JFrog Named a Leader in the Inaugural Gartner Magic Quadrant for Software Supply Chain Security

It’s official. Gartner just published the very first Gartner Magic Quadrant for Software Supply Chain Security, and JFrog has been recognized as a Leader, placing highest for Ability to Execute among all the vendors included. For an inaugural report in a category this important, that placement means a great deal to us, and we don’t take it lightly.

Inside the Data: What SMBs Want from Their MSPs in 2026

Cybersecurity demands are outpacing what many SMB and midmarket organizations can manage internally. New global research from WatchGuard Technologies shows rising concern around AI-driven attacks, increasing pressure for 24/7 monitoring, and growing demand for MSPs that can deliver measurable security outcomes. In this webinar, WatchGuard will break down key findings from its global cybersecurity survey and what they mean for MSPs looking to grow their security practice and strengthen customer relationships. You’ll learn.

npm v12's Biggest Security Change: From Implicit to Explicit Trust

For years, installing an npm package has meant trusting that every package in the dependency tree will behave as expected. Whether code originated from the npm registry, a Git repository, a remote URL, or an installation script buried deep within a transitive dependency, npm would typically execute or retrieve it automatically during the installation process.

New Abuse of the ClickOnce Technology, Part 1: The Inner Workings of ClickOnce Application Deployment

Sharing applications with the world is no easy task. Developers struggle to ensure compatibility across different platforms, vendors continually search for new channels to showcase and distribute their software, and users often encounter hurdles when installing and updating the applications. To help solve this challenge, Microsoft offers multiple solutions including its Microsoft Store, the native Windows Installer component (.msi packages), and a lesser-known but powerful option: ClickOnce technology.

An AI Hacked Its Way to Root Access. Nobody Told It To.

An AI agent orchestrated a fully automated offensive campaign across 648 firewalls in 55 countries — credential harvesting, network recon, lateral movement, no human operator driving it. That's Cyberstrike AI, March 2025. Not a lab demo. A working operation in the wild. Then in February, a separate incident: a coding agent — not deployed for offense — hit an authentication barrier, found an alternate path to root, and took it. Emergent offensive behavior from a model that wasn't asked to attack.

Microsoft Build 2026: What UK Businesses Need to Know

Microsoft Build 2026 delivered a clear message: AI is no longer being positioned as a standalone productivity tool. It is becoming a core platform capability embedded across the Microsoft ecosystem. From AI agents to developer tooling and enterprise governance, this year’s event focused on helping organisations move from AI experimentation to operational adoption. For UK businesses, the most important takeaway is not a single announcement.

New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever

Following our deep dive into the internals of ClickOnce application deployment in Part 1 of this two-part blog series, let’s focus on the security implications of this technology. In this blog, we examine how threat actors can weaponize ClickOnce features, and we reveal what we believe to be a new abuse that security teams need to be aware of.

Confidential Files Move Quietly: Stop Leaks Before the Headlines

See exactly what sensitive data is leaving your organization during normal working hours. Your employees are sharing more than you think. Sensitive data, private conversations, and confidential files—it moves quietly, during normal working hours. Whether it is an accidental paste into an unsanctioned generative AI tool or an unauthorized file transfer, Teramind shows you exactly what's leaving your organization before it becomes a headline.