JFrog @jfrog

🪱 Nicknamed "Iron Worm", our team @JFrogSecurity found a supply-chain worm hiding in #npm. Rust-built. eBPF rootkit. Back-dated commits. And an operator who hardcoded his own crypto wallet's recovery phrase into the malware so it wouldn't rob him. Full teardown: bit.ly/43NBSa6

Your agent was doing great… Then it ran out of context, lost alignment, and you had to restart. 🙅‍♂️ If that sounds familiar, join our meetup, Beyond Tokens, on June 11th in San Francisco: bit.ly/4dONf6q At Beyond Tokens, the team behind JFrog Boost will share the internal tooling they built to kill token waste and keep agents on task + hear from Nanoclaw creator, Gavriel Cohen, explains their 3 layers of safety. Free event for builders, so seats are limited! #AIAgents #DevMeetup #AIEngineering

That's a wrap on @gartnerinc Security & Risk Management Summit 2026! 🤝 Three days of real conversations with #CISOs, #security engineers, and risk leaders who are navigating one of the most complex threat landscapes in recent memory. Special shout out to Paul Davis for his talk. 🌟 A few things we heard a lot this week: → #AI is expanding the attack surface faster than security teams can respond. → Tool sprawl is creating more noise, not more signal. → CISOs need a single source of truth, not another vendor dashboard. If you missed us, it's not too late to get started on the JFrog platform today: bit.ly/4uUKJ5S #SoftwareSupplyChain #DevSecOps #CISO #AppSec

keyboard_arrow_left Previous keyboard_arrow_right Next

Subject to Official Rules: jfrog.co/SSCEAtc

Is your team moving as one? ☝️ Fragmentation is the enemy of speed, but The Convergence Award celebrates those who turned chaos into collaboration. If you’ve unified #dev and #security into a single, trust-filled workflow, it’s your time to shine. 🌟 You know how to prove that every little thing is gonna be alright. Apply today: jfrog.co/sscawards26 #devSecOps #Frogstars #SSCEAwards

Gavriel is going to San Francisco! June 11 at @jfrog's Beyond Tokens meetup, @Gavriel_Cohen is sharing exactly how we built an agent factory that reviews and merges code in our 30K-star repo. Step by step guide with nothing held back. Register: events.jfrog.com/jfrog-beyond-t…

Evaluating a software supply chain platform shouldn't mean wasting time clicking through multiple screens and setting up test configurations. With JFrog’s new MCP server integration, you can now configure repos, audit builds, and run Xray security scans directly from your AI coding environment using plain language. Connect Cursor, Claude Code, or VS Code to your free trial instance and let your agents do the work so you can concentrate on the results. Read all about it: bit.ly/4ubrC6k #DevOps #AppSec #MCP #CursorAI #ClaudeCode

#AI has changed how software is built in Australia, and how fast it can be attacked. In our 2026 Software Supply Chain Security State of the Union, Australian findings show: ↳ 68% of organisations self-host AI models - highest rate globally ↳ 47% block unapproved IDE extensions - leading the world ↳ Yet only 38% are scanning for exposed secrets ↳ 44% still need a week or more to produce compliance audit proof Australia's automation-first approach is world-class. But automation and governance aren't the same thing, and the gap between them is exactly where attackers are moving. The gap between them is exactly where attackers are moving — and Australian organisations are not immune. Read the full findings to see where your defences stand: 🔗 bit.ly/4fvidCT Then join us live to unpack what it takes to close the gap: 📅 June 18, 2026 | 3:30PM AEST 🔗 bit.ly/4fkWe1E #DevGovOps #DevSecOps #SoftwareSupplyChain #EveryOps

That's a wrap on Day 1 of the #EveryOps Tour Australia! 🇦🇺 What an incredible morning at The Boat House with some of #Australia's most thoughtful #technology and government leaders. We brought the #EveryOpsTour to Canberra to have a real conversation about what secure #softwaredelivery looks like when #AI is reshaping how teams build and ship - and the room did not disappoint. Thank you to every leader who showed up, leaned in, and shared openly. This is exactly the kind of peer exchange that moves the industry forward. Big Shoutout to @KirraServices for their partnership in bringing this conversation to Canberra. More cities. More conversations. Stay tuned. 👀 #SoftwareSupplyChain

keyboard_arrow_left Previous keyboard_arrow_right Next

Day 1 at @Infosecurity Europe, wrapped. We're live at Booth C-40 throughout the event 🐸 The team is here, the demos are running, and Ofri Ouzan took to the stage! We've been speaking to customers and the community about: 🔒 Securing AI agents and agentic workflows 📦 Software supply chain security from prompt to production 🤖 AI-era AppSec at speed 📍 Booth C-40, ExCeL London See you tomorrow! #DevSecOps #SoftwareSecurity #InfoSecEurope

