Operations | Monitoring | ITSM | DevOps | Cloud

jfrog

Python Malware Imitates Signed PyPI Traffic in Novel Exfiltration Technique

Nov 18, 2021 By Andrey Polkovnychenko and Shachar Menashe In JFrog
The JFrog Security research team continuously monitors popular open source software (OSS) repositories with our automated tooling to report vulnerable and malicious packages to repository maintainers. Earlier this year we disclosed several malicious packages targeting developers’ private data that were downloaded approximately 30K times. Today, we will share details about 11 new malware packages that we’ve recently discovered and disclosed to the PyPI maintainers (who promptly removed them).
Read Post
jfrog

TensorFlow Python Code Injection: More eval() Woes

Nov 16, 2021 By Omer Kaspi and Shachar Menashe In JFrog
JFrog security research team (formerly Vdoo) has recently disclosed a code injection issue in one of the utilities shipped with Tensorflow, a popular Machine Learning platform that’s widely used in the industry. The issue has been assigned to CVE-2021-41228. This disclosure is hot on the heels of our previous, similar disclosure in Yamale which you can read about in our previous blog post.
Read Post
jfrog

Unboxing BusyBox - 14 new vulnerabilities uncovered by Claroty and JFrog

Nov 9, 2021 By Vera Mens, Uri Katz, Tal Keren, Sharon Brizinov, Shachar Menashe In JFrog
Embedded devices with limited memory and storage resources are likely to leverage a tool such as BusyBox, which is marketed as the Swiss Army Knife of embedded Linux. BusyBox is a software suite of many useful Unix utilities, known as applets, that are packaged as a single executable file. Within BusyBox you can find a full-fledged shell, a DHCP client/server, and small utilities such as cp, ls, grep, and others.
Read Post

Embrace your updates - creating a world of daily software releases without fear!

Nov 8, 2021 By JFrog In JFrog
Imagine a world where we would all enjoy updating the software we use. A world where software producers could be excited about releasing every day without fear. This is the future of 'liquid software', when updates, like water, run freely to all corners of the world. In this session, JFrog co-founder and chief data scientist Fred Simon will share his vision of achieving trusted continuous updates in the DevOps world, in which software is constant. He will show us why continuous software updates are critical for our modern world.
View Video
jfrog

Announcing the JFrog Slack App for Artifactory and Xray Cloud

Nov 8, 2021 By Deep Datta In JFrog
Imagine a world where every team member could directly contribute to software together. We’re living in that world now. With more than 10 million daily active users, Slack is one of the most ‘lived in’ collaboration tools used by software development teams around the world.
Read Post

Migrate and Modernize: How to Upgrade Your DevOps as You Move to the Cloud

Nov 5, 2021 By JFrog In JFrog
Understand how to transform your IT with AWS infrastructure and JFrog DevOps. Join our webinar to learn how JFrog and AWS can help you transform your DevOps and infrastructure to a more nimble and secure environment. In this webinar, you will gain insight on the strategies and best practices to overcome the challenges of legacy infrastructure and older application build and deployment approaches. In this webinar you will discover.
View Video
jfrog

Deploy Iron Bank-Approved Artifactory/Xray on AWS GovCloud and RKE2

Oct 27, 2021 By Sudhindra Rao In JFrog
With Artifactory and Xray now included in the U.S. Department of Defense’s Iron Bank container repository, we’re eager to help you benefit from this accreditation. Today, we’ll explain how to deploy these hardened JFrog images on AWS GovCloud using Rancher Kubernetes Edition (RKE2.) Specifically, we’ll describe the installation and configuration of the Iron Bank-accredited Artifactory version 7.21.7 and Xray version 3.30.2.
Read Post
jfrog

CVE-2021-37136 & CVE-2021-37137 - Denial of Service (DoS) in Netty's Decompressors

Oct 26, 2021 By Ori Hollander In JFrog
The JFrog Security research team has recently disclosed two denial of service issues (CVE-2021-37136, CVE-2021-37137) in Netty, a popular client/server framework which enables quick and easy development of network applications such as protocol servers and clients. In this post we will elaborate on one of the issues – CVE-2021-37136.
Read Post
jfrog

New Xray Features Enhance Workflows, Productivity and UX

Oct 21, 2021 By Paul Garden In JFrog
The recently released JFrog Xray versions 3.31 & 3.32 have brought to the table a raft of new capabilities designed to improve and streamline your workflows, productivity and user experience. The new features, detailed below, solidify Xray as the optimum universal software composition analysis (SCA) solution for JFrog Artifactory that’s trusted by developers and DevSecOps teams to identify and eliminate open source software vulnerabilities and license compliance violations from their releases.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.