Securing the AI Surge
summary
Claims a practical, enforceable stack: use JFrog Curation and Artifactory as a package firewall to block immature packages, employ compliant version selection to serve approved dependencies to agents, and register and enforce allowed tools via the MCP registry and AI Catalog. Cites Shyud incidents (207 repos, later 800 packages, 2,500 leaked tokens, 25,000 repos impacted), notes only 8% APAC policy coverage, and proposes snippet detection, shadow AI discovery, and agent-driven remediation to scale against ~60,000 CVEs.
AI-written summary · about
chapters (10)
- 0:00Introduction to AI security
- 3:00The coding agent threat
- 5:25Protecting against upstream risks
- 8:19JFrog curation in action
- 13:59Securing the agent supply chain
- 16:50AI catalog and shadow AI
- 21:07MCP registry demonstration
- 24:18Snippet detection for code
- 25:44Focused vulnerability remediation
- 30:41Summary and key takeaways
related talks
28mScalable Security and Compliance in the Age of AI
28mOwn Goal: How AI Agents Are Quietly Scoring for the Other Side
22mThe AI Accountability Mandate: Securing the Software Supply Chain
12mSolving the AI Accountability Crisis in the Software Supply Chain
45mYour AI Agent Has Production Access: Now What? (Jack)
24mAI Governance for developers: A practical framework for deploying autonomous coding agents safely…
32mTrusted AI at Scale: Secure Governance and Scalable Management for Your AI Models
19mKeynote: Towards Building Safe and Secure Agentic AI