How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign 2026-08-13 True Eden Abergil True Cloud Threat Highlights: H1 2026 2026-08-06 True Wiz Threat Research True keyv and cacheable npm Package Hijacked in Supply Chain Attack 2026-08-04 True Merav Bar True Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Era 2026-08-03 True Shashank Golla True CosmosEscape: Taking Over Every Database in Azure Cosmos DB 2026-07-30 True Yuval Avrahami True Wiz’s First 6 Months as Part of Google 2026-07-29 True Assaf Rappaport True The risk hiding behind exposed MCP servers 2026-07-28 True Hila Ramati True Atlas: Wiz's autonomous AI Agent for vulnerability research, ranked #1 on CyberGym 2026-07-27 True Nir Ohfeld True Opening the Black Box: Agentless Threat Detection for Virtual Appliances 2026-07-22 True Shahar Dorfman True Agentless Threat Detection: Illuminating Cloud Blind Spots 2026-07-21 True Shahar Dorfman True Exploitation in the Wild of wp2shell 2026-07-20 True Shahar Dorfman True The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System 2026-07-15 True Red Agent True M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions 2026-07-14 True Rami McCarthy True Wiz in the Verizon DBIR: How AI Acceleration and Cloud Sprawl Impact Modern Defense 2026-07-09 True Wiz Threat Research True GhostApproval: A Trust Boundary Gap in AI Coding Assistants 2026-07-08 True Maor Dokhanian True The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API 2026-06-29 True Red Agent True MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension 2026-06-26 True Maor Dokhanian True The President’s Executive Actions on AI Have a Lot to Say on Cybersecurity 2026-06-18 True Mitch Herckis True The Red Agent POV: How it Reasoned its Way to SSRF 2026-06-17 True Red Agent True Introducing the Red Agent POV Series 2026-06-17 True Red Agent True Miasma: Supply Chain Attack Targeting RedHat npm Packages 2026-06-01 True Merav Bar True Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure 2026-05-27 True Shira Ayal True durabletask: TeamPCP's Latest PyPi Compromise 2026-05-19 True Rami McCarthy True The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave 2026-05-19 True Rami McCarthy True Fragnesia: Linux Kernel Local Privilege Escalation via ESP-in-TCP 2026-05-13 True Merav Bar True Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised 2026-05-12 True Rami McCarthy True A Framework for AI Threat Readiness 2026-05-08 True Alon Schindel True Dirty Frag: Linux Kernel Local Privilege Escalation via ESP and RxRPC 2026-05-08 True Merav Bar True The Jenkins Threat Landscape 2026-05-06 True Merav Bar True Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild 2026-05-06 True Merav Bar True Practical Package Security: The Unofficial Guide 2026-05-04 True Rami McCarthy True Copy Fail: Universal Linux Local Privilege Escalation Vulnerability 2026-05-01 True True The (In)security Landscape of AI-Powered GitHub Actions (Part 2/2) 2026-04-30 True True Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware 2026-04-29 True True Securing GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854) 2026-04-28 True True Context.ai OAuth Token Compromise 2026-04-20 True True From Code to Pipeline: Wiz Code Now Secures Your Build Environment 2026-04-20 True True Primer on GitHub Actions Security - Threat Model, Attacks and Defenses (Part 1/2) 2026-04-14 True True Claude Mythos: Preparing for a World Where AI Finds and Exploits Vulnerabilities Faster Than Ever 2026-04-10 True True Cloud Threats Retrospective 2026: What AI Changed (and What It Didn’t) 2026-04-09 True True Six Accounts, One Actor: Inside the prt-scan Supply Chain Campaign 2026-04-04 True True Axios NPM Distribution Compromised in Supply Chain Attack 2026-03-31 True True Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild 2026-03-30 True True Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign 2026-03-24 True True KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack 2026-03-23 True True Introducing the Wiz Red Agent- AI-Powered Attacker 2026-03-23 True True AI Runtime Threat Detection: From Input to Real-World Impact 2026-03-20 True True Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack 2026-03-20 True True It’s Official: Wiz Joins Google 2026-03-11 True True Would You Click ‘Accept’? Automatically detecting malicious Azure OAuth applications using LLMs 2026-02-18 True True 
