jfrog.com resources | appsec.fyi

jfrog.com

Resources curated from this publisher and indexed across appsec.fyi topic pages. Last item added: 2026-08-25.

AI 15 Supply Chain 13 RCE 2 Bug Bounty 1 Deser 1 Python 1

Date Added	Resource	Excerpt
2026-08-25 2026	Why Self-Healing Is the Only Way to Secure at Frontier AI Speed Supply Chain	Library for a Self-Healing Software Supply Chain that operates at machine speed to automatically remediate vulnerabilities. This approach addresses the collapsed exploit window and broader attacker pool created by Frontier AI, ensuring speed and trust through build-safe fixes, ecosystem-wide reach, context-aware relevance, and verifiable governance. It integrates prevention, detection, prioritization, remediation, and evidence into a single system, unlike fragmented tools.
2026-08-25 2026	Agent Immunization: A New Model for Building Trusted AI Agents AI Supply Chain	Library introducing agent immunization, a security model that builds trust into an AI agent's consumption, build, and shipping processes, rather than relying on external perimeters. This approach addresses risks from poisoned or vulnerable AI assets, like MCP servers, by ensuring nothing is trusted by default and enforcement occurs at the point of action. Unlike manual human review or sandboxing, immunization is designed to scale with autonomous agent development, making agents trustworthy by default for autonomous operation.
2026-08-22 2026	Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory AI Supply Chain	Library for propagating user identity from AI agents to downstream tools, focusing on the integration between Amazon Bedrock AgentCore Gateway and JFrog Artifactory. It details the "On-Behalf-Of" (OBO) token exchange mechanism, a core feature of AgentCore Identity, enabling calls to JFrog Artifactory to authenticate as the end user rather than a shared service account. This process maintains audit fidelity, enforces least privilege, and enhances containment by leveraging OIDC token exchange and JFrog's access control.
2026-08-21 2026	Don’t Break the Agent: Lessons in Token Optimization AI	Library for optimizing agentic AI coding workflows, focusing on accurate token usage by intervening as the final step before output enters the context window. It employs a novel "Boost suffix" and bundled skill to inform the agent about optimizations, allowing it to retrieve original content when needed. This mechanism provides in-band runtime feedback to identify and address filters that negatively impact agent performance, supplemented by offline benchmarking with Terminal-Bench 2.0 to ensure quality and cost savings. The library aims to maximize accuracy while minimizing token consumption, unlike earlier tools that optimize prematurely and misattribute savings.
2026-08-19 2026	Frontier AI Application Security: Every Second Counts AI	Library for integrated application security that embeds security directly into the SDLC, offering binary-level SAST, SCA, secrets detection, container and IaC scanning, and runtime verification. It streamlines impact analysis with features like Xray's Impact Search and Snippet Detection, and tailors remediation guidance to specific builds. The library also includes preventative measures like JFrog Curation to block vulnerable packages and AI components before they enter the development pipeline.
2026-08-07 2026	Agentic Development Security is a Discipline that Starts Before the First Line of Code AI	Library for Agentic Development Security (ADS) that treats prevention and remediation as a unified discipline. It secures both what agents consume (AI assets, MCP servers, skills, plugins, systems' access) and what they produce (code, dependencies, builds, releases) within a single system of record and policy engine. JFrog's platform gates assets at the point of request using curation and inventory, then performs artifact-centric analysis on generated code and dependencies with JFrog Advanced Security and Xray, offering AI-powered CVE ranking for prioritization and context-aware remediation.
2026-07-30 2026	How to Control AI Assets Before They Become Shadow AI AI	Library for native policy enforcement within coding agents, JFrog Agent Guard controls AI asset access by managing connections to MCP servers, agent skills, and plugins. It leverages an approved-only proxy, an enforcement hook within IDEs like VS Code and Cursor, and MDM lockdown for distribution, ensuring only vetted and approved resources are used. This integrated approach provides real-time, visible, and enforced security without adding friction to developer workflows, with all actions logged for auditing purposes.
2026-07-22 2026	The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results Supply Chain	Writeup on the Newtonsoftt.Json.Net NuGet typosquat targeting Digitain, a betting platform. The malicious package, masquerading as Newtonsoft.Json, delivers a trojanized fork that rigs game results and exfiltrates data. It employs HarmonyLib to patch the `GenerateGameResult` method within `Digitain.FG.SharedCrash.GameLogic.SharedCrashRules`, with payload evolution across seven versions featuring obfuscation changes, rigging strategies, and exfiltration paths, utilizing the header `X-Seq-ApiKey: theperfectheist2025`. The package was available on NuGet from August to October 2025.
