https://www.wiz.io Guides, announcements, and articles about Cloud Security and the Wiz platform. Wed, 09 Sep 2026 14:58:50 GMT https://validator.w3.org/feed/docs/rss2.html https://github.com/jpmonette/feed de-DE https://www.wiz.io/rss_feed_logo.jpg https://www.wiz.io All rights reserved 2026, Wiz Inc. https://www.wiz.io/blog/ai-infrastructure-honeypot https://www.wiz.io/blog/ai-infrastructure-honeypot Thu, 27 Aug 2026 16:33:16 GMT Yaara Shriki https://www.wiz.io/blog/vcs-dfir-threat-hunting-github-gitlab-azure-devops https://www.wiz.io/blog/vcs-dfir-threat-hunting-github-gitlab-azure-devops Thu, 27 Aug 2026 12:00:00 GMT Shira Ayal Sean Johnstone https://www.wiz.io/blog/cloud-risk-report-2026 https://www.wiz.io/blog/cloud-risk-report-2026 Wed, 26 Aug 2026 15:01:58 GMT Wiz Threat Research https://www.wiz.io/blog/rust-supply-chain-attack-on-arrayref-significant-overlap-with-dprk-campaigns https://www.wiz.io/blog/rust-supply-chain-attack-on-arrayref-significant-overlap-with-dprk-campaigns Thu, 20 Aug 2026 15:56:39 GMT Rami McCarthy Benjamin Read https://www.wiz.io/blog/detecting-entra-device-registration-abuse https://www.wiz.io/blog/detecting-entra-device-registration-abuse Tue, 18 Aug 2026 16:24:13 GMT Shahar Dorfman Sapir Federovsky https://www.wiz.io/blog/red-agent-snowflake-copilot-cicd-bug https://www.wiz.io/blog/red-agent-snowflake-copilot-cicd-bug Mon, 17 Aug 2026 14:00:00 GMT Gal Nagli https://www.wiz.io/blog/investigating-github-pat-compromise https://www.wiz.io/blog/investigating-github-pat-compromise Thu, 13 Aug 2026 15:04:28 GMT Eden Abergil https://www.wiz.io/blog/inside-the-metabase-sqli-exploited-in-the-wild https://www.wiz.io/blog/inside-the-metabase-sqli-exploited-in-the-wild Mon, 10 Aug 2026 12:30:17 GMT Rami McCarthy https://www.wiz.io/blog/cloud-threat-highlights-h1-2026 https://www.wiz.io/blog/cloud-threat-highlights-h1-2026 Thu, 06 Aug 2026 14:03:03 GMT Wiz Threat Research https://www.wiz.io/blog/keyv-and-cacheable-npm-supply-chain-attack https://www.wiz.io/blog/keyv-and-cacheable-npm-supply-chain-attack Tue, 04 Aug 2026 11:25:22 GMT Merav Bar Rami McCarthy https://www.wiz.io/blog/s3-clones-in-the-neoclouds https://www.wiz.io/blog/s3-clones-in-the-neoclouds Fri, 31 Jul 2026 13:48:07 GMT Scott Piper https://www.wiz.io/blog/cosmosescape-taking-over-every-database-in-azure-cosmos-db https://www.wiz.io/blog/cosmosescape-taking-over-every-database-in-azure-cosmos-db Thu, 30 Jul 2026 12:00:01 GMT Yuval Avrahami Lior Maman https://www.wiz.io/blog/the-risk-hiding-behind-exposed-mcp-servers https://www.wiz.io/blog/the-risk-hiding-behind-exposed-mcp-servers Tue, 28 Jul 2026 15:58:22 GMT Hila Ramati https://www.wiz.io/blog/agentless-threat-hunting-fortigate https://www.wiz.io/blog/agentless-threat-hunting-fortigate Wed, 22 Jul 2026 14:24:50 GMT Shahar Dorfman https://www.wiz.io/blog/agentless-visibility-uncovering-cloud-blind-spots https://www.wiz.io/blog/agentless-visibility-uncovering-cloud-blind-spots Tue, 21 Jul 2026 13:26:13 GMT Shahar Dorfman https://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137 https://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137 Mon, 20 Jul 2026 18:00:08 GMT Shahar Dorfman Gili Tikochinski https://www.wiz.io/blog/red-agent-pov-business-logic https://www.wiz.io/blog/red-agent-pov-business-logic Wed, 15 Jul 2026 13:33:42 GMT Red Agent Gal Nagli https://www.wiz.io/blog/m-red-team-asyncapi-supply-chain-compromise-via-github-actions https://www.wiz.io/blog/m-red-team-asyncapi-supply-chain-compromise-via-github-actions Tue, 14 Jul 2026 10:33:36 GMT Rami McCarthy Merav Bar https://www.wiz.io/blog/verizon-dbir-2026-ai-cloud-security https://www.wiz.io/blog/verizon-dbir-2026-ai-cloud-security Thu, 09 Jul 2026 16:18:49 GMT Wiz Threat Research https://www.wiz.io/blog/ghostapproval-a-trust-boundary-gap-in-ai-coding-assistants https://www.wiz.io/blog/ghostapproval-a-trust-boundary-gap-in-ai-coding-assistants Wed, 08 Jul 2026 14:00:00 GMT Maor Dokhanian https://www.wiz.io/blog/red-agent-pov-bola https://www.wiz.io/blog/red-agent-pov-bola Mon, 29 Jun 2026 09:31:40 GMT Red Agent Gal Nagli https://www.wiz.io/blog/amazon-q-vulnerability https://www.wiz.io/blog/amazon-q-vulnerability Fri, 26 Jun 2026 12:00:01 GMT Maor Dokhanian https://www.wiz.io/blog/red-agent-pov-series https://www.wiz.io/blog/red-agent-pov-series Wed, 17 Jun 2026 14:33:41 GMT Red Agent Gal Nagli Danielle Aminov Mika Maymon Shaked Rotlevi https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages Mon, 01 Jun 2026 12:45:51 GMT Merav Bar Rami McCarthy https://www.wiz.io/blog/state-of-post-quantum-cryptography https://www.wiz.io/blog/state-of-post-quantum-cryptography Thu, 28 May 2026 13:34:55 GMT Scott Piper https://www.wiz.io/blog/threat-actors-target-crypto-orgs https://www.wiz.io/blog/threat-actors-target-crypto-orgs Wed, 27 May 2026 13:52:45 GMT Shira Ayal Eden Abergil Andre Maccarone Yuval Dan Benjamin Read https://www.wiz.io/blog/sdlc-security-report-2026-key-takeaways https://www.wiz.io/blog/sdlc-security-report-2026-key-takeaways Tue, 26 May 2026 12:45:02 GMT Wiz Threat Research https://www.wiz.io/blog/durabletask-teampcp-supply-chain-attack https://www.wiz.io/blog/durabletask-teampcp-supply-chain-attack Tue, 19 May 2026 17:30:20 GMT Rami McCarthy https://www.wiz.io/blog/mini-shai-hulud-teampcp-hits-antv-supply-chain https://www.wiz.io/blog/mini-shai-hulud-teampcp-hits-antv-supply-chain Tue, 19 May 2026 08:29:30 GMT Rami McCarthy Benjamin Read Merav Bar https://www.wiz.io/blog/fragnesia-linux-kernel-local-privilege-escalation-via-esp-in-tcp https://www.wiz.io/blog/fragnesia-linux-kernel-local-privilege-escalation-via-esp-in-tcp Wed, 13 May 2026 12:13:44 GMT Merav Bar Rami McCarthy https://www.wiz.io/blog/mini-shai-hulud-strikes-again-tanstack-more-npm-packages-compromised