From the Frog's mouth - JFrog Blog - 2022年世界杯赛程时间表

Meet Aran Azarzar, JFrog’s New CIO

March 30, 2023Shlomi Ben Haim, CEO, JFrog|5min read

Traditionally, a company’s chief information officer (CIO), is a highly technical person who usually ‘sits in the back office’ and oversees the information technology department's resources and staff. But that basic job description has dramatically evolved over the last decade, and now CIOs are considered one of the most strategic roles in the company, charged…

5 tips on how Developers, DevOps and security teams can work together

March 23, 2023Batel Zohar,Developer Advocate|4min read

As we all know, team collaboration can sometimes be a bit complicated. Especially when different teams in the organization strive to achieve their own individual goals. This is where new organizational practices, such as DevOps and DevSecOps, have paved the path for us to work together and achieve our mutual goals. Take a look at…

Save time fixing security vulnerabilities much earlier in your SDLC

March 22, 2023Paul Garden,Security Product Marketing|4min read

Are you or your development team tired of using application security tools that generate countless results, making it difficult to identify which vulnerabilities pose actual risks? Do you struggle with inefficient or incorrect prioritization due to a lack of context? What adds insult to injury is that traditional CVSS scoring methods ignore critical details like…

Gain real-time observability into your software supply chain with the New Relic Log Analytics Integration

March 15, 2023Kristian Taernhed, Sr. Technical Alliance Manager and Mahitha Byreddy, Senior Software Engineer|4min read

JFrog’s new log analytics integration with New Relic brings together powerful observability capabilities to monitor, analyze, and visualize logs and metrics from self-hosted JFrog environments. The integration is free for all tiers of self-hosted JFrog customers and utilizes the powerful, open source log management tool, Fluentd, to collect, process, and surface data in New Relic…

Attackers are starting to target .NET developers with malicious-code NuGet packages

March 20, 2023Natan Nehorai, Application Security ResearcherBrian Moussalli, Security Research Tech Lead|12min read

Update 2023-03-21 - We've talked with members of the NuGet team and they had already detected and removed the malicious packages in question. Malicious packages are often spread by the open source NPM and PyPI package repositories, with few other repositories affected. Specifically - there was no public evidence of severe malicious activity in the…

Examining OpenSSH Sandboxing and Privilege Separation – Attack Surface Analysis

March 14, 2023Yair Mizrahi,Senior Security Researcher|18min read

The recent OpenSSH double-free vulnerability - CVE-2023-25136, created a lot of interest and confusion regarding OpenSSH’s custom security mechanisms - Sandbox and Privilege Separation. Until now, both of these security mechanisms were somewhat unnoticed and only partially documented. The double-free vulnerability raised interest for those who were affected and those controlling servers that use OpenSSH.…

Release Trusted Software Faster – Our New release Lifecycle Management Beta Is Here

March 9, 2023Sean Pratt, Senior Product Marketing Manager|4min read

Releasing production-ready software is a complicated tangle of tools and processes lacking visibility, traceability, and consistency. This leads to custom integrations and human intervention, which create opportunities for mistakes, impede automation, and increase the likelihood of insecure software being released. JFrog's release lifecycle management capabilities enable "release first" software supply chain (SSC) management, delivering trusted…

How to Onboard to a Federated Repository

March 8, 2023Muhammed Kashif, Enterprise Solution Lead, JFrog|7min read

Scaling up your development organization typically involves spreading development across multiple locations around the globe. One of the key challenges with multisite development is ensuring reliable access to required software packages and artifacts for teams collaborating across time zones. The JFrog Software Supply Chain Platform solves this challenge with federated repositories in JFrog Artifactory. What…

争取一个“DigitALL”世界,赋予yone on International Women’s Day

March 8, 2023Shlomi Ben Haim, CEO, JFrog|5min read

As I pondered the theme of this year’s International Women’s Day - DigitALL and Embracing Equality - it struck me how much we take for granted in our always-on, always-connected world. Technology has opened up countless opportunities for everyone, including women. At least those who have the necessary digital access to take advantage of it.…

Advanced DevOps Security With Development Flexibility

March 7, 2023Paul Garden,Security Product Marketing|9min read

Announcing the general availability of JFrog Xray’s advanced security features in self-hosted subscriptions, organizations have the flexibility to manage and secure their software development pipelines in-house and in the cloud. Since Developers and the DevOps infrastructure are the primary attack vector in the software supply chain, we designed our platform and the advanced security features…

JFrog Advanced Security

Welcome to theJFrog Blog

Latest:

Analyzing Impala Stealer – Payload of the first NuGet attack campaign

FILTERBY

hth华体会最新官方网站

Solutions

Other