2026-07-09 2026	Secure AI Workflows: The Identity and Access Management (IAM) Checklist AI Supply Chain	Checklist for securing AI workflows, focusing on Identity and Access Management (IAM) for both human-assisted AI (e.g., Claude Code, Cursor via MCP) and autonomous agents in CI/CD. It details an 8-point roadmap, including disabling anonymous access, using vetted MCP servers, employing restricted scoped tokens with downscoping, dynamic permission validation, audit log visibility via custom user-agent headers, composite identities for agents, restricting write operations (e.g., pull requests), and enforcing deterministic infrastructure-level IAM policies to prevent prompt injection attacks against production databases. The checklist principles apply broadly, though examples are from the JFrog Platform.
2026-07-08 2026	Beyond Tokens SF: Best Ideas of the Evening AI	Library for building secure and efficient AI agents, tackling challenges like token waste, context evaporation, and insecure infrastructure. It introduces JFrog Fly for managing release context and decision records, JFrog Boost for reducing token costs by filtering noise and preventing inefficient search, and NanoClaw for agent isolation, credential security, and human-in-the-loop approvals. These tools enable agents to operate autonomously with increased speed, trustworthiness, and reduced expenditure.
2026-07-02 2026	Where Severity Scores Go Wrong: “Just Add Prototype Pollution”Bug Bounty	Analysis of CVE severity scores, particularly in relation to Prototype Pollution vulnerabilities, reveals that assigned scores often overstate real-world risk. Using JavaScript's Axios as a case study, this analysis demonstrates how vulnerabilities like CVE-2026-44494 and CVE-2026-44490, which rely on pre-existing prototype pollution (e.g., from outdated Lodash versions like CVE-2019-10744), can be misclassified. The research highlights the need to consider practical exploitation requirements and environmental constraints beyond the vulnerability itself to accurately assess severity.
2026-06-25 2026	How JFrog and NanoClaw are Bringing Software Supply Chain Security to the Age of Autonomous AI AI Supply Chain	Library for securing autonomous AI agents, integrating the JFrog Platform with NanoClaw. This solution routes agent requests for packages, CLI tools, and MCP servers through JFrog registries in real-time. JFrog Curation evaluates requests against security policies, blocking compromised dependencies like those with critical CVEs, and enabling agents to automatically install clean alternatives via JFrog Catalog, ensuring continuous workflow with guided self-correction.
2026-06-24 2026	Stop Treating Coding Agent Plugins Like Settings: Introducing Agent Plugins Repositories AI Supply Chain	Library for managing agent plugin repositories, addressing the security risks of uncontrolled distribution channels like GitHub repos and Slack commands. It highlights that plugins are executable software with no inherent versioning, provenance, or audit trail, making them vulnerable to supply-chain attacks similar to those seen with npm packages and Docker images. The library enables signed, immutable releases, unified access control, complete audit trails, and single-copy storage for agent assets, integrating them into existing CI/CD pipelines and offering a governed alternative to Git for hosting these executable assets.
2026-06-23 2026	PixelSmash – Critical FFmpeg Vulnerability Turns Media Files into Weapons RCE	Tool for detecting PixelSmash (CVE-2026-8461), a critical FFmpeg vulnerability enabling remote code execution via crafted media files. This heap out-of-bounds write affects hundreds of applications like Jellyfin, Nextcloud, Kodi, and mpv by exploiting the MagicYUV decoder's handling of slice heights, leading to crashes or arbitrary code execution when processing malicious AVI, MKV, or MOV files.
2026-06-19 2026	npm v12’s Biggest Security Change: From Implicit to Explicit Trust Supply Chain	Library introducing explicit trust for npm package installations in v12, blocking script execution, Git repositories, and remote URLs by default, requiring explicit approval. This change directly addresses common malware delivery mechanisms exploited in campaigns like Shai-Hulud variants and easy-day-js, which leveraged lifecycle scripts, Git dependencies, and remote URLs to steal credentials and compromise developer environments.
2026-06-12 2026	How to Validate Policy-as-Code Without Breaking Builds (Even When AI Writes the Code)AI	Library for validating Open Policy Agent (OPA) Rego policies, particularly those generated by AI tools like Claude Code and Cursor. It offers an AI-assisted authoring capability that translates natural language descriptions into Rego, and a playground for evidence-based validation against real application artifacts pulled from a System of Record. This allows security teams to test policies in a realistic environment before deployment, preventing accidental build breaks and ensuring effective governance.