https://www.wiz.io/blog/mini-shai-hulud-strikes-again-tanstack-more-npm-packages-compromised Tue, 12 May 2026 01:38:56 GMT Rami McCarthy Amitai Cohen Benjamin Read https://www.wiz.io/blog/dirty-frag-linux-kernel-local-privilege-escalation-via-esp-and-rxrpc https://www.wiz.io/blog/dirty-frag-linux-kernel-local-privilege-escalation-via-esp-and-rxrpc Fri, 08 May 2026 08:57:17 GMT Merav Bar Rami McCarthy https://www.wiz.io/blog/jenkins-threat-risk-insights https://www.wiz.io/blog/jenkins-threat-risk-insights Wed, 06 May 2026 15:10:07 GMT Merav Bar https://www.wiz.io/blog/critical-vulnerability-in-pan-os-exploited-in-the-wild-cve-2026-0300 https://www.wiz.io/blog/critical-vulnerability-in-pan-os-exploited-in-the-wild-cve-2026-0300 Wed, 06 May 2026 12:33:26 GMT Merav Bar https://www.wiz.io/blog/copyfail-cve-2026-31431-linux-privilege-escalation-vulnerability https://www.wiz.io/blog/copyfail-cve-2026-31431-linux-privilege-escalation-vulnerability Fri, 01 May 2026 12:38:09 GMT Amitai Cohen Merav Bar Shahar Dorfman https://www.wiz.io/blog/github-actions-security-ai-powered-actions-vulnerabilities https://www.wiz.io/blog/github-actions-security-ai-powered-actions-vulnerabilities Thu, 30 Apr 2026 13:21:18 GMT Shay Berkovich https://www.wiz.io/blog/state-of-ai-in-cloud-2026-recap https://www.wiz.io/blog/state-of-ai-in-cloud-2026-recap Wed, 29 Apr 2026 21:00:00 GMT Wiz Threat Research https://www.wiz.io/blog/mini-shai-hulud-supply-chain-sap-npm https://www.wiz.io/blog/mini-shai-hulud-supply-chain-sap-npm Wed, 29 Apr 2026 15:14:27 GMT Benjamin Read Merav Bar Shay Berkovich Gili Tikochinski https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854 https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854 Tue, 28 Apr 2026 15:30:00 GMT Sagi Tzadik https://www.wiz.io/blog/contextai-oauth-token-compromise https://www.wiz.io/blog/contextai-oauth-token-compromise Mon, 20 Apr 2026 18:20:06 GMT Merav Bar Hila Ramati Maayan Bentor https://www.wiz.io/blog/github-actions-security-guide https://www.wiz.io/blog/github-actions-security-guide Wed, 15 Apr 2026 13:19:21 GMT Rami McCarthy Shay Berkovich https://www.wiz.io/blog/github-actions-security-threat-model-and-defenses https://www.wiz.io/blog/github-actions-security-threat-model-and-defenses Tue, 14 Apr 2026 11:33:05 GMT Shay Berkovich https://www.wiz.io/blog/claude-mythos https://www.wiz.io/blog/claude-mythos Fri, 10 Apr 2026 15:25:54 GMT Ami Luttwak https://www.wiz.io/blog/cloud-threat-retrospective-2026 https://www.wiz.io/blog/cloud-threat-retrospective-2026 Thu, 09 Apr 2026 13:00:02 GMT Wiz Threat Research https://www.wiz.io/blog/six-accounts-one-actor-inside-the-prt-scan-supply-chain-campaign https://www.wiz.io/blog/six-accounts-one-actor-inside-the-prt-scan-supply-chain-campaign Sat, 04 Apr 2026 09:36:51 GMT Rami McCarthy Hila Ramati Scott Piper Benjamin Read https://www.wiz.io/blog/axios-npm-compromised-in-supply-chain-attack https://www.wiz.io/blog/axios-npm-compromised-in-supply-chain-attack Tue, 31 Mar 2026 08:26:35 GMT Benjamin Read Amitai Cohen Hila Ramati Merav Bar https://www.wiz.io/blog/tracking-teampcp-investigating-post-compromise-attacks-seen-in-the-wild https://www.wiz.io/blog/tracking-teampcp-investigating-post-compromise-attacks-seen-in-the-wild Mon, 30 Mar 2026 23:54:14 GMT Eden Abergil Sean Johnstone Zoe Rabi Hila Ramati https://www.wiz.io/blog/threes-a-crowd-teampcp-trojanizes-litellm-in-continuation-of-campaign https://www.wiz.io/blog/threes-a-crowd-teampcp-trojanizes-litellm-in-continuation-of-campaign Tue, 24 Mar 2026 18:40:52 GMT Benjamin Read Merav Bar Rami McCarthy James Haughom https://www.wiz.io/blog/teampcp-attack-kics-github-action https://www.wiz.io/blog/teampcp-attack-kics-github-action Mon, 23 Mar 2026 17:38:41 GMT Rami McCarthy James Haughom Benjamin Read https://www.wiz.io/blog/trivy-compromised-teampcp-supply-chain-attack https://www.wiz.io/blog/trivy-compromised-teampcp-supply-chain-attack Fri, 20 Mar 2026 15:18:51 GMT Rami McCarthy https://www.wiz.io/blog/twenty-years-of-cloud-security-research https://www.wiz.io/blog/twenty-years-of-cloud-security-research Fri, 13 Mar 2026 13:00:00 GMT Scott Piper https://www.wiz.io/blog/detecting-malicious-oauth-applications https://www.wiz.io/blog/detecting-malicious-oauth-applications Wed, 18 Feb 2026 19:09:54 GMT Shahar Dorfman Sapir Federovsky https://www.wiz.io/blog/introducing-ai-cyber-model-arena-a-real-world-benchmark-for-ai-agents-in-cybersec https://www.wiz.io/blog/introducing-ai-cyber-model-arena-a-real-world-benchmark-for-ai-agents-in-cybersec Thu, 12 Feb 2026 18:05:58 GMT Nir Ohfeld Alon Schindel https://www.wiz.io/blog/exposed-moltbook-database-reveals-millions-of-api-keys https://www.wiz.io/blog/exposed-moltbook-database-reveals-millions-of-api-keys Mon, 02 Feb 2026 15:00:03 GMT Gal Nagli https://www.wiz.io/blog/ai-agents-vs-humans-who-wins-at-web-hacking-in-2026 https://www.wiz.io/blog/ai-agents-vs-humans-who-wins-at-web-hacking-in-2026 Thu, 29 Jan 2026 18:00:02 GMT Gal Nagli Irregular https://www.wiz.io/blog/sitf-sdlc-threat-framework https://www.wiz.io/blog/sitf-sdlc-threat-framework Mon, 26 Jan 2026 17:25:25 GMT Shay Berkovich https://www.wiz.io/blog/agentic-browser-security-2025-year-end-review https://www.wiz.io/blog/agentic-browser-security-2025-year-end-review Fri, 16 Jan 2026 17:23:17 GMT Rami McCarthy https://www.wiz.io/blog/wiz-research-codebreach-vulnerability-aws-codebuild https://www.wiz.io/blog/wiz-research-codebreach-vulnerability-aws-codebuild Thu, 15 Jan 2026 15:00:00 GMT Yuval Avrahami Nir Ohfeld https://www.wiz.io/blog/preparing-for-post-quantum-cryptography https://www.wiz.io/blog/preparing-for-post-quantum-cryptography Thu, 08 Jan 2026 14:51:34 GMT Scott Piper Yali Gottlib Addi Grinbaum