Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Using JFrog to Align Your Systems for ISO 27001 Compliance

ISO/IEC 27001 is an information security standard that is quickly becoming a must-have for any organization that handles proprietary customer data. ISO 27001 certification is now often a requirement to do business, particularly for IT and SaaS organizations – JFrog included! In this blog, you’ll learn more about ISO 27001, how to get certified, and how JFrog Platform capabilities can help you streamline the certification process.

7 Cybersecurity Concerns Related to The MCP Protocol

Everyone’s trying to make AI agents do useful things. That’s why the Model Context Protocol (MCP) is gaining momentum with teams operationalizing LLMs across their infrastructure and tooling. Backed by teams like OpenAI and Google, MCP gives a consistent, standardized way to connect LLMs with the rest of your stack. In other words, the MCP Protocol makes connecting AI tools with real business data and workflows easier using structured access instead of janky UI hacks and glued-on custom code.

7 factors to consider before deciding the right PAM strategy for your enterprise

Over the years, privileged access management has evolved from a nice-to-have component of identity security into a critical business necessity. Whether you're looking to adopt a PAM strategy for the first time or evaluating alternatives to your current setup, selecting the right approach for your enterprise requires careful consideration. Join Ganesh, Global Head of Support Services at ManageEngine, to explore 7 key factors to consider before deciding on the best PAM strategy for your enterprise.

Jess Phillips is Right - If Domestic Abuse Screening Tools Don't Work, What Does?

The BBC recently reported on Safeguarding Minister Jess Phillips' acknowledgement that the DASH (Domestic Abuse, Stalking, Harassment and Honour-Based Violence) risk assessment tool “doesn’t work” in reliably identifying high-risk cases. Since 2009, the DASH has been the most widely used screening tool across police, healthcare, social workers and victims services.

From Code Commit to Secure Deploy: SCM Code Scanning Best Practices with Veracode

In today’s fast-moving world of cloud-native development and CI/CD pipelines, code flows from commit to production faster than ever. And with that speed comes risk. That’s why code scanning in SCM (Source Code Management) has become a critical part of modern DevSecOps. Veracode’s new SCM Integration makes it easy to secure applications from the very first commit, directly within the SCM, without disrupting developer workflows.