{"id":6130,"date":"2026-10-18T17:52:50","date_gmt":"2026-10-18T22:52:50","guid":{"rendered":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6130"},"modified":"2026-10-18T17:52:50","modified_gmt":"2026-10-18T22:52:50","slug":"the-competitive-brief-october-18-2026","status":"publish","type":"post","link":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6130","title":{"rendered":"The Competitive Brief &mdash; October 18, 2026"},"content":{"rendered":"<style>\n.single .entry-title,\n.single .entry-header .entry-title,\n.single .post-title,\n.single header.entry-header h1,\n.single h1.entry-title,\n.single .page-title,\n.post-template-default h1.entry-title,\n.post-template-default .entry-header,\narticle .entry-header,\narticle .entry-title { display: none !important; }\n.single .entry-header { margin: 0 !important; padding: 0 !important; }\n.single .entry-content { margin-top: 0 !important; padding-top: 0 !important; }\n<\/style>\n<table role=\"presentation\" class=\"wrapper\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\">\n<tr>\n<td align=\"center\">\n<table role=\"presentation\" class=\"container\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"680\">\n<p>        <!-- Banner --><\/p>\n<tr>\n<td class=\"banner\" style=\"background-color:#064e3b;background:linear-gradient(135deg,#064e3b 0%,#059669 100%);padding:36px 32px;color:#ffffff;\">\n<p class=\"date\" style=\"color:#ffffff !important;\">October 18, 2026 &middot; Weekly Edition<\/p>\n<h1 style=\"color:#ffffff !important;\">Competitive Intelligence<\/h1>\n<p class=\"tagline\" style=\"color:#ffffff !important;\">Sonatype puts Repository Firewall inside Nexus Repository and Snyk launches an agentic AppSec team with its own Dependency Firewall. Chainguard and Checkmarx can now be bought out of an Anthropic commit. GitHub makes agentic autofix and AI Scan GA on an AI-credit meter. GitLab patches an unauthenticated CVSS 10 in CI, and model labs start buying vulnerability hunters.<\/p>\n<\/td>\n<\/tr>\n<p>        <!-- At a glance --><\/p>\n<tr>\n<td class=\"content\">\n<h2>This week at a glance<\/h2>\n<p>This was the week the dependency firewall became a standard feature. <strong>Sonatype<\/strong> launched <strong>Nexus Repository Pro+<\/strong>, which moves Repository Firewall into the repository and screens packages, AI models and MCP servers at the moment a developer or agent requests them. <strong>Snyk<\/strong> launched <strong>Evo Agentic AppSec<\/strong>, five security agents running on its own engines, one of them an <strong>Evo Dependency Firewall<\/strong> that blocks malicious packages at install time. Snyk\u2019s firewall is an experimental preview for selected customers, and Sonatype\u2019s Enterprise tier is weeks away, but with GitLab\u2019s Dependency Firewall last week, three competitors now say \u201cfirewall\u201d in their pitch for the layer where Artifactory and Curation sit.<\/p>\n<p>The second story is procurement. <strong>Chainguard<\/strong> and <strong>Checkmarx<\/strong> both joined the <strong>Claude Marketplace<\/strong>, so customers can pay for them out of an existing Anthropic commit. Chainguard also widened its reach well past images: Mythos-powered bug hunting run as a service, credential-free agent workspaces, a CI check that emits signed attestations and that its own marketer calls \u201ca replacement for GitHub Actions\u201d, and Go and .NET libraries with a NuGet replacement endpoint. <strong>GitHub<\/strong> made agentic autofix and AI Scan for pull requests generally available, both billed in Code Security AI Credits, with AI Scan needing no Copilot licence.<\/p>\n<p>Third, the platform that wants to own the whole factory had a bad week: <strong>GitLab<\/strong> patched an unauthenticated <strong>CVSS 10<\/strong> RCE in its CI regex engine, plus two Duo Agent Platform governance flaws. Fourth, model labs are buying security research teams. <strong>Cohere<\/strong> signed for AISLE and created Cohere Cyber, and <strong>OpenAI<\/strong> is reportedly in early talks for Trail of Bits. On agent containment, a Vercel Sandbox egress flaw and a CSO analysis of lab incidents point the same way as a new reference architecture co-written by Socket\u2019s CTO: treat the agent as untrusted and put a registry or firewall at its supply-chain boundary.<\/p>\n<p>Our own news: <strong>JFrog Security Research<\/strong> published a curl HTTP\/2 use-after-free (CVE-2026-92392, fixed in 8.23.0), Q3 results land on <strong>November 5<\/strong>, and UBS raised its target to $125 on expected cloud growth of 54\u201355%.<\/p>\n<div class=\"watchlist\">\n<h2>On our watch list<\/h2>\n<ul>\n<li><strong>Sonatype\u2019s Pro+ pricing and the Enterprise release.<\/strong> Sonatype says Nexus Repository Enterprise follows \u201cin the coming weeks.\u201d Whether the firewall is priced as part of the repository or as an upcharge decides whether Pro+ is a discount weapon against Artifactory in renewals.<\/li>\n<li><strong>Snyk\u2019s Dependency Firewall leaving experimental preview.<\/strong> A GA date, a list of supported package managers, or a registry-side deployment option would make it a real Curation competitor. Until then it is an install-time hook in preview.<\/li>\n<li><strong>Who else joins the Claude Marketplace.<\/strong> Checkmarx and Chainguard are in. If Snyk, Sonatype or GitHub follow, buying from an Anthropic commit becomes the standard way to purchase AppSec, and JFrog\u2019s absence becomes a real gap.<\/li>\n<li><strong>GitHub\u2019s AI-credit economics.<\/strong> Watch for published per-credit pricing for Code Security, and for customer complaints about autofix bills. A meter that runs high is an opening for flat-priced JFrog Advanced Security.<\/li>\n<li><strong>Chainguard Libraries in Artifactory remotes.<\/strong> Go and .NET are in early access with a managed NuGet endpoint. If Chainguard starts selling Libraries as a replacement for the remote repository rather than a feed behind it, that is a direct registry play.<\/li>\n<li><strong>Exploitation of GitLab CVE-2026-97229.