https://www.wiz.io/blog/snipping-the-long-tail-of-shai-hulud-2-0 https://www.wiz.io/blog/snipping-the-long-tail-of-shai-hulud-2-0 Tue, 30 Dec 2025 15:21:30 GMT Rami McCarthy https://www.wiz.io/blog/mongobleed-cve-2025-14847-exploited-in-the-wild-mongodb https://www.wiz.io/blog/mongobleed-cve-2025-14847-exploited-in-the-wild-mongodb Sun, 28 Dec 2025 09:24:54 GMT Merav Bar Amitai Cohen Yaara Shriki Gili Tikochinski https://www.wiz.io/blog/wiz-zeroday-cloud-hacking-competition-behind-the-scenes https://www.wiz.io/blog/wiz-zeroday-cloud-hacking-competition-behind-the-scenes Tue, 16 Dec 2025 15:30:00 GMT Nir Ohfeld https://www.wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit https://www.wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit Wed, 10 Dec 2025 15:00:01 GMT Gili Tikochinski Yaara Shriki https://www.wiz.io/blog/github-attacks-pat-control-plane https://www.wiz.io/blog/github-attacks-pat-control-plane Tue, 09 Dec 2025 13:00:02 GMT Shira Ayal https://www.wiz.io/blog/top-aws-re-invent-announcements-for-security-teams-in-2025 https://www.wiz.io/blog/top-aws-re-invent-announcements-for-security-teams-in-2025 Mon, 08 Dec 2025 21:54:29 GMT Scott Piper https://www.wiz.io/blog/nextjs-cve-2025-55182-react2shell-deep-dive https://www.wiz.io/blog/nextjs-cve-2025-55182-react2shell-deep-dive Mon, 08 Dec 2025 17:18:38 GMT Shir Tamari Gili Tikochinski Hila Ramati Benjamin Read https://www.wiz.io/blog/critical-vulnerability-in-react-cve-2025-55182 https://www.wiz.io/blog/critical-vulnerability-in-react-cve-2025-55182 Wed, 03 Dec 2025 15:57:17 GMT Gili Tikochinski Merav Bar Danielle Aminov https://www.wiz.io/blog/shai-hulud-2-0-aftermath-ongoing-supply-chain-attack https://www.wiz.io/blog/shai-hulud-2-0-aftermath-ongoing-supply-chain-attack Mon, 01 Dec 2025 17:52:01 GMT Shay Berkovich Rami McCarthy https://www.wiz.io/blog/recent-oauth-attacks-detection-strategies https://www.wiz.io/blog/recent-oauth-attacks-detection-strategies Thu, 27 Nov 2025 16:27:41 GMT Sapir Federovsky https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack Mon, 24 Nov 2025 10:27:46 GMT Hila Ramati Merav Bar Gal Benmocha Gili Tikochinski https://www.wiz.io/blog/forbes-ai-50-leaking-secrets https://www.wiz.io/blog/forbes-ai-50-leaking-secrets Mon, 10 Nov 2025 13:34:02 GMT Shay Berkovich Rami McCarthy https://www.wiz.io/blog/supply-chain-risk-in-vscode-extension-marketplaces https://www.wiz.io/blog/supply-chain-risk-in-vscode-extension-marketplaces Wed, 15 Oct 2025 12:00:01 GMT Rami McCarthy https://www.wiz.io/blog/honeybee-threat-research https://www.wiz.io/blog/honeybee-threat-research Tue, 07 Oct 2025 15:16:34 GMT Yaara Shriki https://www.wiz.io/blog/wiz-research-redis-rce-cve-2025-49844 https://www.wiz.io/blog/wiz-research-redis-rce-cve-2025-49844 Mon, 06 Oct 2025 21:00:01 GMT Benny Isaacs Nir Brakha https://www.wiz.io/blog/database-ransomware-research https://www.wiz.io/blog/database-ransomware-research Mon, 06 Oct 2025 13:09:13 GMT Danielle Aminov Shahar Dorfman Hila Ramati https://www.wiz.io/blog/zeroday-cloud-ai-hacking-competition https://www.wiz.io/blog/zeroday-cloud-ai-hacking-competition Tue, 30 Sep 2025 17:03:57 GMT Nir Ohfeld https://www.wiz.io/blog/the-emerging-use-of-malware-invoking-ai https://www.wiz.io/blog/the-emerging-use-of-malware-invoking-ai Fri, 26 Sep 2025 12:37:37 GMT Scott Piper https://www.wiz.io/blog/imds-anomaly-hunting-zero-day https://www.wiz.io/blog/imds-anomaly-hunting-zero-day Mon, 22 Sep 2025 14:50:13 GMT Hila Ramati Gili Tikochinski https://www.wiz.io/blog/beyond-cves-the-exploitation-of-everyday-misconfigurations https://www.wiz.io/blog/beyond-cves-the-exploitation-of-everyday-misconfigurations Fri, 19 Sep 2025 12:00:00 GMT Danielle Aminov Gili Tikochinski https://www.wiz.io/blog/common-security-risks-in-vibe-coded-apps https://www.wiz.io/blog/common-security-risks-in-vibe-coded-apps Thu, 18 Sep 2025 18:37:42 GMT Gal Nagli Alon Schindel https://www.wiz.io/blog/shai-hulud-npm-supply-chain-attack https://www.wiz.io/blog/shai-hulud-npm-supply-chain-attack Tue, 16 Sep 2025 14:04:50 GMT Merav Bar Rami McCarthy Barak Sharoni https://www.wiz.io/blog/widespread-npm-supply-chain-attack-breaking-down-impact-scope-across-debug-chalk https://www.wiz.io/blog/widespread-npm-supply-chain-attack-breaking-down-impact-scope-across-debug-chalk Tue, 09 Sep 2025 12:20:17 GMT Hila Ramati Gal Benmocha Danielle Aminov https://www.wiz.io/blog/wiz-discovers-cloud-email-abuse-campaign https://www.wiz.io/blog/wiz-discovers-cloud-email-abuse-campaign Thu, 04 Sep 2025 16:39:21 GMT Itay Harel Hila Ramati https://www.wiz.io/blog/s1ngularitys-aftermath https://www.wiz.io/blog/s1ngularitys-aftermath Wed, 03 Sep 2025 14:13:55 GMT Rami McCarthy https://www.wiz.io/blog/s1ngularity-supply-chain-attack https://www.wiz.io/blog/s1ngularity-supply-chain-attack Wed, 27 Aug 2025 12:00:54 GMT Merav Bar Rami McCarthy https://www.wiz.io/blog/a-new-type-of-long-lived-key-on-aws-bedrock-api-keys https://www.wiz.io/blog/a-new-type-of-long-lived-key-on-aws-bedrock-api-keys Thu, 21 Aug 2025 12:18:13 GMT Scott Piper https://www.wiz.io/blog/nvidia-triton-cve-2025-23319-vuln-chain-to-ai-server https://www.wiz.io/blog/nvidia-triton-cve-2025-23319-vuln-chain-to-ai-server Mon, 04 Aug 2025 12:55:59 GMT Ronen Shustin Nir Ohfeld https://www.wiz.io/blog/critical-vulnerability-base44 https://www.wiz.io/blog/critical-vulnerability-base44 Tue, 29 Jul 2025 14:00:00 GMT Gal Nagli https://www.wiz.io/blog/north-korean-tradertraitor-crypto-heist https://www.wiz.io/blog/north-korean-tradertraitor-crypto-heist Mon, 28 Jul 2025 13:17:56 GMT Merav Bar https://www.wiz.io/blog/soco404-multiplatform-cryptomining-campaign-uses-fake-error-pages-to-hide-payload https://www.wiz.io/blog/soco404-multiplatform-cryptomining-campaign-uses-fake-error-pages-to-hide-payload