Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing Package Traffic Controller: Software Supply Chain Security at the Network Edge

jfrog.com | blog | #ai-security | #supply-chain | #jfrog | #networking | #shadow-ai | #curation | #package-traffic-controller

Summary

JFrog introduces Package Traffic Controller, which reroutes package downloads at the network edge through Artifactory, catching shadow agent installs that never touch the artifact system of record.
Published
Collected

original ↗

Related coverage

blog · jfrog.com
The basics of securing GenAI and LLM development
With the rapid adoption of AI-enabled services into production applications, it’s important that organizations are able to secure the AI/ML components coming into their software supply chain. The good news is that even if you don’t have a tool specifically for scanning models themselves, you can still apply the same DevSecOps best practices to securing…
blog · jfrog.com
The Agenda is Live for swampUP 2024!
The excitement is building. JFrog is pleased to announce the awesome agenda we have assembled for swampUP 2024 at the Omni Barton Creek Resort & Spa in Austin. Join us Sep 9-11 for one of the premier DevOps conferences of the year, focusing on the latest trends in software development platforms, supply chain security, OSS…
blog · jfrog.com
JFrog4JFrog: DevSecOps Made Simple
Developers simply want to write code without interruption, while operations wish to build as fast as possible and deploy without restrictions. On the other hand, security professionals want to protect every step of the software supply chain from any potential security threats and vulnerabilities. In software development, every piece of code can potentially introduce vulnerabilities…
blog · jfrog.com
Taking a GenAI Project to Production
Generative AI and Large Language Models (LLMs) are the new revolution of Artificial Intelligence, bringing the world capabilities that we could only dream about less than two years ago. Unlike previous milestones, such as Deep Learning, in the current AI revolution, everything is happening faster than ever before. Many feel that the train is about…
blog · jfrog.com
Integrating Vector Databases with LLMs: A Hands-On Guide
Welcome to our hands-on guide where we dive into the world of Large Language Models (LLMs) and their synergy with Vector Databases. LLMs have been a game-changer in the tech world, driving innovation in application development. However, their full potential is often untapped when used in isolation. This is where Vector Databases step in, enhancing…
blog · netspi.com
Stealing the Artifact – JFrog Artifactory Vulnerability
NetSPI chained four JFrog Artifactory vulnerabilities, including CVE-2026-42018 and CVE-2026-69107, to bypass authentication entirely and retrieve arbitrary artifacts as an unauthenticated attacker.
back