<\/strong> No in-the-wild use has been reported. A KEV listing or public exploit would push self-managed GitLab customers to reconsider what else they host on that server.<\/li>\n<li><strong>OpenAI\u2013Trail of Bits: deal or no deal.<\/strong> The talks are unconfirmed. A signed deal would put the labs\u2019 \u201cfind and fix\u201d service in direct competition with AppSec scanners, and Cohere Cyber would not be alone.<\/li>\n<li><strong>A fix for the Vercel Sandbox leak.<\/strong> Vercel has not said how it will patch. A long delay keeps agent egress control in every security review, which helps the case for repository-side admission control.<\/li>\n<li><strong>Agent Baseline version 2.<\/strong> The reference architecture is open for comment on GitHub. Whether JFrog is a named contributor to the next version, or Socket remains the only supply-chain vendor credited, is in our hands.<\/li>\n<li><strong>JFrog Q3 on November 5.<\/strong> UBS expects cloud growth of 54\u201355% or better and total growth of 27% or more. Watch the commentary on Curation and AI Catalog attach, which now has three repository-firewall competitors to answer.<\/li>\n<\/ul><\/div>\n<p>            <!-- Topic map --><\/p>\n<div class=\"topic-map\">\n              <img decoding=\"async\" src=\"https:\/\/www.cybersecurityinstitute.com\/blog\/wp-content\/uploads\/2026\/10\/topic-map-competitive-intelligence-2026-10-18-1.png\" alt=\"Topic map of this week's JFrog Competitive Intelligence themes\" loading=\"eager\"><\/p>\n<p class=\"caption\">This week\u2019s competitive map: JFrog at the centre, tied to the \u201cdependency firewall in the repo\u201d theme that now connects Sonatype\u2019s Nexus Repository Pro+ and Snyk\u2019s Evo; GitHub\u2019s agentic autofix and GitLab\u2019s CVSS 10 below; Anthropic\u2019s Claude Marketplace with Checkmarx and Chainguard on the right; agent sandboxing, Agent Baseline and the frontier labs at the top left, linked to the Cohere\u2013AISLE and OpenAI\u2013Trail of Bits deals and our curl CVE.<\/p>\n<p>              <!-- INTERACTIVE_MAP_LINK_START --><\/p>\n<p style=\"margin:10px 0 0;text-align:center;\"><a href=\"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6129\" target=\"_blank\" rel=\"noopener\" style=\"display:inline-block;padding:8px 18px;background-color:#064e3b;color:#ffffff !important;text-decoration:none;border-radius:6px;font-size:13px;font-weight:600;\">View interactive topic map &rarr;<\/a><\/p>\n<p><!-- INTERACTIVE_MAP_LINK_END -->\n            <\/div>\n<p>            <!-- Article index --><\/p>\n<h2>Article index<\/h2>\n<h4>Agentic AppSec arrives: Snyk and GitHub<\/h4>\n<div class=\"cluster-intro\">Snyk ships a team of security agents and its own dependency firewall. GitHub makes AI fixing and AI scanning generally available and moves Advanced Security toward an AI-credit meter.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Company<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>14. <a href=\"https:\/\/snyk.io\/news\/snyk-launches-evo-agentic-appsec\/\">Snyk Launches Evo Agentic AppSec, Redefining Traditional AppSec With a Team of Security Agents<\/a> <em>&mdash; Five security agents on top of Snyk\u2019s engines, including an Evo Dependency Firewall; three of the five are experimental preview.<\/em><\/td>\n<td class=\"src\">Snyk<\/td>\n<td class=\"co\">Snyk<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>15. <a href=\"https:\/\/github.blog\/changelog\/2026-10-15-agentic-autofix-for-code-scanning-alerts-general-availability\/\">Agentic autofix for code scanning alerts general availability<\/a> <em>&mdash; Copilot fixes up to 25 CodeQL alerts per PR and verifies them; billed in Code Security AI Credits plus Actions minutes.<\/em><\/td>\n<td class=\"src\">GitHub Changelog<\/td>\n<td class=\"co\">GitHub<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>16. <a href=\"https:\/\/github.blog\/changelog\/2026-10-15-ai-scan-for-pull-requests-generally-available\/\">AI Scan for pull requests generally available<\/a> <em>&mdash; AI-driven PR scanning for PHP, Shell, Terraform, Dockerfiles and more; no Copilot licence needed, findings advisory only.<\/em><\/td>\n<td class=\"src\">GitHub Changelog<\/td>\n<td class=\"co\">GitHub<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>13. <a href=\"https:\/\/www.helpnetsecurity.com\/2026\/10\/14\/github-secret-detection-model\/\">GitHub adopts cheaper AI model to catch secrets developers leave in code<\/a> <em>&mdash; GitHub swaps its LLM secret pipeline for a ModernBERT classifier: serving cost down 98%, recall up 19%.<\/em><\/td>\n<td class=\"src\">Help Net Security<\/td>\n<td class=\"co\">GitHub<\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>24. <a href=\"https:\/\/www.infoworld.com\/article\/4233357\/ai-distrust-is-githubs-opportunity.html\">AI distrust is GitHub&#x27;s opportunity<\/a> <em>&mdash; Opinion: developer trust in AI output is falling as use rises, and GitHub can sell the review layer over everyone\u2019s agents.<\/em><\/td>\n<td class=\"src\">InfoWorld<\/td>\n<td class=\"co\">GitHub<\/td>\n<td class=\"dt\">Oct 13, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>The firewall moves into the repository<\/h4>\n<div class=\"cluster-intro\">Sonatype folds Repository Firewall into Nexus Repository, covering models and MCP servers. Socket, RapidFort and Wiz push scanning and curated images into the places developers already work.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Company<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>6. <a href=\"https:\/\/www.sonatype.com\/press-releases\/sonatype-unveils-nexus-repository-pro-plus?hs_amp=true\">Sonatype Unveils Nexus Repository Pro+ to Stop Malicious Components<\/a> <em>&mdash; Repository Firewall moves inside Nexus Repository, screening packages, AI models and MCP servers at request time.<\/em><\/td>\n<td class=\"src\">Sonatype<\/td>\n<td class=\"co\">Sonatype<\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>25. <a href=\"https:\/\/www.sonatype.com\/blog\/ai-noise-is-the-new-development-bottleneck\">AI Noise Is the New Development Bottleneck<\/a> <em>&mdash; Sonatype argues AI-generated dependency changes shift the bottleneck from writing code to validating it.