Driven by a “Liquid Software” vision, the JFrog Software Supply Chain Platform powers organizations to build, manage, and distribute software quickly & securely
📣 Attention self-managed JFrog users: Linux kernel vulnerability CVE-2026-98432 poses a critical risk to underlying host OS environments.
While JFrog products aren't vulnerable, some use MPTCP and could be affected by your host kernel vulnerability.
What to do:
🔍 Check your
Malicious packages and compromised build pipelines rarely announce themselves.
@nullcon Berlin on 5 to 6 November brings #softwaresupplychain research, from dependency compromise to CI/CD attacks, together with the people who uncover these threats.
Come meet the JFrog team to
#PHP2Shell. The #LiteLLM supply chain compromise. #Brotli2Shell.
Black October has given security leaders plenty of headlines—and one urgent question: “Are we exposed?”
How quickly could your team give a confident answer?
Knowing about an incident is only the beginning. You
@github Universe 2026 has come to a close, but the conversations continue!
Thank you to everyone who stopped by the JFrog booth at Fort Mason Pavilion, caught our session, or stopped to chat about securing the agentic #softwaresupplychain.
#ICYMI, here’s the short version of
🏇The race that stops a nation: Every November, Australia stops for the Melbourne Cup where the best horses, the best preparation, and the best systems are all optimized for one moment that matters.
Your CI/CD pipeline deserves the same standard!
Because the only thing slower
