Organization
9 Interestana reports mention Wiz, newest first. Each is summarised from the original reporting and links back to its publisher.
Attackers successfully chained two vulnerabilities within JFrog Artifactory, a critical repository for software build pipelines, to achieve full administrator control over self-hosted servers and subsequently install backdoors. This exploitation was identified by the cloud security company Wiz, which observed…
More than 9,300 Amazon Web Services (AWS) access keys, publicly exposed between August 2022 and August 2026, are still active and valid, granting attackers full control over corporate accounts. These credentials, which allow users to programmatically access AWS services, were…
Cybersecurity researchers from Wiz have identified a significant vulnerability within Snowflake's public snowflakedb/snowflake-connector-net GitHub repository. This flaw, detailed in a security advisory released on March 11, 2024, involves a GitHub Actions workflow that could be exploited to achieve command injection.
A critical vulnerability in Microsoft's Azure Cosmos DB, identified and patched by cloud security firm Wiz, could have allowed attackers to gain unrestricted read and write access to any customer database hosted on the platform.
Researchers at Wiz discovered critical security flaws in six popular AI coding assistants that could allow malicious code repositories to execute commands on developer machines. The vulnerabilities, identified as "GhostApproval Symlink Flaws," exploit a mechanism where the AI assistant requests…
Amazon patched a critical vulnerability in its Amazon Q Developer AI coding assistant that could allow malicious repositories to execute commands and steal developer cloud credentials. The flaw, tracked as CVE-2026-12957 with a CVSS score of 8.5, resided…