<\/em><\/td>\n<td class=\"src\">Sonatype<\/td>\n<td class=\"co\">Sonatype<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>10. <a href=\"https:\/\/socket.dev\/blog\/socket-for-origin\">Socket for Origin Now Available<\/a> <em>&mdash; Socket\u2019s dependency scan lands in Origin\u2019s app marketplace as a PR check with policy verdicts.<\/em><\/td>\n<td class=\"src\">Socket<\/td>\n<td class=\"co\">Socket<\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>21. <a href=\"https:\/\/itbrief.co.uk\/story\/rapidfort-links-hardened-container-images-with-wiz\">RapidFort links hardened container images with Wiz<\/a> <em>&mdash; RapidFort advisory data and near-zero-CVE replacement images surface inside Wiz.<\/em><\/td>\n<td class=\"src\">IT Brief UK<\/td>\n<td class=\"co\">Wiz, RapidFort<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>22. <a href=\"https:\/\/cloud.google.com\/blog\/products\/identity-security\/wiz-sensor-for-gke-turnkey-threat-detection-for-kubernetes\">Announcing Wiz Runtime Sensor add-on for GKE: Turnkey threat detection for Kubernetes<\/a> <em>&mdash; GKE now deploys and manages Wiz\u2019s eBPF runtime sensor as a first-party add-on (preview).<\/em><\/td>\n<td class=\"src\">Google Cloud Blog<\/td>\n<td class=\"co\">Wiz<\/td>\n<td class=\"dt\">Oct 16, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>Bought through Anthropic: Chainguard, Checkmarx and the software factory<\/h4>\n<div class=\"cluster-intro\">Chainguard and Checkmarx are both on the Claude Marketplace, so customers can pay for them out of an existing Anthropic commit. Chainguard keeps moving from images into libraries, CI and agent workspaces.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Company<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>7. <a href=\"https:\/\/siliconangle.com\/2026\/10\/14\/chainguard-puts-claude-mythos-on-flaw-hunting-secures-coding-agents-and-widens-libraries\/\">Chainguard puts Claude Mythos on flaw hunting, secures coding agents and widens Libraries<\/a> <em>&mdash; Assemble London: Mythos-powered Chainguard Harness on the Claude Marketplace, Workspaces and Checks in beta, Go and .NET Libraries.<\/em><\/td>\n<td class=\"src\">SiliconANGLE<\/td>\n<td class=\"co\">Chainguard<\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>18. <a href=\"https:\/\/www.techtarget.com\/it-infrastructure\/news\/366651847\/Vendors-build-safeguards-for-autonomous-software-factories\">Vendors build safeguards for autonomous software factories<\/a> <em>&mdash; Harness Cosmos and Chainguard Workspaces both isolate agents in microVMs; IDC says the industry is \u201ca bit over its skis.\u201d<\/em><\/td>\n<td class=\"src\">TechTarget<\/td>\n<td class=\"co\">Harness, Chainguard<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>17. <a href=\"https:\/\/www.globenewswire.com\/news-release\/2026\/10\/15\/3382046\/0\/en\/checkmarx-joins-the-claude-marketplace.html\">Checkmarx Joins the Claude Marketplace<\/a> <em>&mdash; Fusion, Triage Assist and Remediation Assist can now be bought out of a customer\u2019s Anthropic commit.<\/em><\/td>\n<td class=\"src\">GlobeNewswire (Checkmarx)<\/td>\n<td class=\"co\">Checkmarx<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>11. <a href=\"https:\/\/channelbuzz.ca\/2026\/10\/as-ai-accelerates-software-development-appsec-becomes-an-msp-problem-47623\/\">As AI accelerates software development, AppSec becomes an MSP problem<\/a> <em>&mdash; Checkmarx\u2019s channel VP on taking AppSec-as-a-service to MSPs at the low end of the market.<\/em><\/td>\n<td class=\"src\">ChannelBuzz<\/td>\n<td class=\"co\">Checkmarx<\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>Agent containment and platform flaws<\/h4>\n<div class=\"cluster-intro\">A CVSS 10 in GitLab CI, a leaky agent sandbox, and an expert consensus that the labs are skipping basics. The proposed fix puts a registry or firewall at the agent\u2019s supply-chain boundary.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Company<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>12. <a href=\"https:\/\/devops.com\/gitlab-fixes-cvss-10-flaw-in-ci-cd-regex-engine-plus-23-other-vulnerabilities\">GitLab Fixes CVSS 10 Flaw in CI\/CD Regex Engine, Plus 23 Other Vulnerabilities<\/a> <em>&mdash; Unauthenticated RCE via crafted CI regex (CVE-2026-97229) plus two Duo Agent Platform governance flaws; self-managed must upgrade.<\/em><\/td>\n<td class=\"src\">DevOps.com<\/td>\n<td class=\"co\">GitLab<\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>2. <a href=\"https:\/\/therecord.media\/sandbox-vulnerability-gives-rogue-ai-agents-path-out\">Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says<\/a> <em>&mdash; AIR shows agents can leak data out of Vercel Sandbox by abusing certificate validation; no patch yet.<\/em><\/td>\n<td class=\"src\">The Record<\/td>\n<td class=\"co\">Vercel (AIR research)<\/td>\n<td class=\"dt\">Oct 13, 2026<\/td>\n<\/tr>\n<tr>\n<td>5. <a href=\"https:\/\/www.csoonline.com\/article\/4234854\/ai-agents-arent-going-rogue-frontier-labs-are-skipping-security-basics.html\">AI agents aren&#x27;t &#x27;going rogue.&#x27; Frontier labs are skipping security basics.<\/a> <em>&mdash; CSO news analysis: the \u201crogue agent\u201d incidents are basic sandboxing and egress failures by the labs themselves.<\/em><\/td>\n<td class=\"src\">CSO Online<\/td>\n<td class=\"co\">OpenAI \/ Anthropic (frontier labs)<\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>4. <a href=\"https:\/\/socket.dev\/blog\/agent-baseline-software-factory\">Agent Baseline Publishes Security Reference Architecture for Software Factories<\/a> <em>&mdash; Socket\u2019s CTO co-authors a reference architecture that puts a registry or supply-chain firewall at the agent\u2019s supply-chain boundary.<\/em><\/td>\n<td class=\"src\">Socket<\/td>\n<td class=\"co\">Socket<\/td>\n<td class=\"dt\">Oct 13, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>Deals and funding<\/h4>\n<div class=\"cluster-intro\">Model labs are buying vulnerability-research teams, and security valuations stay rich.