Wed, 23 Jul 2025 12:00:00 GMT Maor Dokhanian Shahar Dorfman Avigayil Mechtinger https://www.wiz.io/blog/sharepoint-vulnerabilities-cve-2025-53770-cve-2025-53771-everything-you-need-to-k https://www.wiz.io/blog/sharepoint-vulnerabilities-cve-2025-53770-cve-2025-53771-everything-you-need-to-k Mon, 21 Jul 2025 17:42:00 GMT Hila Ramati https://www.wiz.io/blog/nvidia-ai-vulnerability-cve-2025-23266-nvidiascape https://www.wiz.io/blog/nvidia-ai-vulnerability-cve-2025-23266-nvidiascape Thu, 17 Jul 2025 14:46:47 GMT Nir Ohfeld Shir Tamari https://www.wiz.io/blog/critical-vulnerabilities-netscaler-adc-exploited-in-the-wild-cve-2025-5777 https://www.wiz.io/blog/critical-vulnerabilities-netscaler-adc-exploited-in-the-wild-cve-2025-5777 Sun, 06 Jul 2025 12:45:49 GMT Merav Bar Amitai Cohen https://www.wiz.io/blog/exposed-jdwp-exploited-in-the-wild https://www.wiz.io/blog/exposed-jdwp-exploited-in-the-wild Wed, 02 Jul 2025 15:00:13 GMT Yaara Shriki Gili Tikochinski https://www.wiz.io/blog/the-ultimate-cloud-security-championship-12-months-x-12-challenges https://www.wiz.io/blog/the-ultimate-cloud-security-championship-12-months-x-12-challenges Thu, 26 Jun 2025 13:13:08 GMT Scott Piper https://www.wiz.io/blog/cloud-attack-retrospective-2025 https://www.wiz.io/blog/cloud-attack-retrospective-2025 Wed, 18 Jun 2025 12:00:01 GMT Wiz Threat Research https://www.wiz.io/blog/leaking-ai-secrets-in-public-code https://www.wiz.io/blog/leaking-ai-secrets-in-public-code Tue, 17 Jun 2025 17:47:54 GMT Shay Berkovich Rami McCarthy https://www.wiz.io/blog/small-language-model-for-secrets-detection-in-code https://www.wiz.io/blog/small-language-model-for-secrets-detection-in-code Tue, 10 Jun 2025 16:01:49 GMT Erez Harush Daniel Lazarev https://www.wiz.io/blog/safer-vibe-coding-rules-files https://www.wiz.io/blog/safer-vibe-coding-rules-files Fri, 06 Jun 2025 10:00:00 GMT Rami McCarthy https://www.wiz.io/blog/jinx-0132-cryptojacking-campaign https://www.wiz.io/blog/jinx-0132-cryptojacking-campaign Mon, 02 Jun 2025 14:00:00 GMT Gili Tikochinski Danielle Aminov Merav Bar https://www.wiz.io/blog/ivanti-epmm-rce-vulnerability-chain-cve-2025-4427-cve-2025-4428 https://www.wiz.io/blog/ivanti-epmm-rce-vulnerability-chain-cve-2025-4427-cve-2025-4428 Tue, 20 May 2025 18:13:13 GMT Merav Bar Shahar Dorfman Gili Tikochinski https://www.wiz.io/blog/cloud-data-security-report-snapshot https://www.wiz.io/blog/cloud-data-security-report-snapshot Wed, 07 May 2025 12:00:00 GMT Wiz Threat Research https://www.wiz.io/blog/mcp-security-research-briefing https://www.wiz.io/blog/mcp-security-research-briefing Thu, 17 Apr 2025 14:00:37 GMT Rami McCarthy https://www.wiz.io/blog/postgresql-cryptomining https://www.wiz.io/blog/postgresql-cryptomining Mon, 31 Mar 2025 15:13:26 GMT Avigayil Mechtinger Yaara Shriki Gili Tikochinski https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Mon, 24 Mar 2025 21:45:26 GMT Nir Ohfeld Ronen Shustin Sagi Tzadik Hillai Ben-Sasson https://www.wiz.io/blog/aws-vpc-endpoint-cloudtrail https://www.wiz.io/blog/aws-vpc-endpoint-cloudtrail Thu, 20 Mar 2025 12:00:00 GMT Rami McCarthy Scott Piper https://www.wiz.io/blog/new-github-action-supply-chain-attack-reviewdog-action-setup https://www.wiz.io/blog/new-github-action-supply-chain-attack-reviewdog-action-setup Mon, 17 Mar 2025 21:28:56 GMT Rami McCarthy https://www.wiz.io/blog/github-action-tj-actions-changed-files-supply-chain-attack-cve-2025-30066 https://www.wiz.io/blog/github-action-tj-actions-changed-files-supply-chain-attack-cve-2025-30066 Sat, 15 Mar 2025 16:19:08 GMT Merav Bar Shay Berkovich Gal Nagli https://www.wiz.io/blog/state-of-cloud-ai-report-takeaways https://www.wiz.io/blog/state-of-cloud-ai-report-takeaways Fri, 07 Mar 2025 13:00:01 GMT Amitai Cohen Dan Segev https://www.wiz.io/blog/state-of-code-security-report-2025 https://www.wiz.io/blog/state-of-code-security-report-2025 Thu, 20 Feb 2025 16:38:04 GMT Shay Berkovich https://www.wiz.io/blog/nvidia-ai-vulnerability-deep-dive-cve-2024-0132 https://www.wiz.io/blog/nvidia-ai-vulnerability-deep-dive-cve-2024-0132 Tue, 11 Feb 2025 18:18:39 GMT Shir Tamari Ronen Shustin Andres Riancho https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak Wed, 29 Jan 2025 20:47:40 GMT Gal Nagli https://www.wiz.io/blog/kubernetes-report-preview-2025 https://www.wiz.io/blog/kubernetes-report-preview-2025 Thu, 23 Jan 2025 14:00:00 GMT Shay Berkovich https://www.wiz.io/blog/detecting-behavioral-cloud-indicators-of-compromise-iocs https://www.wiz.io/blog/detecting-behavioral-cloud-indicators-of-compromise-iocs Wed, 15 Jan 2025 09:56:28 GMT Merav Bar Gili Tikochinski https://www.wiz.io/blog/wiz-research-identifies-exploitation-in-the-wild-of-aviatrix-cve-2024-50603 https://www.wiz.io/blog/wiz-research-identifies-exploitation-in-the-wild-of-aviatrix-cve-2024-50603 Sat, 11 Jan 2025 17:23:53 GMT Gal Nagli Merav Bar Gili Tikochinski Shaked Tanchuma Yogev https://www.wiz.io/blog/cve-2025-0282-and-cve-2025-0283-critical-ivanti-0days-exploited-in-the-wild https://www.wiz.io/blog/cve-2025-0282-and-cve-2025-0283-critical-ivanti-0days-exploited-in-the-wild Thu, 09 Jan 2025 14:23:44 GMT Merav Bar https://www.wiz.io/blog/nuclei-signature-verification-bypass https://www.wiz.io/blog/nuclei-signature-verification-bypass Fri, 03 Jan 2025 15:00:01 GMT Guy Goldenberg https://www.wiz.io/blog/avoiding-mistakes-with-aws-oidc-integration-conditions https://www.wiz.io/blog/avoiding-mistakes-with-aws-oidc-integration-conditions Wed, 01 Jan 2025 14:00:00 GMT Scott Piper https://www.wiz.io/blog/the-many-ways-to-obtain-credentials-in-aws https://www.wiz.io/blog/the-many-ways-to-obtain-credentials-in-aws Fri, 20 Dec 2024 13:00:00 GMT Scott Piper https://www.wiz.io/blog/diicot-threat-group-malware-campaign