🤖 (🤗+🐸 )=✅ I am always stoked to share how the tech world operationalizes ethical values, and I get to do that today. 🥳 @hf.co and JFrog have partnered to certify models for security and safety.
This also moves forward AI *trustworthiness* and provides another form of AI *transparency*. More later!
This also moves forward AI *trustworthiness* and provides another form of AI *transparency*. More later!
JFrog and Hugging Face Team to Improve Machine Learning Security and Transparency for Developers
JFrog Ltd (Nasdaq: FROG), the Liquid Software company and creators of the JFrog Software Supply Chain Platform, today announced it is partnering with
www.businesswire.com
March 4, 2025 at 6:59 PM
🤖 (🤗+🐸 )=✅ I am always stoked to share how the tech world operationalizes ethical values, and I get to do that today. 🥳 @hf.co and JFrog have partnered to certify models for security and safety.
This also moves forward AI *trustworthiness* and provides another form of AI *transparency*. More later!
This also moves forward AI *trustworthiness* and provides another form of AI *transparency*. More later!
New recent victims:
-Elastic
-Nutanix
-CyberArk
-Cato Networks
-Bugcrowd
-JFrog
-BeyondTrust
-Rubrik
-Elastic
-Nutanix
-CyberArk
-Cato Networks
-Bugcrowd
-JFrog
-BeyondTrust
-Rubrik
September 7, 2025 at 7:18 PM
New recent victims:
-Elastic
-Nutanix
-CyberArk
-Cato Networks
-Bugcrowd
-JFrog
-BeyondTrust
-Rubrik
-Elastic
-Nutanix
-CyberArk
-Cato Networks
-Bugcrowd
-JFrog
-BeyondTrust
-Rubrik
#LookAndSee 287 #MusicChallenge
#MusicSky
The Magnetic Fields - Long Forgotten Fairytale
www.youtube.com/watch?v=PNeh...
#MusicSky
The Magnetic Fields - Long Forgotten Fairytale
www.youtube.com/watch?v=PNeh...
December 27, 2025 at 2:27 PM
#LookAndSee 287 #MusicChallenge
#MusicSky
The Magnetic Fields - Long Forgotten Fairytale
www.youtube.com/watch?v=PNeh...
#MusicSky
The Magnetic Fields - Long Forgotten Fairytale
www.youtube.com/watch?v=PNeh...
Last year, I committed to uncovering critical vulnerabilities in Maven repositories. Now it’s time to share the findings: RCE in Sonatype Nexus, Cache Poisoning in JFrog Artifactory, and more! github.blog/security/vul...
January 22, 2025 at 6:16 PM
Last year, I committed to uncovering critical vulnerabilities in Maven repositories. Now it’s time to share the findings: RCE in Sonatype Nexus, Cache Poisoning in JFrog Artifactory, and more! github.blog/security/vul...
February 8, 2026 at 6:10 AM
what do you mean they're running Artifactory. like JFrog??? Artifactory???? the three gigabyte docker image?????
August 8, 2026 at 9:04 AM
what do you mean they're running Artifactory. like JFrog??? Artifactory???? the three gigabyte docker image?????
Good thing OpenAI, Huggingface, and JFrog are uniquely bad at security. Otherwise I'd be concerned about the security of schools, hospitals, and other infrastructure that we all rely on.
August 31, 2026 at 6:23 PM
Good thing OpenAI, Huggingface, and JFrog are uniquely bad at security. Otherwise I'd be concerned about the security of schools, hospitals, and other infrastructure that we all rely on.
JFrog should turn the HF hack into a positive marketing spin
September 18, 2026 at 7:59 PM
JFrog should turn the HF hack into a positive marketing spin
My condolences that you have to use JFrog products
August 10, 2026 at 2:56 PM
My condolences that you have to use JFrog products
jfrog: publish npm packages to us, we have options on how latest is determined!
users: are any of the options "work like the upstream"?
jfrog: no of course not! why would you want that?
jfrog.com/help/r/jfrog...
users: are any of the options "work like the upstream"?
jfrog: no of course not! why would you want that?
jfrog.com/help/r/jfrog...
JFrog Help Center
jfrog.com
May 16, 2025 at 6:50 PM
jfrog: publish npm packages to us, we have options on how latest is determined!
users: are any of the options "work like the upstream"?
jfrog: no of course not! why would you want that?
jfrog.com/help/r/jfrog...
users: are any of the options "work like the upstream"?
jfrog: no of course not! why would you want that?
jfrog.com/help/r/jfrog...
what
the package proxy wasn't theirs. they discovered this exploit in external software. it was literally called a zero day by the relevant vendor jfrog.com/blog/jfrog-a...
the package proxy wasn't theirs. they discovered this exploit in external software. it was literally called a zero day by the relevant vendor jfrog.com/blog/jfrog-a...
Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings
Discover how AI models expose zero-day vulnerabilities and why rapid remediation is essential for modern software supply chain security.
jfrog.com
September 16, 2026 at 6:18 PM
what
the package proxy wasn't theirs. they discovered this exploit in external software. it was literally called a zero day by the relevant vendor jfrog.com/blog/jfrog-a...
the package proxy wasn't theirs. they discovered this exploit in external software. it was literally called a zero day by the relevant vendor jfrog.com/blog/jfrog-a...
You can stop hopping between tools to trace your builds. 🔍 Our new integration with JFrog is here! 🐸
Connect your source code to your attested binaries for a single, secure, and traceable workflow from commit to production. ✅
Find out how it works. ⬇️
https://gh.io/AAy3pj4
Connect your source code to your attested binaries for a single, secure, and traceable workflow from commit to production. ✅
Find out how it works. ⬇️
https://gh.io/AAy3pj4
How to use the GitHub and JFrog integration for secure, traceable builds from commit to production
Connect commits to artifacts without switching tools.
github.blog
October 2, 2025 at 3:55 PM
You can stop hopping between tools to trace your builds. 🔍 Our new integration with JFrog is here! 🐸
Connect your source code to your attested binaries for a single, secure, and traceable workflow from commit to production. ✅
Find out how it works. ⬇️
https://gh.io/AAy3pj4
Connect your source code to your attested binaries for a single, secure, and traceable workflow from commit to production. ✅
Find out how it works. ⬇️
https://gh.io/AAy3pj4
JFrog Artifactory can die in a fire.
April 14, 2026 at 6:10 PM
JFrog Artifactory can die in a fire.
Did JFrog have a vested interest in revealing that the agents found zero day exploits in their Arfifactory software? Of course not. You're being ridiculous.
September 24, 2026 at 9:21 PM
Did JFrog have a vested interest in revealing that the agents found zero day exploits in their Arfifactory software? Of course not. You're being ridiculous.
JFrog Artifactory Kritik Güvenlik Açıkları Hedefte: Acil Güncelleme Çağrısı
JFrog Artifactory Kritik Güvenlik Açıkları Hedefte: Acil Güncelleme Çağrısı
Yazılım geliştirme ve DevOps dünyasının en popüler depo yönetim araçlarından biri olan JFrog Artifactory, son günlerde kritik güvenlik açıklarıyla gündemde. …
teknovizor.com
September 11, 2026 at 7:25 PM
JFrog Artifactory Kritik Güvenlik Açıkları Hedefte: Acil Güncelleme Çağrısı
59. Farmers Insurance
60. TransUnion
61. LVMH
62. Kering
63. Salesloft
64. Cloudflare
65. Zscaler
66. Palo Alto Networks
67. Tenable
68. CyberArk
69. Elastic
70. BeyondTrust
71. Proofpoint
72. JFrog
73. Rubrik
74. Cato Networks
75. Workiva
76. UK Legal Aid Agency*
77. Jaguar Land Rover
78. Toyota
60. TransUnion
61. LVMH
62. Kering
63. Salesloft
64. Cloudflare
65. Zscaler
66. Palo Alto Networks
67. Tenable
68. CyberArk
69. Elastic
70. BeyondTrust
71. Proofpoint
72. JFrog
73. Rubrik
74. Cato Networks
75. Workiva
76. UK Legal Aid Agency*
77. Jaguar Land Rover
78. Toyota
September 24, 2026 at 2:41 AM
59. Farmers Insurance
60. TransUnion
61. LVMH
62. Kering
63. Salesloft
64. Cloudflare
65. Zscaler
66. Palo Alto Networks
67. Tenable
68. CyberArk
69. Elastic
70. BeyondTrust
71. Proofpoint
72. JFrog
73. Rubrik
74. Cato Networks
75. Workiva
76. UK Legal Aid Agency*
77. Jaguar Land Rover
78. Toyota
60. TransUnion
61. LVMH
62. Kering
63. Salesloft
64. Cloudflare
65. Zscaler
66. Palo Alto Networks
67. Tenable
68. CyberArk
69. Elastic
70. BeyondTrust
71. Proofpoint
72. JFrog
73. Rubrik
74. Cato Networks
75. Workiva
76. UK Legal Aid Agency*
77. Jaguar Land Rover
78. Toyota
🐧🐝 Learn how to set up #opensource observability in a #kubernetes cluster using JFrog Artifactory as a self-hosted container registry tool: docs.coroot.com/guides/jfrog...