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Company<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>20. <a href=\"https:\/\/betakit.com\/cohere-to-acquire-czech-ai-cybersecurity-firm-aisle-set-up-new-cyber-division\/\">Cohere to acquire Czech AI cybersecurity firm Aisle, set up new cyber division<\/a> <em>&mdash; Cohere signs an LOI for AISLE and stands up Cohere Cyber under ex-Avast CEO Ond\u0159ej Vl\u010dek.<\/em><\/td>\n<td class=\"src\">BetaKit<\/td>\n<td class=\"co\">Cohere, AISLE<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>23. <a href=\"https:\/\/thenextweb.com\/news\/openai-trail-of-bits-acquisition-talks\">OpenAI in early talks to buy Trail of Bits, The Information reports<\/a> <em>&mdash; Early, unconfirmed talks reported by The Information; Trail of Bits already works OpenAI\u2019s Patch the Planet programme.<\/em><\/td>\n<td class=\"src\">The Next Web<\/td>\n<td class=\"co\">OpenAI, Trail of Bits<\/td>\n<td class=\"dt\">Oct 17, 2026<\/td>\n<\/tr>\n<tr>\n<td>1. <a href=\"https:\/\/www.csoonline.com\/article\/4234910\/ionqs-1-2-billion-acquisition-of-elisity-is-trying-to-position-it-for-quantum-cybersecurity.html\">IonQ&#x27;s $1.2 billion acquisition of Elisity is trying to position it for quantum cybersecurity<\/a> <em>&mdash; $1.2B all-stock for a zero-trust microsegmentation vendor with 100-plus customers; analysts call the quantum link thin and the price steep.<\/em><\/td>\n<td class=\"src\">CSO Online<\/td>\n<td class=\"co\">IonQ \/ Elisity<\/td>\n<td class=\"dt\">Oct 13, 2026<\/td>\n<\/tr>\n<tr>\n<td>3. <a href=\"https:\/\/techcrunch.com\/2026\/10\/13\/pluto-security-raises-42m-as-ai-gives-enterprise-security-teams-a-new-headache\/\">Pluto Security raises $42M as AI gives enterprise security teams a new headache<\/a> <em>&mdash; Seed plus Series A for a startup that inventories employees\u2019 AI tools, skills and MCP servers; ARR above $2M.<\/em><\/td>\n<td class=\"src\">TechCrunch<\/td>\n<td class=\"co\">Pluto Security<\/td>\n<td class=\"dt\">Oct 13, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>JFrog in the news<\/h4>\n<div class=\"cluster-intro\">Earnings date set, an analyst raise, and a curl CVE from our research team.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Company<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>8. <a href=\"https:\/\/www.businesswire.com\/news\/home\/20261014519284\/en\/JFrog-Announces-Timing-of-Third-Quarter-2026-Financial-Results\">JFrog Announces Timing of Third Quarter 2026 Financial Results<\/a> <em>&mdash; Q3 results Thursday, Nov 5, after the close; call at 2:00 p.m. PT.<\/em><\/td>\n<td class=\"src\">Business Wire (JFrog)<\/td>\n<td class=\"co\">JFrog<\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>9. <a href=\"https:\/\/www.investing.com\/news\/analyst-ratings\/ubs-raises-jfrog-stock-price-target-to-125-on-cloud-growth-93CH-4949592\">UBS raises JFrog stock price target to $125 on cloud growth<\/a> <em>&mdash; UBS moves to $125 (Buy), expecting Q3 cloud growth of 54\u201355% or better.<\/em><\/td>\n<td class=\"src\">Investing.com<\/td>\n<td class=\"co\">JFrog<\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>19. <a href=\"https:\/\/research.jfrog.com\/post\/curl-http2-upload-rce-cve-2026-92392\/\">CVE-2026-92392: curl HTTP\/2 upload RCE<\/a> <em>&mdash; Our research on a use-after-free in curl\u2019s HTTP\/2 upload path; fixed in 8.23.0, with exploitation conditions JFrog calls rare.<\/em><\/td>\n<td class=\"src\">JFrog Security Research<\/td>\n<td class=\"co\">JFrog<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<\/table>\n<p>            <!-- Detailed write-ups --><\/p>\n<h2>Detailed write-ups<\/h2>\n<div class=\"article\">\n<h4>1. Snyk launches Evo Agentic AppSec, with a Dependency Firewall aimed at Curation<\/h4>\n<p class=\"meta\">Snyk &middot; October 15, 2026<\/p>\n<p>Snyk\u2019s biggest launch of the year packages its scanners as tools for a team of AI agents. <strong>Evo Agentic AppSec<\/strong> has five: a <strong>Code Scanning Agent<\/strong> that pairs AI reasoning with static analysis to find access-control and authentication logic flaws; an <strong>Evo Dependency Firewall<\/strong> that blocks malicious and out-of-policy packages at install time, slopsquatting included; an <strong>Agentic Security Review<\/strong> that builds an application and threat model for a whole repository; a <strong>Remediation Agent<\/strong> that fixes new code and backlog, starting with Snyk Open Source issues, and queues anything that might break the build for approval; and <strong>Secrets Detection<\/strong> from IDE to CI. Read the availability line closely. The Code Scanning Agent, Dependency Firewall and Security Review are an <strong>experimental preview for select customers<\/strong>; the Remediation Agent is in open preview; only Secrets Detection, Agentic Development Security and Continuous Offensive Security are GA. There is no pricing.<\/p>\n<p>Snyk backs the launch with its own numbers: more than 4,800 customers, LLM-only security reviews that lost a finding on a rerun 49.7% of the time, and a Remediation Agent that produced mergeable fixes 90% of the time against 59.6% for an LLM alone. It also says new critical and high issues across its customers grew tenfold in a year, and that 36% of nearly 4,000 agent skills it audited had at least one flaw. CTO Manoj Nair\u2019s line: \u201cAgents do the work. Something independent proves it holds. Humans own the bar.\u201d<\/p>\n<p><strong>So what for JFrog.<\/strong> Two weeks, two competitors launching something called a \u201cDependency Firewall\u201d: GitLab last week, Snyk this week. Snyk\u2019s is an experimental preview for selected customers, so in deals it is a roadmap slide. But the architecture Snyk describes, with agents on top of deterministic engines, is the same story we tell for JFrog Advanced Security. Our difference is where the block happens: at the repository every build already pulls through, not at an install hook a developer can go around. Reps should say that in one sentence and ask the customer what Snyk\u2019s firewall does on a CI runner that never runs the Snyk CLI.