugural Software Supply Chain Excellence Awards at #swampUP Europe…

Congratulations to @Ford, @NVIDIA, @SPGlobal, Iress, @RakutenSymphony, @SingaporeAir, @HusqvarnaGroup, @SCHOTTEL, and @TSBBank — the organizations proving that a trusted, governed #SoftwareSupplyChain is a competitive advantage in the #AI era. ✨

“The companies that pull ahead in the AI era will be those going beyond simply automating for speed and scale. They will be the ones who can see exactly what’s shipping, and why, they bring trust, control and adaptability. This year’s winners didn’t just add tools; they established a single source of truth where developers, security, and compliance teams can operate using the same data and the same rules. We’re very proud of all of them and thrilled to be part of their journey.”

🐸 Nine organizations. Three categories. Learn more: https://t.co/pEWibTwip2

#DevSecOps #DevGovOps #AIGovernance #swampUP

[JFrog @jfrog]

How does a bank gatekeep software at scale? Today at "Securing the agentic SSC, Mumbai 2026" - Kotak Mahindra Bank tells the story.

Suman Banerjee, Executive Vice President, Engineering at Kotak Mahindra Bank and Sudhir Narla, VP Customer Success & GM India at JFrog, unpack Kotak’s journey to a cloud-native, curated supply chain, and what the agentic era means for trusted software in BFSI.

You’ll hear what it takes to build and release trusted software in a regulated, high-velocity environment, and how the agentic software supply chain changes the rules.

📅 27th October 2026
📍 Jio Convention Centre, BKC, Mumbai
Learn more: https://t.co/bPb5rki5BK

#SoftwareSupplyChain #DevSecOps #BFSI

[JFrog @jfrog]

Your code is moving at #agentic speed. So are the threats against it.

Today in Mumbai, Gajendra Kanse, AVP - Cyber & Information Security at NSE Clearing, joins Sidhesh Iyer Business Head - India, SEA & UAE at JFrog, for a fireside chat on #Securing the #SoftwareSupplyChain in Financial Markets.

You’ll learn how to protect the systems that keep markets running with trust, traceability, and control, and what changes when AI agents enter the software supply chain.

📅 27th October 2026
📍 Jio Convention Centre, BKC, Mumbai

#DevSecOps #BFSI #FinancialServices #CyberSecurity

[JFrog @jfrog]

Your Rust backend is memory-safe. Your XSS can still be an RCE.

Tauri has 100k+ stars on GitHub, and its allowlist model looks airtight on paper. But the model is only as strong as the config behind it.

At @owasp Global AppSec USA, Yuval Moravchick, Vulnerability Research Team Leader at JFrog, shows how a full RCE chain broke a popular app ecosystem with 50k+ stars, and how you can write safer Tauri apps.

If you build or audit desktop apps, save this session to your schedule: https://t.co/NAnxHXavR5

#AppSec #OWASP #Tauri #VulnerabilityResearch

[JFrog @jfrog]

Your #developers are using #AI agents to ship code. Attackers are using AI to break it.

Ronen Lewit, VP Strategics and Field CTO at JFrog, will break down how to stay in control of both at GitHub Universe.

You’ll see how the JFrog and @github integration helps you protect, remediate, and govern the agentic software supply chain, so you can move at agentic speed with trust.

Save your spot: https://t.co/w0pNxxRMrp

#GitHubUniverse #SoftwareSupplyChain #AIAgents #DevSecOps

[JFrog Security @JFrogSecurity]

🚨 testmetest goes beyond npm.
JFrog Security Research identified 42 armed GitHub repositories across 11 legitimate owners hiding an npm publisher, plus a new native addon that decrypts its payload at runtime and stays dormant in CI, sandboxes, and analysis tools.

The campaign spans 25 npm package names. Check whether you installed any testmetest or @iobandamwer packages and remove them if found.

Full analysis: https://t.co/oLtvs4L3wU

[JFrog @jfrog]

That is a wrap on #swampUP Europe 2026 in Barcelona! 🇪🇸 ✨

Three days of hands-on training, insightful keynotes, and real conversations about the future of trusted software delivery in the #AI era. The energy at the InterContinental was electric from start to finish and the swampUP Europe community delivered in every room, on every stage. ⚡️

Thank you to every guest, speaker, and partner who made this possible. 💚

Can't wait for next year! 🐸

#DevSecOps #DevGovOps #TrustedIntelligence #SoftwareSupplyChain

[JFrog @jfrog]

Overly broad permissions are one of the most common and costly mistakes in #DevSecOps, and the "JFrog Artifactory: Access and Permission Management" course shows you exactly how to fix that: https://t.co/5DVkdaGrib

You’ll establish a strong defensive foundation by mastering central security settings and core platform access principles.

Stop leaving your pipeline exposed and build the security habits that hold up under pressure.

🔐 It’s beginner-friendly and self-paced, so get started today!

#DevSecOps #DevOps #SoftwareSupplyChain