keyboard_arrow_left Previous keyboard_arrow_right Next

⏳ LAST CALL: The shift toward autonomous development is happening fast so if you haven’t secured your spot for our webinar, do it now: bit.ly/3ROz9KL Why join? AI agents are accelerating code production, but they also introduce massive supply chain risks. Tomorrow, we’re breaking down exactly how to embed automated guardrails, govern #MCP servers, and secure your pipeline at #AI scale. 🚫 Don't get left behind with slow, reactive security ticket queues. #DevGovOps #DevSecOps #AppSec #GenerativeAI #SoftwareSupplyChain

🤖 Your coding agents ran all weekend, and your security dashboard looks clean. But what about the unapproved #MCP server an agent pulled at 2:47 AM? In part 2 of our Trusted AI Adoption series, we explain why periodic scans fail in the agentic era and how to build a continuous detection engine. Stop hoping. Start enforcing. Read the full detection blueprint: bit.ly/3PCJ0Tz #DevSecOps #ShadowAI #AppSec #GenerativeAI #JFrog

The Frogs are happy to be at the @Gartner_inc Security & Risk Management Summit this week! The conversations on the floor are exactly why events like this matter. #CISOs, #security architects, and platform engineers are wrestling with the same questions: How do you govern #AI at the speed it's actually moving? How do you stop #SoftwareSupplyChain risk without slowing your #developers down? Stop by JFrog Booth 1024 and let's dig into it. Feel free to book 1:1 time with our team before the event is over: bit.ly/4dvSTLC 🌟Bonus: Tomorrow, JFrog Field CISO Paul Davis is presenting "Secure Agentic AI Supply Chains: CISO Strategies for Automated Attacks". #GartnerSRM #DevSecOps #CyberSecurity

The software supply chain has its heroes and it’s time they were celebrated… ✨We are thrilled to introduce the Software Supply Chain Excellence Awards 2026! 🐸✨ We’re looking for the teams pushing boundaries in #security, #AI, and #DevSecOps scale. Whether you've locked down your #SoftwareSupplyChain or built the infrastructure to enable AI to scale, we want to give you your flowers at the #swampUP 2026 stage. 🏆 Are you our next FrogStar? Apply today: bit.ly/4wMiVBX #FrogStars #SSCEAwards

🤔 Ever pick up a release and have zero idea what decisions went into it? At Beyond Tokens on June 11 in San Francisco, Asaf Ezra talks about how his team solved some of the biggest pains a team faces when working collaboratively to ship real software, and how this inspired the creation of Fly. Free event. Three talks. Limited seats. Make sure to register now: events.jfrog.com/jfrog-beyond-t… #AIAgents #SoftwareDelivery #DevMeetup

🚨 Security Alert: Multiple Red Hat Cloud Services npm packages have been compromised in a new supply chain incident (@​redhat-cloud-services) The embedded malware executes silently upon installation, targeting local environments to harvest sensitive CI/CD secrets and cloud access tokens. We will share our full technical analysis blog post soon. Stay tuned. 🛡️

Speed gets you to market. Trust keeps you there. As #AI writes more of our code, the real competitive edge isn't how fast you ship - it's whether you can trust what you're shipping. Sudhir Narla, GM India & VP Customer Success APAC on why trust - not speed - will separate the AI winners from the rest. Full interview: bit.ly/4vkVs9w

JFrog DevOps Group Lead Shiran Shem Tov Melamed and Software Architect Nir Baram are taking the stage at @googlecloud Summit Tel Aviv to share the technical journey of migrating an entire customer base from Postgres 13 to Postgres 17 on Cloud SQL Enterprise Plus — with near-zero downtime. They'll cover the unexpected performance boosts discovered along the way, lessons learned at scale, and JFrog's roadmap for data layer resiliency in the age of agentic AI. Register today: bit.ly/3RvXEfT

Agents burning tokens. Context maxing out. Pipelines that can't keep up. Sound familiar? 👀 Join us June 11 in San Francisco for Beyond Tokens, a free AI dev meetup with the creators of @NanoClaw_AI, JFrog Boost and JFrog Fly: bit.ly/4dONf6q Stick around for the World Cup 2026 ⚽ game, food, drinks, and to learn more about: 🤖 Faster agents 🔐 Secure infra 🚀 AI-native delivery Free event made for builders. Seats are limited, so sign up today!