2026-06-11 2026	Our AI Agent Now Has a Security Conscience: Introducing the JFrog Plugin for Claude Code AI	Plugin for Claude Code that integrates JFrog's Software Supply Chain Platform, providing AI coding agents with real-time security scanning, package safety checks, and governed MCP server management. It enables artifact traceability via JFrog Artifactory, dependency governance through JFrog Curation, and controlled MCP server usage via Agent Guard, ensuring AI-generated code adheres to organizational security and compliance policies by shifting governance earlier in the development workflow.
2026-06-11 2026	The Governance Gap: What IDC’s 2026 Data Reveals About AI and the Software Supply Chain AI Supply Chain	Survey of AI's impact on the software supply chain, revealing that corporate AI adoption is outpacing governance readiness. The IDC 2026 report highlights "Shadow AI" as a significant unmanaged threat, with developers using unvetted tools and AI-generated code. The entry stresses that AI agents cannot self-police compliance and may introduce vulnerable dependencies from repositories like npm or PyPI. The solution involves building platform-level guardrails within the software supply chain to manage AI adoption safely.
2026-06-08 2026	Introducing Package Traffic Controller: Software Supply Chain Security at the Network Edge Supply Chain	Library that enforces software supply chain security at the network edge. Package Traffic Controller intercepts all outbound package download requests, rerouting them transparently through Artifactory for inspection against security, license, and quality policies. This approach prevents shadow downloads from AI agents or other non-development users, ensuring compliance without disrupting developer workflows, and provides auditable logging of all artifact interactions.
2026-06-08 2026	Trusted AI Adoption (Part 2): Detection AI	Library for continuous detection of unmanaged AI assets in agentic supply chains. It addresses the velocity problem of coding agents by implementing deep scanning across binaries, containers, source code, build manifests, and agent configurations. The library classifies discovered assets into Managed, Partially Managed, Unmanaged (Shadow AI), and Malicious categories, enabling automated responses and shifting security from hopeful to enforcement.
2026-06-08 2026	NVIDIA NIM Models Are Now Governed Assets in Your Supply Chain AI Supply Chain	Library for governing NVIDIA NIM models within the software supply chain, integrating them into JFrog Artifactory and JFrog Curation for unified discovery, explicit allow/block policies, and audit trails. This ensures NIM models, like Docker images or npm packages, pass through established security controls, preventing bypass of risk tolerance, licensing, and approval workflows by developers and coding agents.
2026-04-22 2026	Shai-Hulud npm Supply Chain Attack: New Compromised Packages Detected Supply Chain	Writeup on the Shai-Hulud npm supply chain attack details a significant wave of compromised packages, including new variations and obfuscation techniques. Threat actors are targeting popular npm packages to steal credentials from GitHub, NPM, AWS, GCP, and Azure, then exfiltrating this data by creating encoded repositories. The attack utilizes a data-stealer payload bundled within Webpack applications, often disguised as system optimization tools, and employs utilities like TruffleHog to gather secrets.
2026-04-16 2026	Dissecting and Exploiting CVE-2025-62507: RCE in Redis RCE	Writeup of CVE-2025-62507, a stack buffer overflow in Redis's XACKDEL command, details how an attacker can trigger this vulnerability by providing an excessive number of stream IDs. This overflow allows for overwriting the return address on the stack, potentially leading to remote code execution, especially in unauthenticated Redis instances. The analysis demonstrates exploiting this flaw by crashing the server with carefully crafted commands, revealing the path to weaponized exploits.
2026-04-11 2026	XZ Backdoor CVE-2024-3094 - JFrog Supply Chain	Analysis of CVE-2024-3094 details a sophisticated supply chain attack on XZ Utils, versions 5.6.0 and 5.6.1, which allowed unauthorized remote SSH access. The malicious payload, injected into the OpenSSH server (SSHD), modified decryption routines using ChaCha20 and Ed448 signatures to enable attackers with a specific private key to execute arbitrary commands or bypass authentication. The article outlines detection methods, remediation steps including downgrading and system restarts, and a kill switch, along with JFrog OSS tools for vulnerability scanning.
2026-04-10 2026	PyTorch Users at Risk: 3 Zero-Day PickleScan Vulnerabilities \| JFrog Deser Python	Library for detecting vulnerabilities in PyTorch models. JFrog Security Research discovered three zero-day vulnerabilities in PickleScan, the industry-standard tool for scanning pickle-based models. These bypasses, including CVE-2025-10155, allow attackers to embed undetected malicious code within PyTorch models, leading to potential supply chain attacks. PickleScan's reliance on file extension checks over content analysis, and its blacklist approach, create these exploitable gaps.