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/snyk.io\/news\/snyk-launches-evo-agentic-appsec\/\">Snyk (Evo Agentic AppSec)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>2. Sonatype puts Repository Firewall inside Nexus Repository<\/h4>\n<p class=\"meta\">Sonatype &middot; October 14, 2026<\/p>\n<p><strong>Nexus Repository Pro+<\/strong> moves Sonatype\u2019s <strong>Repository Firewall<\/strong> malicious-code protection and policy enforcement into the repository itself. When a developer or an AI agent requests a component, Pro+ screens open-source packages, <strong>AI models<\/strong> and <strong>MCP servers<\/strong>, then blocks or quarantines anything malicious, vulnerable or out of policy before it reaches the build. Policies cover security, legal, architecture and component age, drawing on a catalogue of more than 333 million components and more than 1.9 million malicious versions Sonatype says it has identified. Pro+ also proposes upgrade paths that it checks against existing build and test processes. It is available now; <strong>Nexus Repository Enterprise<\/strong> with the same protection follows \u201cin the coming weeks.\u201d No pricing was given, and JFrog is not named.<\/p>\n<p>Sonatype\u2019s own data makes the AI-model case: organisations adopting Hugging Face grew nearly 4.7 times year on year, and close to 7% of Hugging Face requests in its population were blocked by policy, against about 3.5% for Go and 1% for Cargo. Most blocked models (55%) failed on acceptability rather than security (18%). CTO Brian Fox: \u201cAI changed the equation.\u201d A companion blog post argues that \u201cAI noise\u201d, the flood of agent-generated dependency changes, has moved the bottleneck from writing code to validating it.<\/p>\n<p><strong>So what for JFrog.<\/strong> This is the most direct like-for-like move against Artifactory plus Curation this year: the firewall is now part of the repository SKU rather than a separate product, and it covers models and MCP servers. Expect Sonatype to price Pro+ against our Pro and Enterprise X bundles. Our counter is package-type breadth, the AI Catalog for models, and scale. But the message \u201cfirewall included in the repository\u201d is now table stakes, and our packaging should state plainly that Curation does this, rather than leave the customer to assemble it from a price list.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.sonatype.com\/press-releases\/sonatype-unveils-nexus-repository-pro-plus?hs_amp=true\">Sonatype (Nexus Repository Pro+)<\/a> &middot; <a href=\"https:\/\/www.sonatype.com\/blog\/ai-noise-is-the-new-development-bottleneck\">Sonatype (AI Noise blog)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>3. Chainguard moves past images: Mythos bug-hunting, agent workspaces, signed CI checks and NuGet replacement<\/h4>\n<p class=\"meta\">SiliconANGLE \/ TechTarget &middot; October 14&ndash;15, 2026<\/p>\n<p>At Assemble London, Chainguard launched four things. <strong>Chainguard Harness<\/strong> uses frontier models, including Anthropic\u2019s <strong>Claude Mythos 5.1<\/strong>, to hunt for flaws, and reports only those it reproduces against a live build in an isolated VM with no network access. A Chainguard engineer signs off every report. It is a staff-run service with a beta waitlist, and it is listed on the <strong>Claude Marketplace<\/strong>, so customers can pay out of an Anthropic commit. <strong>Workspaces<\/strong> (beta) gives coding agents a hardened, credential-free remote VM with short-lived stand-in credentials and optional egress policy. <strong>Checks<\/strong> (beta) runs CI before a pull request opens and produces a <strong>signed attestation<\/strong> tying environment, test result and commit together. Chainguard\u2019s Sam Katzen described Checks to TechTarget as \u201ca replacement for GitHub Actions.\u201d <strong>Chainguard Libraries<\/strong> adds <strong>Go and .NET<\/strong> in early access, making five languages; .NET users can swap NuGet for a Chainguard-managed endpoint with malware scanning.<\/p>\n<p>TechTarget puts the launch next to Harness\u2019s Cosmos software factory: both isolate agents in ephemeral microVMs. An IDC survey of 309 respondents found 74.6% agree AI coding assistants raise the risk of merging code nobody fully understands, yet only 28% require peer review of AI-assisted changes. IDC\u2019s Katie Norton: \u201cthe industry is a bit over its skis.\u201d CEO Dan Lorenc described a Workspace as an isolated machine \u201cwith nothing in it worth stealing.\u201d Chainguard has raised about $892M since 2021.<\/p>\n<p><strong>So what for JFrog.<\/strong> Chainguard is no longer just a hardened-image vendor. Libraries in five ecosystems, with a managed NuGet endpoint, is a curated-registry play aimed at the remote-repository role Artifactory fills today. Checks producing signed attestations per commit overlaps directly with our Evidence story. And Harness being sold through the Claude Marketplace means Chainguard can be bought from an Anthropic budget the customer has already approved, which skips the security-tool procurement conversation we usually win on. Track every account where Chainguard Libraries shows up as a remote in Artifactory: that is the wedge.