Category: Secure

Security Radar · Issue 7 DevSecOps Weekly July 12, 2026 · Weekly Edition Six npm and PyPI packages compromised this week — and four separate attacks built specifically to fool the AI agents reviewing your code, not the developers running it. At a glance Package registries took another beating this…

Security Radar · Issue 6 DevSecOps Weekly July 5, 2026 · Weekly Edition Registries under siege, an unpatched pipeline flaw with no fix in sight, and JFrog’s governance play takes center stage. At a glance Package-registry supply-chain attacks dominated the week, and JFrog’s own research desk was in the middle…

Security Radar · Issue 5 DevSecOps Weekly June 28, 2026 · Weekly Edition Pipeline, registry, and platform security — what shipped, what broke, what to do about it. At a glance CI/CD pipeline attacks dominated the week. The Cordyceps research exposed critical flaws in GitHub Actions workflows across more than…

Security Radar · Issue 4 DevSecOps Weekly June 21, 2026 · Weekly Edition Pipeline, registry, and platform security — what shipped, what broke, what to do about it. At a glance North Korea owned the supply-chain headlines this week, and the vector was npm. JFrog's threat-research team caught “easy-day-js” —…

Security Radar · Issue 3 DevSecOps Weekly June 14, 2026 · Weekly Edition Pipeline, registry, and platform security — what shipped, what broke, what to do about it. At a glance This week the package registries are the front line again, and the attackers have shifted technique. The headline event…