How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed) 2026-10-07 50 Chad Knipschild True Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts 2026-09-30 50 Shay Berkovich True The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub 2026-09-29 85 Blue Agent True The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments 2026-09-25 75 Gili Tikochinski True Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure 2026-09-24 70 Ami Luttwak True Building an AI Detection Engine That Understands Agent Intent 2026-09-17 70 Yali Gottlib True Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 2026-09-10 88 Shahar Dorfman True Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise 2026-09-09 85 Amitai Cohen True Inside 90 days of attacks on AI infrastructure 2026-08-27 80 Yaara Shriki True Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns 2026-08-20 90 Rami McCarthy True How to Spot and Stop Rogue Device Joins 2026-08-18 70 Shahar Dorfman True Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR 2026-08-17 68 Gal Nagli True How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign 2026-08-13 75 Eden Abergil True Inside the Metabase SQLi: Exploited in the Wild 2026-08-10 80 Rami McCarthy True Cloud Threat Highlights: H1 2026 2026-08-06 90 Wiz Threat Research True keyv and cacheable npm Package Hijacked in Supply Chain Attack 2026-08-04 90 Merav Bar True Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Era 2026-08-03 85 Shashank Golla True CosmosEscape: Taking Over Every Database in Azure Cosmos DB 2026-07-30 90 Yuval Avrahami True Wiz’s First 6 Months as Part of Google 2026-07-29 60 Assaf Rappaport True The risk hiding behind exposed MCP servers 2026-07-28 80 Hila Ramati True Atlas: Wiz's autonomous AI Agent for vulnerability research, ranked #1 on CyberGym 2026-07-27 70 Nir Ohfeld True Opening the Black Box: Agentless Threat Detection for Virtual Appliances 2026-07-22 88 Shahar Dorfman True Agentless Threat Detection: Illuminating Cloud Blind Spots 2026-07-21 88 Shahar Dorfman True Exploitation in the Wild of wp2shell 2026-07-20 85 Shahar Dorfman True The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System 2026-07-15 75 Red Agent True M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions 2026-07-14 90 Rami McCarthy True Wiz in the Verizon DBIR: How AI Acceleration and Cloud Sprawl Impact Modern Defense 2026-07-09 70 Wiz Threat Research True GhostApproval: A Trust Boundary Gap in AI Coding Assistants 2026-07-08 75 Maor Dokhanian True The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API 2026-06-29 88 Red Agent True MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension 2026-06-26 75 Maor Dokhanian True The President’s Executive Actions on AI Have a Lot to Say on Cybersecurity 2026-06-18 30 Mitch Herckis True The Red Agent POV: How it Reasoned its Way to SSRF 2026-06-17 85 Red Agent True Introducing the Red Agent POV Series 2026-06-17 75 Red Agent True Miasma: Supply Chain Attack Targeting RedHat npm Packages 2026-06-01 85 Merav Bar True Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure 2026-05-27 78 Shira Ayal True durabletask: TeamPCP's Latest PyPi Compromise 2026-05-19 85 Rami McCarthy True The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave 2026-05-19 85 Rami McCarthy True Fragnesia: Linux Kernel Local Privilege Escalation via ESP-in-TCP 2026-05-13 75 Merav Bar True Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised 2026-05-12 90 Rami McCarthy True A Framework for AI Threat Readiness 2026-05-08 70 Alon Schindel True Dirty Frag: Linux Kernel Local Privilege Escalation via ESP and RxRPC 2026-05-08 75 Merav Bar True The Jenkins Threat Landscape 2026-05-06 70 Merav Bar True Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild 2026-05-06 88 Merav Bar True Practical Package Security: The Unofficial Guide 2026-05-04 80 Rami McCarthy True Copy Fail: Universal Linux Local Privilege Escalation Vulnerability 2026-05-01 85 True The (In)security Landscape of AI-Powered GitHub Actions (Part 2/2) 2026-04-30 75 True Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware 2026-04-29 85 True Securing GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854) 2026-04-28 90 True Context.ai OAuth Token Compromise 2026-04-20 72 True From Code to Pipeline: Wiz Code Now Secures Your Build Environment 2026-04-20 80 True 