https://www.wiz.io/blog/diicot-threat-group-malware-campaign Tue, 17 Dec 2024 17:31:22 GMT Gili Tikochinski Yaara Shriki https://www.wiz.io/blog/spring-boot-actuator-misconfigurations https://www.wiz.io/blog/spring-boot-actuator-misconfigurations Mon, 16 Dec 2024 14:00:34 GMT Danielle Aminov https://www.wiz.io/blog/jinx-2401-llm-hijacking-aws https://www.wiz.io/blog/jinx-2401-llm-hijacking-aws Sun, 15 Dec 2024 14:07:55 GMT Maayan Bentor https://www.wiz.io/blog/top-aws-re-invent-announcements-for-security-teams-in-2024 https://www.wiz.io/blog/top-aws-re-invent-announcements-for-security-teams-in-2024 Wed, 11 Dec 2024 13:00:00 GMT Scott Piper https://www.wiz.io/blog/ultralytics-ai-library-hacked-via-github-for-cryptomining https://www.wiz.io/blog/ultralytics-ai-library-hacked-via-github-for-cryptomining Mon, 09 Dec 2024 15:56:01 GMT Wiz Threat Research https://www.wiz.io/blog/how-to-use-aws-resource-control-policies https://www.wiz.io/blog/how-to-use-aws-resource-control-policies Thu, 28 Nov 2024 05:00:00 GMT Scott Piper https://www.wiz.io/blog/nvidia-ml-data-classification https://www.wiz.io/blog/nvidia-ml-data-classification Tue, 26 Nov 2024 12:02:31 GMT Erez Harush Nadav Tzuker Shaked Rotlevi https://www.wiz.io/blog/cve-2024-0012-pan-os-vulnerability-exploited-in-the-wild https://www.wiz.io/blog/cve-2024-0012-pan-os-vulnerability-exploited-in-the-wild Fri, 22 Nov 2024 13:50:17 GMT Wiz Threat Research https://www.wiz.io/blog/unmasking-phishing-strategies-for-identifying-0ktapus-domains https://www.wiz.io/blog/unmasking-phishing-strategies-for-identifying-0ktapus-domains Thu, 07 Nov 2024 17:09:51 GMT Amitai Cohen Shahar Dorfman https://www.wiz.io/blog/lottie-player-supply-chain-attack https://www.wiz.io/blog/lottie-player-supply-chain-attack Thu, 31 Oct 2024 12:55:28 GMT Merav Bar Gal Nagli Danielle Aminov https://www.wiz.io/blog/askai-text-to-security-graph-query https://www.wiz.io/blog/askai-text-to-security-graph-query Wed, 23 Oct 2024 14:00:00 GMT Daniel Lazarev Erez Harush https://www.wiz.io/blog/palo-alto-networks-expedition-critical-vulnerabilities-advisory https://www.wiz.io/blog/palo-alto-networks-expedition-critical-vulnerabilities-advisory Thu, 10 Oct 2024 17:45:48 GMT Merav Bar Gili Tikochinski https://www.wiz.io/blog/openprinting-cups-vulnerabilities-cve-2024-47076-cve-2024-47175-cve-2024-47176-cve-2024-47177 https://www.wiz.io/blog/openprinting-cups-vulnerabilities-cve-2024-47076-cve-2024-47175-cve-2024-47176-cve-2024-47177 Sun, 29 Sep 2024 17:00:51 GMT Merav Bar Scott Piper https://www.wiz.io/blog/wiz-research-critical-nvidia-ai-vulnerability https://www.wiz.io/blog/wiz-research-critical-nvidia-ai-vulnerability Thu, 26 Sep 2024 12:33:43 GMT Shir Tamari Ronen Shustin Andres Riancho https://www.wiz.io/blog/mastering-cloud-specific-indicators-of-compromise-iocs https://www.wiz.io/blog/mastering-cloud-specific-indicators-of-compromise-iocs Mon, 23 Sep 2024 15:45:17 GMT Merav Bar Amitai Cohen https://www.wiz.io/blog/preventing-risk-of-request-collapsing-in-web-caching https://www.wiz.io/blog/preventing-risk-of-request-collapsing-in-web-caching Tue, 03 Sep 2024 13:47:27 GMT Scott Piper https://www.wiz.io/blog/cloud-security-migrations-best-practices https://www.wiz.io/blog/cloud-security-migrations-best-practices Fri, 16 Aug 2024 15:01:45 GMT Scott Piper https://www.wiz.io/blog/wiz-becomes-a-cve-numbering-authority-cna https://www.wiz.io/blog/wiz-becomes-a-cve-numbering-authority-cna Wed, 14 Aug 2024 13:43:30 GMT Mitch Herckis Alon Schindel https://www.wiz.io/blog/emerging-phishing-campaign-targeting-aws-accounts https://www.wiz.io/blog/emerging-phishing-campaign-targeting-aws-accounts Thu, 08 Aug 2024 13:28:59 GMT Gili Tikochinski Scott Piper https://www.wiz.io/blog/seleniumgreed-cryptomining-exploit-attack-flow-remediation-steps https://www.wiz.io/blog/seleniumgreed-cryptomining-exploit-attack-flow-remediation-steps Thu, 25 Jul 2024 14:05:39 GMT Avigayil Mechtinger Gili Tikochinski Dor Laska https://www.wiz.io/blog/sapwned-sap-ai-vulnerabilities-ai-security https://www.wiz.io/blog/sapwned-sap-ai-vulnerabilities-ai-security Wed, 17 Jul 2024 17:45:17 GMT Hillai Ben-Sasson https://www.wiz.io/blog/cve-2024-6387-critical-rce-openssh https://www.wiz.io/blog/cve-2024-6387-critical-rce-openssh Mon, 01 Jul 2024 13:49:17 GMT Amitai Cohen Gili Tikochinski Merav Bar Danielle Aminov https://www.wiz.io/blog/probllama-ollama-vulnerability-cve-2024-37032 https://www.wiz.io/blog/probllama-ollama-vulnerability-cve-2024-37032 Mon, 24 Jun 2024 13:09:04 GMT Sagi Tzadik https://www.wiz.io/blog/critical-rce-php-cgi-vulnerability https://www.wiz.io/blog/critical-rce-php-cgi-vulnerability Mon, 10 Jun 2024 17:08:03 GMT Merav Bar https://www.wiz.io/blog/dero-cryptojacking-campaign-adapts-to-evade-detection https://www.wiz.io/blog/dero-cryptojacking-campaign-adapts-to-evade-detection Fri, 07 Jun 2024 12:04:51 GMT Avigayil Mechtinger Shay Berkovich Gili Tikochinski https://www.wiz.io/blog/wiz-research-discovers-critical-vulnerability-in-replicate https://www.wiz.io/blog/wiz-research-discovers-critical-vulnerability-in-replicate Thu, 23 May 2024 13:58:31 GMT Shir Tamari Sagi Tzadik https://www.wiz.io/blog/crushftp-vfs-sandbox-vulnerability https://www.wiz.io/blog/crushftp-vfs-sandbox-vulnerability Wed, 24 Apr 2024 16:15:18 GMT Merav Bar Gili Tikochinski https://www.wiz.io/blog/wiz-and-hugging-face-address-risks-to-ai-infrastructure https://www.wiz.io/blog/wiz-and-hugging-face-address-risks-to-ai-infrastructure Thu, 04 Apr 2024 15:55:05 GMT Shir Tamari Sagi Tzadik https://www.wiz.io/blog/cve-2024-3094-critical-rce-vulnerability-found-in-xz-utils https://www.wiz.io/blog/cve-2024-3094-critical-rce-vulnerability-found-in-xz-utils Fri, 29 Mar 2024 22:02:58 GMT Merav Bar Amitai