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/siliconangle.com\/2026\/10\/14\/chainguard-puts-claude-mythos-on-flaw-hunting-secures-coding-agents-and-widens-libraries\/\">SiliconANGLE (Chainguard at Assemble London)<\/a> &middot; <a href=\"https:\/\/www.techtarget.com\/it-infrastructure\/news\/366651847\/Vendors-build-safeguards-for-autonomous-software-factories\">TechTarget (software-factory safeguards)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>4. GitHub makes agentic autofix and AI Scan GA, and puts Advanced Security on an AI-credit meter<\/h4>\n<p class=\"meta\">GitHub Changelog \/ Help Net Security \/ InfoWorld &middot; October 13&ndash;15, 2026<\/p>\n<p><strong>Agentic autofix for code scanning<\/strong> is now GA for GitHub Code Security and Advanced Security on Enterprise Cloud. Copilot explores the codebase, proposes a fix, reruns <strong>CodeQL<\/strong> to confirm the alert is closed, then opens a draft pull request; up to 25 alerts can go into one PR. When it is turned on, \u201cAssign to Copilot\u201d replaces the free \u201cGenerate Fix\u201d button. Usage draws <strong>AI Credits from the Code Security budget plus Actions minutes<\/strong>. <strong>AI Scan for pull requests<\/strong> is also GA. It covers what CodeQL doesn\u2019t, including PHP, Shell, Terraform, Dockerfiles, JSP and Blazor. Findings are advisory and cannot block a merge. It is free on public repositories, needs Code Security or GHAS on private ones, needs <strong>no Copilot licence<\/strong>, and also consumes AI Credits.<\/p>\n<p>Separately, GitHub engineers described replacing their LLM pipeline for generic secret detection with a fine-tuned ModernBERT classifier: serving costs fell more than 98%, median scan time 86%, with precision up 13% and recall up 19%. That is the cost model behind last week\u2019s push-protection news. Matt Asay\u2019s InfoWorld column supplies the strategy: Stack Overflow data show AI use among developers at 83% but only 7% trusting it for important decisions, and GitHub can sell itself as the review layer over every vendor\u2019s agents.<\/p>\n<p><strong>So what for JFrog.<\/strong> GitHub is moving Advanced Security from per-committer seats toward a consumption meter, and widening coverage to Terraform and Dockerfiles, which is JFrog Advanced Security ground. AI Scan with no Copilot licence lowers the bar for GHAS to spread inside accounts already standardised on GitHub. Our answer is post-build: binaries, containers and what actually shipped, plus contextual analysis that tells a team whether a CVE is applicable at all. A PR-time scanner cannot see that. Get the AI-credit pricing into the battlecard so reps can show a customer what a year of autofix costs at their alert volume.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/github.blog\/changelog\/2026-10-15-agentic-autofix-for-code-scanning-alerts-general-availability\/\">GitHub Changelog (agentic autofix GA)<\/a> &middot; <a href=\"https:\/\/github.blog\/changelog\/2026-10-15-ai-scan-for-pull-requests-generally-available\/\">GitHub Changelog (AI Scan GA)<\/a> &middot; <a href=\"https:\/\/www.helpnetsecurity.com\/2026\/10\/14\/github-secret-detection-model\/\">Help Net Security (secret-detection model)<\/a> &middot; <a href=\"https:\/\/www.infoworld.com\/article\/4233357\/ai-distrust-is-githubs-opportunity.html\">InfoWorld (AI distrust)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>5. Checkmarx joins Chainguard on the Claude Marketplace, and takes AppSec to MSPs<\/h4>\n<p class=\"meta\">GlobeNewswire \/ ChannelBuzz &middot; October 14&ndash;15, 2026<\/p>\n<p>US Anthropic customers can now put part of their committed Anthropic spend toward three Checkmarx One products, consolidated on a single Anthropic invoice: <strong>Checkmarx Fusion<\/strong>, which pairs Checkmarx\u2019s deterministic engine with Claude; <strong>Triage Assist<\/strong>, which ranks findings by attackability rather than static severity; and <strong>Remediation Assist<\/strong>, which proposes a merge-ready fix per finding. Checkmarx is also in Anthropic\u2019s Cyber Verification Program, using Claude Mythos internally, and joined Project Glasswing in September. No pricing was given. Anthropic\u2019s Ash Alhashim: \u201cSecurity teams should be able to get the tools they trust as easily as they get Claude.\u201d<\/p>\n<p>In a ChannelBuzz interview the same week, Checkmarx channel VP Jon Kozimor called Checkmarx \u201ca relatively small company\u201d that relies on \u201chundreds\u201d of partners, and described an AppSec Partner Program for MSPs delivering AppSec as a service, today mostly at the low end of its market.<\/p>\n<p><strong>So what for JFrog.<\/strong> Two AppSec competitors landed on the Claude Marketplace in one week. The marketplace turns an Anthropic commit into a procurement shortcut: a CISO can add Checkmarx or Chainguard without a new vendor onboarding or a new budget line. If JFrog is not listed, we carry full procurement friction against rivals drawn down from money the customer has already approved. Someone should own the question of whether JFrog belongs there. The MSP story is a down-market play and tells us little about Checkmarx in the enterprise.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.globenewswire.com\/news-release\/2026\/10\/15\/3382046\/0\/en\/checkmarx-joins-the-claude-marketplace.html\">GlobeNewswire (Checkmarx on Claude Marketplace)<\/a> &middot; <a href=\"https:\/\/channelbuzz.ca\/2026\/10\/as-ai-accelerates-software-development-appsec-becomes-an-msp-problem-47623\/\">ChannelBuzz (Checkmarx MSP interview)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>6. A week after pitching the governed software factory, GitLab patches an unauthenticated CVSS 10 in CI<\/h4>\n<p class=\"meta\">DevOps.com &middot; October 14, 2026<\/p>\n<p>GitLab\u2019s October 12 releases fix 24 vulnerabilities. The headline is <strong>CVE-2026-97229<\/strong>, rated <strong>CVSS 10.0<\/strong>: an integer overflow in the regex compiler used by GitLab CI\/CD that lets a crafted expression in CI configuration run arbitrary code on the GitLab server, <strong>without authentication<\/strong>. It affects 19.2 through 19.4 and is fixed in 19.4.2, 19.3.5 and 19.2.8. GitLab.com and Dedicated are already patched; <strong>self-managed instances must upgrade<\/strong>. High-severity CI\/CD bugs in the same batch let a Developer run pipelines on protected branches (CVE-2026-16301) and expose protected variables through cache poisoning (CVE-2026-14814).