#JFrog #Coroot #observability #coroot #AI #opensource #FOSS #linux #ebpf #monitoring #sre
#JFrog #Coroot #observability #coroot #AI #opensource #FOSS #linux #ebpf #monitoring #sre
February 20, 2026 at 8:08 PM
🐧🐝 Learn how to set up #opensource observability in a #kubernetes cluster using JFrog Artifactory as a self-hosted container registry tool: docs.coroot.com/guides/jfrog...
#JFrog #Coroot #observability #coroot #AI #opensource #FOSS #linux #ebpf #monitoring #sre
#JFrog #Coroot #observability #coroot #AI #opensource #FOSS #linux #ebpf #monitoring #sre
JFrog Xray is defective, flagging unaffected binaries as vulnerable, and the cost is borne by maintainers who have to field requests to work around it.
This is a real open source sustainability issue.
(The problem here is JFrog, not the person who politely opened the issue.)
This is a real open source sustainability issue.
(The problem here is JFrog, not the person who politely opened the issue.)
v1.3.1 release binaries embed Go toolchain vulnerable to CVE-2025-68121 (crypto/tls session resumption) · Issue #730 · FiloSottile/age
Summary The published v1.3.1 release binaries appear to be built with a Go toolchain that predates the fix for CVE-2025-68121 (Go issue golang/go#77217), a crypto/tls session-resumption vulnerabili...
github.com
July 24, 2026 at 8:00 PM
JFrog Xray is defective, flagging unaffected binaries as vulnerable, and the cost is borne by maintainers who have to field requests to work around it.
This is a real open source sustainability issue.
(The problem here is JFrog, not the person who politely opened the issue.)
This is a real open source sustainability issue.
(The problem here is JFrog, not the person who politely opened the issue.)
repo.scala-sbt.org is currently down, and we're contacting JFrog to restore it (as always thanks for supporting open source!)
github.com/sbt/sbt/issu... #Scala
github.com/sbt/sbt/issu... #Scala
JFrog Landing
repo.scala-sbt.org
April 7, 2025 at 8:25 AM
repo.scala-sbt.org is currently down, and we're contacting JFrog to restore it (as always thanks for supporting open source!)
github.com/sbt/sbt/issu... #Scala
github.com/sbt/sbt/issu... #Scala
Dear JFrog,
I do not want your AI in my CI/CD. In fact I don't think it should be legal for a company to be named JFrog, it sounds ridiculous.
Kind regards,
unsubscribe
I do not want your AI in my CI/CD. In fact I don't think it should be legal for a company to be named JFrog, it sounds ridiculous.
Kind regards,
unsubscribe
August 21, 2026 at 7:26 PM
Dear JFrog,
I do not want your AI in my CI/CD. In fact I don't think it should be legal for a company to be named JFrog, it sounds ridiculous.
Kind regards,
unsubscribe
I do not want your AI in my CI/CD. In fact I don't think it should be legal for a company to be named JFrog, it sounds ridiculous.
Kind regards,
unsubscribe
I find it kinda borderline negligent they thought Jfrog was a resilient barrier.
August 7, 2026 at 3:37 AM
I find it kinda borderline negligent they thought Jfrog was a resilient barrier.
JFrog had to fix 0days because OAI's agents discovered and exploited them. What's the purpose of making up stuff like this?
jfrog.com/blog/jfrog-a....
jfrog.com/blog/jfrog-a....
Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings
Discover how AI models expose zero-day vulnerabilities and why rapid remediation is essential for modern software supply chain security.
jfrog.com
September 17, 2026 at 1:33 AM
JFrog had to fix 0days because OAI's agents discovered and exploited them. What's the purpose of making up stuff like this?
jfrog.com/blog/jfrog-a....
jfrog.com/blog/jfrog-a....
Devoxx UK is made possible by our wonderful sponsors. Looking forward to seeing you all next week: Oracle, Red Hat, Redis, JFrog, Lenses, Discover, Diffblue, Snowflake, WebforJ, Elastic, Senapt, Unblocked, Webswing, Retool, Vaadin and Dijkstrack.
7-9 May | devoxx.co.uk
7-9 May | devoxx.co.uk
April 29, 2025 at 8:01 AM
Devoxx UK is made possible by our wonderful sponsors. Looking forward to seeing you all next week: Oracle, Red Hat, Redis, JFrog, Lenses, Discover, Diffblue, Snowflake, WebforJ, Elastic, Senapt, Unblocked, Webswing, Retool, Vaadin and Dijkstrack.
7-9 May | devoxx.co.uk
7-9 May | devoxx.co.uk