Cohen Danielle Aminov https://www.wiz.io/blog/introducing-namespacehound-for-cross-tenant-violation-assessments https://www.wiz.io/blog/introducing-namespacehound-for-cross-tenant-violation-assessments Wed, 13 Mar 2024 17:57:49 GMT Shay Berkovich Megan Moore https://www.wiz.io/blog/jetbrains-teamcity-authentication-bypass-vulnerabilities-cve-2024-27198-cve-2024-27199 https://www.wiz.io/blog/jetbrains-teamcity-authentication-bypass-vulnerabilities-cve-2024-27198-cve-2024-27199 Wed, 06 Mar 2024 16:49:16 GMT Merav Bar Gili Tikochinski https://www.wiz.io/blog/chia-and-the-dangers-of-proof-of-storage-cryptojacking-in-the-cloud https://www.wiz.io/blog/chia-and-the-dangers-of-proof-of-storage-cryptojacking-in-the-cloud Wed, 21 Feb 2024 16:30:02 GMT Scott Piper https://www.wiz.io/blog/critical-rce-vulnerabilities-in-fortios-cve-2024-21762-cve-2024-23113 https://www.wiz.io/blog/critical-rce-vulnerabilities-in-fortios-cve-2024-21762-cve-2024-23113 Mon, 12 Feb 2024 13:53:10 GMT Amitai Cohen Merav Bar https://www.wiz.io/blog/new-attack-vectors-emerge-via-recent-eks-access-entries-and-pod-identity-features https://www.wiz.io/blog/new-attack-vectors-emerge-via-recent-eks-access-entries-and-pod-identity-features Fri, 09 Feb 2024 19:10:22 GMT Shay Berkovich Lior Sonntag https://www.wiz.io/blog/midnight-blizzard-microsoft-breach-analysis-and-best-practices https://www.wiz.io/blog/midnight-blizzard-microsoft-breach-analysis-and-best-practices Thu, 08 Feb 2024 18:00:03 GMT Lior Sonntag https://www.wiz.io/blog/eks-cluster-access-management-and-pod-identity-security-recommendations https://www.wiz.io/blog/eks-cluster-access-management-and-pod-identity-security-recommendations Tue, 06 Feb 2024 17:19:13 GMT Shay Berkovich https://www.wiz.io/blog/ivanti-vulnerabilities-cve-2023-46805-cve-2024-21887-cve-2024-21888-and-cve-2024-21893 https://www.wiz.io/blog/ivanti-vulnerabilities-cve-2023-46805-cve-2024-21887-cve-2024-21888-and-cve-2024-21893 Tue, 06 Feb 2024 16:06:48 GMT Merav Bar Amitai Cohen https://www.wiz.io/blog/leaky-vessels-container-escape-vulnerabilities https://www.wiz.io/blog/leaky-vessels-container-escape-vulnerabilities Mon, 05 Feb 2024 17:28:28 GMT Merav Bar Amitai Cohen Itamar Gilad https://www.wiz.io/blog/5-facts-from-the-cybersecurity-compensation-report https://www.wiz.io/blog/5-facts-from-the-cybersecurity-compensation-report Mon, 29 Jan 2024 16:15:30 GMT Wiz Team https://www.wiz.io/blog/kubernetes-security-for-dummies https://www.wiz.io/blog/kubernetes-security-for-dummies Thu, 25 Jan 2024 14:14:24 GMT Wiz Team https://www.wiz.io/blog/introducing-the-cloud-threat-landscape https://www.wiz.io/blog/introducing-the-cloud-threat-landscape Wed, 24 Jan 2024 15:28:30 GMT Amitai Cohen Alon Schindel https://www.wiz.io/blog/key-findings-from-the-state-of-ai-in-the-cloud-report-2024 https://www.wiz.io/blog/key-findings-from-the-state-of-ai-in-the-cloud-report-2024 Wed, 17 Jan 2024 16:00:28 GMT Amitai Cohen Megan Moore https://www.wiz.io/blog/crying-out-cloud-favorite-stories-of-2023 https://www.wiz.io/blog/crying-out-cloud-favorite-stories-of-2023 Tue, 16 Jan 2024 17:21:03 GMT Amitai Cohen Merav Bar Eden Naftali https://www.wiz.io/blog/key-takeaways-from-the-wiz-2023-kubernetes-security-report https://www.wiz.io/blog/key-takeaways-from-the-wiz-2023-kubernetes-security-report Wed, 08 Nov 2023 16:37:49 GMT Shay Berkovich Rotem Zarin https://www.wiz.io/blog/eight-questions-to-measure-vulnerability-remediation-pain https://www.wiz.io/blog/eight-questions-to-measure-vulnerability-remediation-pain Fri, 03 Nov 2023 13:07:46 GMT Amitai Cohen https://www.wiz.io/blog/announcing-the-eks-cluster-games https://www.wiz.io/blog/announcing-the-eks-cluster-games Wed, 01 Nov 2023 15:29:42 GMT Nir Ohfeld Ronen Shustin https://www.wiz.io/blog/cve-2023-38545-curl-vulnerability https://www.wiz.io/blog/cve-2023-38545-curl-vulnerability Wed, 11 Oct 2023 16:56:35 GMT Merav Bar Sagi Tzadik https://www.wiz.io/blog/the-good-the-bad-and-the-vulnerable-summary https://www.wiz.io/blog/the-good-the-bad-and-the-vulnerable-summary Tue, 10 Oct 2023 13:37:20 GMT Merav Bar Amitai Cohen https://www.wiz.io/blog/exim-zero-day-vulnerabilities https://www.wiz.io/blog/exim-zero-day-vulnerabilities Mon, 02 Oct 2023 13:53:02 GMT Merav Bar https://www.wiz.io/blog/cve-2023-4863-and-cve-2023-5217-exploited-in-the-wild https://www.wiz.io/blog/cve-2023-4863-and-cve-2023-5217-exploited-in-the-wild Sun, 01 Oct 2023 13:31:06 GMT Merav Bar Amitai Cohen https://www.wiz.io/blog/38-terabytes-of-private-data-accidentally-exposed-by-microsoft-ai-researchers https://www.wiz.io/blog/38-terabytes-of-private-data-accidentally-exposed-by-microsoft-ai-researchers Mon, 18 Sep 2023 13:01:29 GMT Hillai Ben-Sasson Ronny Greenberg https://www.wiz.io/blog/key-takeaways-from-microsofts-latest-storm-0558-report https://www.wiz.io/blog/key-takeaways-from-microsofts-latest-storm-0558-report Thu, 07 Sep 2023 19:42:14 GMT Amitai Cohen https://www.wiz.io/blog/cryptojacking-attacks-summer-2023 https://www.wiz.io/blog/cryptojacking-attacks-summer-2023 Wed, 06 Sep 2023 13:49:59 GMT Avigayil Mechtinger https://www.wiz.io/blog/ubuntu-overlayfs-vulnerability https://www.wiz.io/blog/ubuntu-overlayfs-vulnerability Thu, 27 Jul 2023 19:33:45 GMT Sagi Tzadik Shir Tamari https://www.wiz.io/blog/zenbleed https://www.wiz.io/blog/zenbleed Wed, 26 Jul 2023 19:35:06 GMT Amitai Cohen Scott Piper Merav Bar https://www.wiz.io/blog/top-16-cloud-security-experts-you-should-follow-in-2023 https://www.wiz.io/blog/top-16-cloud-security-experts-you-should-follow-in-2023 Tue, 25 Jul 2023 14:09:42 GMT Wiz Team https://www.wiz.io/blog/storm-0558-compromised-microsoft-key-enables-authentication-of-countless-micr https://www.wiz.io/blog/storm-0558-compromised-microsoft-key-enables-authentication-of-countless-micr