<\/p>\n<p>Two fixes land on the <strong>Duo Agent Platform<\/strong>: a prompt injection that can trigger command execution attributed to other users (CVE-2026-96893, 7.3) and a token that bypasses governance controls (CVE-2026-105458). This is GitLab\u2019s fourth critical release in about eight weeks. Futurum\u2019s Mitch Ashley: \u201cAgents have turned attribution into an attack surface.\u201d<\/p>\n<p><strong>So what for JFrog.<\/strong> Last week GitLab asked customers to put artifacts, a package firewall and secrets on the same platform as CI. This week that CI server shipped an unauthenticated CVSS 10 RCE and an agent-governance bypass. Use it as an argument for separation of duties, not as a gloat: the system of record for artifacts and their provenance should not be the same server that keeps needing emergency patches. Be ready for the counter-punch, too. UBS\u2019s note this week mentioned our own August Artifactory vulnerability.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/devops.com\/gitlab-fixes-cvss-10-flaw-in-ci-cd-regex-engine-plus-23-other-vulnerabilities\">DevOps.com (GitLab CVSS 10)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>7. Model labs go shopping for vulnerability hunters<\/h4>\n<p class=\"meta\">BetaKit \/ The Next Web \/ CSO Online \/ TechCrunch &middot; October 13&ndash;17, 2026<\/p>\n<p><strong>Cohere<\/strong> signed a letter of intent to buy Prague-based <strong>AISLE<\/strong>, about 50 people, price undisclosed, and is creating <strong>Cohere Cyber<\/strong> under AISLE co-founder and former Avast CEO Ond\u0159ej Vl\u010dek. AISLE claims its system found 18 of the 24 vulnerabilities fixed in the latest curl release. <strong>OpenAI<\/strong> is in early talks to buy <strong>Trail of Bits<\/strong>, according to The Information. The talks are unconfirmed and could collapse. Trail of Bits already works OpenAI\u2019s \u201cPatch the Planet\u201d programme, using GPT-5.5-Cyber and Codex across 19 open-source projects including cURL, Python and Go.<\/p>\n<p>Two other deals show where the money is. <strong>IonQ<\/strong> is paying <strong>$1.2B in stock<\/strong> for <strong>Elisity<\/strong>, a zero-trust microsegmentation vendor with more than 100 customers; analyst Frank Dickson puts that at roughly $13M per customer, and Info-Tech\u2019s Brian Jackson says the quantum link is weaker than the announcement suggests. <strong>Pluto Security<\/strong> raised <strong>$42M<\/strong> to inventory the AI tools, skills, extensions and MCP servers employees use. Its free Plutonium service includes a catalogue of verified AI components. CEO Shahar Bahat: \u201cWe\u2019re moving from user behavior to agent behavior.\u201d<\/p>\n<p><strong>So what for JFrog.<\/strong> The labs are buying the people who find bugs with AI. Cohere has done it, and OpenAI is talking. They will sell \u201cfind and fix\u201d directly to enterprises, which makes them a new class of competitor for the scanning half of AppSec. JFrog\u2019s place is to be the neutral layer where any lab\u2019s fixes land, get verified and get promoted. Pluto\u2019s free \u201ccatalogue of verified AI components\u201d is a small version of what JFrog AI Catalog should own outright. IonQ\u2013Elisity has no supply-chain angle; it is a read on how richly security assets are being priced.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/betakit.com\/cohere-to-acquire-czech-ai-cybersecurity-firm-aisle-set-up-new-cyber-division\/\">BetaKit (Cohere\u2013AISLE)<\/a> &middot; <a href=\"https:\/\/thenextweb.com\/news\/openai-trail-of-bits-acquisition-talks\">The Next Web (OpenAI\u2013Trail of Bits talks)<\/a> &middot; <a href=\"https:\/\/www.csoonline.com\/article\/4234910\/ionqs-1-2-billion-acquisition-of-elisity-is-trying-to-position-it-for-quantum-cybersecurity.html\">CSO Online (IonQ\u2013Elisity)<\/a> &middot; <a href=\"https:\/\/techcrunch.com\/2026\/10\/13\/pluto-security-raises-42m-as-ai-gives-enterprise-security-teams-a-new-headache\/\">TechCrunch (Pluto Security $42M)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>8. Agent containment: sandboxes leak, labs skip basics, and the reference architecture names the registry<\/h4>\n<p class=\"meta\">The Record \/ CSO Online \/ Socket &middot; October 13&ndash;14, 2026<\/p>\n<p>Research from <strong>AIR<\/strong>, reported by The Record, shows agents running in <strong>Vercel Sandbox<\/strong> can get data out by abusing certificate validation: a crafted certificate accepted by an approved server triggers a request to an attacker\u2019s server, so the sandbox never contacts the attacker directly and looks normal throughout. There is <strong>no patch<\/strong>. AIR\u2019s Niv Hoffman says Vercel told him a fix is unclear, and Vercel did not comment. A CSO news analysis argues that the recent run of \u201crogue agent\u201d incidents at OpenAI, Anthropic, Meta, Google and Mistral are failures of basic <strong>sandboxing and egress control<\/strong> by the labs, not agents acting with intent. SANS\u2019s Rob T. Lee: \u201cThere\u2019s no reason why every single time this happens, it\u2019s, \u2018Oops, we don\u2019t know how they got out.\u2019\u201d<\/p>\n<p><strong>Agent Baseline<\/strong> published version 1 of \u201cThe Secure Software Factory: A Reference Architecture\u201d, co-authored by <strong>Socket CTO Ahmad Nassri<\/strong> with contributors from Docker, Keycard, Barclays and Secure Theory. It treats the agent as untrusted and enforces four boundaries the agent cannot reach: sandbox, network, supply chain and identity. On the supply chain, packages, dependencies and models must pass through an <strong>admission point such as a registry or supply-chain firewall<\/strong>. The paper cites Uber attributing more than 70% of pull requests to agents and Stripe merging more than 1,000 agent PRs a week.<\/p>\n<p><strong>So what for JFrog.<\/strong> The industry\u2019s answer to agent risk is converging on one rule: the agent is untrusted, so enforce its limits outside it. The reference architecture defines the supply-chain boundary as a registry or firewall admission point, which describes Artifactory plus Curation. Socket wrote itself into that document. JFrog should be a named contributor to version 2 rather than a reader of version 1. The comment window on GitHub is open now.