Fri, 21 Jul 2023 14:01:28 GMT Shir Tamari https://www.wiz.io/blog/kubernetes-api-limitations-in-finding-non-standard-pods-and-containers https://www.wiz.io/blog/kubernetes-api-limitations-in-finding-non-standard-pods-and-containers Wed, 19 Jul 2023 14:23:29 GMT Oren Ofer https://www.wiz.io/blog/pyloose-first-python-based-fileless-attack-on-cloud-workloads https://www.wiz.io/blog/pyloose-first-python-based-fileless-attack-on-cloud-workloads Tue, 11 Jul 2023 13:39:41 GMT Avigayil Mechtinger Oren Ofer Itamar Gilad https://www.wiz.io/blog/linux-rootkits-explained-part-1-dynamic-linker-hijacking https://www.wiz.io/blog/linux-rootkits-explained-part-1-dynamic-linker-hijacking Wed, 05 Jul 2023 13:34:27 GMT Avigayil Mechtinger https://www.wiz.io/blog/how-to-get-rid-of-aws-access-keys-part-2 https://www.wiz.io/blog/how-to-get-rid-of-aws-access-keys-part-2 Thu, 29 Jun 2023 15:11:12 GMT Scott Piper https://www.wiz.io/blog/genai-tenant-isolation https://www.wiz.io/blog/genai-tenant-isolation Wed, 28 Jun 2023 13:54:17 GMT Amitai Cohen Barak Sharoni https://www.wiz.io/blog/kubernetes-grey-zone-risks-in-managed-cluster-middleware https://www.wiz.io/blog/kubernetes-grey-zone-risks-in-managed-cluster-middleware Mon, 12 Jun 2023 15:42:33 GMT Shay Berkovich https://www.wiz.io/blog/crying-out-cloud-podcast https://www.wiz.io/blog/crying-out-cloud-podcast Mon, 12 Jun 2023 14:56:28 GMT Omer Mosheiov https://www.wiz.io/blog/the-big-iam-challenge https://www.wiz.io/blog/the-big-iam-challenge Tue, 06 Jun 2023 17:22:05 GMT Nir Ohfeld https://www.wiz.io/blog/cve-2023-34362 https://www.wiz.io/blog/cve-2023-34362 Sun, 04 Jun 2023 18:20:05 GMT Amitai Cohen Merav Bar https://www.wiz.io/blog/lateral-movement-risks-in-the-cloud-and-how-to-prevent-them-part-4-from-compromis https://www.wiz.io/blog/lateral-movement-risks-in-the-cloud-and-how-to-prevent-them-part-4-from-compromis Thu, 25 May 2023 19:20:43 GMT Lior Sonntag https://www.wiz.io/blog/cve-2023-32784-keepass-vulnerability-exploit-released https://www.wiz.io/blog/cve-2023-32784-keepass-vulnerability-exploit-released Tue, 23 May 2023 13:49:01 GMT Merav Bar Amitai Cohen https://www.wiz.io/blog/brokensesame-accidental-write-permissions-to-private-registry-allowed-potential-r https://www.wiz.io/blog/brokensesame-accidental-write-permissions-to-private-registry-allowed-potential-r Wed, 19 Apr 2023 13:00:06 GMT Ronen Shustin Shir Tamari https://www.wiz.io/blog/microsoft-april-2023-patch-tuesday-highlights https://www.wiz.io/blog/microsoft-april-2023-patch-tuesday-highlights Thu, 13 Apr 2023 19:20:20 GMT Merav Bar Amitai Cohen https://www.wiz.io/blog/intro-to-forensics-in-the-cloud-a-container-was-compromised-whats-next https://www.wiz.io/blog/intro-to-forensics-in-the-cloud-a-container-was-compromised-whats-next Thu, 06 Apr 2023 15:43:50 GMT Avigayil Mechtinger https://www.wiz.io/blog/bingbang https://www.wiz.io/blog/bingbang Wed, 29 Mar 2023 16:18:54 GMT Raaz Herzberg Shir Tamari Hillai Ben-Sasson https://www.wiz.io/blog/azure-active-directory-bing-misconfiguration https://www.wiz.io/blog/azure-active-directory-bing-misconfiguration Wed, 29 Mar 2023 16:18:47 GMT Hillai Ben-Sasson https://www.wiz.io/blog/using-service-control-policies-to-protect-security-baselines https://www.wiz.io/blog/using-service-control-policies-to-protect-security-baselines Mon, 20 Mar 2023 17:19:41 GMT Scott Piper https://www.wiz.io/blog/cve-2023-25610 https://www.wiz.io/blog/cve-2023-25610 Mon, 13 Mar 2023 12:39:58 GMT Merav Bar https://www.wiz.io/blog/from-pod-security-policies-to-pod-security-standards-a-migration-guide https://www.wiz.io/blog/from-pod-security-policies-to-pod-security-standards-a-migration-guide Thu, 09 Mar 2023 17:27:05 GMT Shay Berkovich Amir Lande Blau https://www.wiz.io/blog/redirection-roulette https://www.wiz.io/blog/redirection-roulette Thu, 02 Mar 2023 16:20:21 GMT Amitai Cohen Barak Sharoni https://www.wiz.io/blog/lateral-movement-risks-in-the-cloud-and-how-to-prevent-them-part-3-from-compromis https://www.wiz.io/blog/lateral-movement-risks-in-the-cloud-and-how-to-prevent-them-part-3-from-compromis Thu, 23 Feb 2023 16:22:45 GMT Lior Sonntag https://www.wiz.io/blog/ransomware-attacks-targeting-vmware-esxi-servers-everything-you-need-to-know https://www.wiz.io/blog/ransomware-attacks-targeting-vmware-esxi-servers-everything-you-need-to-know Tue, 07 Feb 2023 12:26:52 GMT Merav Bar https://www.wiz.io/blog/the-top-cloud-security-threats-to-be-aware-of-in-2023 https://www.wiz.io/blog/the-top-cloud-security-threats-to-be-aware-of-in-2023 Mon, 06 Feb 2023 16:59:42 GMT Scott Piper Amitai Cohen https://www.wiz.io/blog/enhancing-kubernetes-security-with-user-namespaces https://www.wiz.io/blog/enhancing-kubernetes-security-with-user-namespaces Mon, 23 Jan 2023 15:29:10 GMT Shay Berkovich Arik Nemtsov https://www.wiz.io/blog/cve-2022-44877-critical-rce-in-centos-control-web-panel-exploited-in-the-wild https://www.wiz.io/blog/cve-2022-44877-critical-rce-in-centos-control-web-panel-exploited-in-the-wild Tue, 17 Jan 2023 13:17:11 GMT Merav Bar https://www.wiz.io/blog/hunting-for-signs-of-persistence-in-the-cloud-an-ir-guide https://www.wiz.io/blog/hunting-for-signs-of-persistence-in-the-cloud-an-ir-guide Thu, 12 Jan 2023 17:04:40 GMT Lior Sonntag https://www.wiz.io/blog/lateral-movement-risks-in-the-cloud-and-how-to-prevent-them-part-2-from-k8s-clust https://www.wiz.io/blog/lateral-movement-risks-in-the-cloud-and-how-to-prevent-them-part-2-from-k8s-clust Thu, 05 Jan 2023 17:00:04 GMT Lior Sonntag https://www.wiz.io/blog/malicious-pytorch-dependency-torchtriton-on-pypi-everything-you-need-to-know https://www.wiz.io/blog/malicious-pytorch-dependency-torchtriton-on-pypi-everything-you-need-to-know Tue, 03 Jan 2023 13:10:27 GMT Merav Bar https://www.wiz.io/blog/introducing-peach-a-tenant-isolation-framework-for-cloud-applications https://www.wiz.io/blog/introducing-peach-a-tenant-isolation-framework-for-cloud-applications Wed, 14 Dec 2022 14:15:22 GMT Amitai Cohen https://www.wiz.io/blog/secret-based-cloud-supply-chain-attacks-case-study-and-lessons-for-security-teams https://www.wiz.io/blog/secret-based-cloud-supply-chain-attacks-case-study-and-lessons-for-security-teams Tue, 13 Dec 2022 19:28:25 GMT Alon Schindel Shir Tamari https://www.wiz.io/blog/hells-keychain-supply-chain-attack-in-ibm-cloud-databases-for-postgresql https://www.wiz.io/blog/hells-keychain-supply-chain-attack-in-ibm-cloud-databases-for-postgresql Thu, 01 Dec 2022 15:00:28 GMT Ronen Shustin Shir Tamari https://www.wiz.io/blog/lateral-movement-risks-in-the-cloud-and-how-to-prevent-them-part-1-the-network-layer https://www.wiz.io/blog/lateral-movement-risks-in-the-cloud-and-how-to-prevent-them-part-1-the-network-layer Thu, 13 Oct 2022 17:43:22 GMT Lior Sonntag https://www.wiz.io/blog/attachme-oracle-cloud-vulnerability-allows-unauthorized-cross-tenant-volume-access https://www.wiz.io/blog/attachme-oracle-cloud-vulnerability-allows-unauthorized-cross-tenant-volume-access Tue, 20 Sep 2022 12:57:00 GMT Elad Gabay https://www.wiz.io/blog/the-cloud-has-an-isolation-problem-postgresql-vulnerabilities https://www.wiz.io/blog/the-cloud-has-an-isolation-problem-postgresql-vulnerabilities Thu, 11 Aug 2022 18:20:01 GMT Ronen Shustin Shir Tamari Nir Ohfeld Sagi Tzadik https://www.wiz.io/blog/auto-patching-for-omi https://www.wiz.io/blog/auto-patching-for-omi Fri, 05 Aug 2022 05:55:47 GMT Alon Schindel https://www.wiz.io/blog/omi-returns-lpe-technical-analysis https://www.wiz.io/blog/omi-returns-lpe-technical-analysis Fri, 05 Aug 2022 05:51:58 GMT Nir Ohfeld Rotem Zarin https://www.wiz.io/blog/wiz-research-discovers-extrareplica-cross-account-database-vulnerability-in-azure-postgresql https://www.wiz.io/blog/wiz-research-discovers-extrareplica-cross-account-database-vulnerability-in-azure-postgresql Fri, 29 Apr 2022 05:12:16 GMT Ronen Shustin Sagi Tzadik Nir Ohfeld Shir Tamari https://www.wiz.io/blog/hardening-your-cloud-environment-against-lapsus-like-threat-actor https://www.wiz.io/blog/hardening-your-cloud-environment-against-lapsus-like-threat-actor Sat, 26 Mar 2022 04:56:44 GMT Amitai Cohen https://www.wiz.io/blog/2022-cloud-security-threats https://www.wiz.io/blog/2022-cloud-security-threats Tue, 18 Jan 2022 05:36:08 GMT Alon Schindel https://www.wiz.io/blog/azure-app-service-source-code-leak https://www.wiz.io/blog/azure-app-service-source-code-leak Tue, 21 Dec 2021 05:08:25 GMT Shir Tamari https://www.wiz.io/blog/10-days-later-enterprises-halfway-through-patching-log4shell https://www.wiz.io/blog/10-days-later-enterprises-halfway-through-patching-log4shell Tue, 21 Dec 2021 04:52:06 GMT Ami Luttwak Alon Schindel https://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-vulnerability-walkthrough https://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-vulnerability-walkthrough Thu, 11 Nov 2021 03:57:43 GMT Nir Ohfeld Sagi Tzadik https://www.wiz.io/blog/how-we-broke-the-cloud-with-two-lines-of-code-the-full-story-of-chaosdb https://www.wiz.io/blog/how-we-broke-the-cloud-with-two-lines-of-code-the-full-story-of-chaosdb Thu, 11 Nov 2021 03:18:38 GMT Nir Ohfeld Sagi Tzadik https://www.wiz.io/blog/protecting-cloud-environments-from-the-new-critical-apache-http-server-vulnerability https://www.wiz.io/blog/protecting-cloud-environments-from-the-new-critical-apache-http-server-vulnerability Fri, 08 Oct 2021 02:13:12 GMT Alon Schindel https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure Tue, 14 Sep 2021 17:21:46 GMT Nir Ohfeld https://www.wiz.io/blog/secret-agent-exposes-azure-customers-to-unauthorized-code-execution https://www.wiz.io/blog/secret-agent-exposes-azure-customers-to-unauthorized-code-execution Tue, 14 Sep 2021 17:05:30 GMT Nir Ohfeld Alon Schindel https://www.wiz.io/blog/protecting-your-environment-from-chaosdb https://www.wiz.io/blog/protecting-your-environment-from-chaosdb Sun, 29 Aug 2021 16:52:07 GMT Alon Schindel https://www.wiz.io/blog/chaosdb-how-we-hacked-thousands-of-azure-customers-databases https://www.wiz.io/blog/chaosdb-how-we-hacked-thousands-of-azure-customers-databases Thu, 26 Aug 2021 16:42:14 GMT Nir Ohfeld Sagi Tzadik https://www.wiz.io/blog/is-your-organization-leaking-sensitive-dynamic-dns-data-heres-how-to-find-out https://www.wiz.io/blog/is-your-organization-leaking-sensitive-dynamic-dns-data-heres-how-to-find-out Fri, 06 Aug 2021 16:25:58 GMT Ami Luttwak https://www.wiz.io/blog/black-hat-2021-aws-cross-account-vulnerabilities-how-isolated-is-your-cloud-environment https://www.wiz.io/blog/black-hat-2021-aws-cross-account-vulnerabilities-how-isolated-is-your-cloud-environment Wed, 04 Aug 2021 16:21:53 GMT Ami Luttwak https://www.wiz.io/blog/black-hat-2021-dns-loophole-makes-nation-state-level-spying-as-easy-as-registering-a-domain https://www.wiz.io/blog/black-hat-2021-dns-loophole-makes-nation-state-level-spying-as-easy-as-registering-a-domain Wed, 04 Aug 2021 16:15:35 GMT Shir Tamari https://www.wiz.io/blog/82-of-companies-unknowingly-give-3rd-parties-access-to-all-their-cloud-data https://www.wiz.io/blog/82-of-companies-unknowingly-give-3rd-parties-access-to-all-their-cloud-data Tue, 02 Feb 2021 17:39:49 GMT Shir Tamari https://www.wiz.io/blog/recent-linux-sudo-vulnerability-affects-a-major-percent-of-cloud-workloads https://www.wiz.io/blog/recent-linux-sudo-vulnerability-affects-a-major-percent-of-cloud-workloads Tue, 02 Feb 2021 13:00:00 GMT Ami Luttwak https://www.wiz.io/blog/the-solarwinds-attack https://www.wiz.io/blog/the-solarwinds-attack Mon, 01 Feb 2021 12:52:22 GMT Ami Luttwak