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/therecord.media\/sandbox-vulnerability-gives-rogue-ai-agents-path-out\">The Record (Vercel Sandbox escape)<\/a> &middot; <a href=\"https:\/\/www.csoonline.com\/article\/4234854\/ai-agents-arent-going-rogue-frontier-labs-are-skipping-security-basics.html\">CSO Online (frontier labs skip basics)<\/a> &middot; <a href=\"https:\/\/socket.dev\/blog\/agent-baseline-software-factory\">Socket (Agent Baseline)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>9. JFrog: a curl CVE from our research team, Q3 on November 5, and UBS to $125<\/h4>\n<p class=\"meta\">JFrog Security Research \/ Business Wire \/ Investing.com &middot; October 14&ndash;15, 2026<\/p>\n<p>JFrog Security Research published <strong>CVE-2026-92392<\/strong>, a use-after-free in curl\u2019s HTTP\/2 upload path that allows client-side code execution through a malicious HTTPS server. It affects curl 8.12.0 through 8.22.0 and is fixed in <strong>8.23.0<\/strong>. Full code execution needs parallel mode with an upload, which JFrog calls a \u201conce-in-a-blue-moon scenario\u201d, and Xray\u2019s contextual analysis marks the finding Applicable only when HTTP\/2, the relevant API call and an upload flag are all present. JFrog reports Q3 results on <strong>Thursday, November 5<\/strong>, after the close. <strong>UBS<\/strong> raised its target from $120 to <strong>$125<\/strong> (Buy), expecting Q3 cloud growth of 54\u201355% or better against 53% in Q2. UBS said its channel checks found little evidence that the July Hugging Face incident or the August Artifactory vulnerability were slowing growth.<\/p>\n<p><strong>So what for JFrog.<\/strong> Notice the overlap: AISLE, now heading into Cohere, claims 18 of the 24 bugs fixed in the latest curl release, and our post covers one of them. AI-driven research shops are working the same targets as our team, at volume. Our differentiator is the contextual \u201cdoes this actually apply to you\u201d answer, so lead with that, not with CVE counts.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/research.jfrog.com\/post\/curl-http2-upload-rce-cve-2026-92392\/\">JFrog Security Research (curl CVE-2026-92392)<\/a> &middot; <a href=\"https:\/\/www.businesswire.com\/news\/home\/20261014519284\/en\/JFrog-Announces-Timing-of-Third-Quarter-2026-Financial-Results\">Business Wire (Q3 timing)<\/a> &middot; <a href=\"https:\/\/www.investing.com\/news\/analyst-ratings\/ubs-raises-jfrog-stock-price-target-to-125-on-cloud-growth-93CH-4949592\">Investing.com (UBS target)<\/a><\/p>\n<\/p><\/div>\n<p>            <!-- Calls to action --><\/p>\n<div class=\"watchlist\">\n<h2>Calls to action<\/h2>\n<ul>\n<li><strong>Update the Curation battlecard for three \u201cfirewalls\u201d.<\/strong> GitLab Dependency Firewall (beta platform), Snyk Evo Dependency Firewall (experimental preview, install-time) and Sonatype Pro+ (shipping, in the repository). One line each on where the block happens and what it covers, and one line on why Curation in Artifactory is the control every build already passes through.<\/li>\n<li><strong>Decide whether JFrog belongs on the Claude Marketplace.<\/strong> Checkmarx and Chainguard can now be bought out of an Anthropic commit. Get an owner and an answer this month.<\/li>\n<li><strong>Price out a year of GitHub autofix for a real account.<\/strong> Use a customer\u2019s actual alert volume and Code Security AI Credits plus Actions minutes, so reps can put a number next to our flat pricing.<\/li>\n<li><strong>Brief self-managed GitLab accounts on CVE-2026-97229.<\/strong> Facts only: unauthenticated RCE in CI, fixed in 19.4.2, 19.3.5 and 19.2.8, fourth critical release in eight weeks. Use it to make the separation-of-duties case for keeping artifacts off the CI server. Have the answer ready on our own August Artifactory vulnerability before anyone raises it.<\/li>\n<li><strong>Find the Chainguard Libraries remotes in our install base.<\/strong> List the accounts proxying Chainguard Libraries through Artifactory and brief those account teams on the Go and .NET expansion.<\/li>\n<li><strong>Comment on Agent Baseline version 1.<\/strong> Submit JFrog\u2019s comments on the supply-chain boundary while the GitHub comment window is open, and ask to be a named contributor to version 2.<\/li>\n<li><strong>Lead the curl CVE story with contextual analysis.<\/strong> Position CVE-2026-92392 around Xray\u2019s Applicable\/Undetermined verdicts, not raw finding counts. The AI-hunting labs will out-count us.<\/li>\n<\/ul><\/div>\n<\/td>\n<\/tr>\n<p>        <!-- Footer --><\/p>\n<tr>\n<td class=\"footer\">\n<p class=\"brand\">Competitive Intelligence<\/p>\n<p>An internal competitive-intelligence bulletin from Security Radar LLC.<br \/>\n            Curated by Paul Davis &middot; <a href=\"mailto:paul.davis@security-radar.com\">paul.davis@security-radar.com<\/a><\/p>\n<p>&copy; 2026 Security Radar LLC. All rights reserved.<\/p>\n<p>Article titles and summaries are excerpted for review and commentary; all linked articles remain the copyright of their respective publishers and authors.<\/p>\n<p>*|LIST:ADDRESS|*<\/p>\n<p><a href=\"*|ARCHIVE|*\">View this email in your browser<\/a> &middot; <a href=\"*|UNSUB|*\">Unsubscribe<\/a><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p>October 18, 2026 &middot; Weekly Edition Competitive Intelligence Sonatype puts Repository Firewall inside Nexus Repository and Snyk launches an agentic AppSec team with its own Dependency Firewall. Chainguard and Checkmarx can now be bought out of an Anthropic commit. GitHub makes agentic autofix and AI Scan GA on an AI-credit&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[49],"tags":[],"class_list":["post-6130","post","type-post","status-publish","format-standard","hentry","category-competitive"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6130"}],"version-history":[{"count":0,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6130\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}