Wiz Research Blog
wiz-blog · B · active
Cloud security research; strong on cloud-native CVEs, container escapes, and misconfiguration. Promoted from candidate → active 2026-05-08 after 2026-05-08 audit returned 5 dated 2026-05-06/08 items including Dirty Frag and Akamai integration. (v2.55: rss_url verified, use `python3 tools/fetch_source.py feed https://www.wiz.io/api/feed/cloud-threat-landscape/rss.xml [N]`) | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → webfetch https://www.wiz.io/blog (listing) then webfetch per-article wiz.io/blog/<slug> URL; RSS at https://www.wiz.io/api/feed/cloud-threat-landscape/rss.xml (cloud-threat-landscape slice only). AVOID: Listing renders the article hero IMAGE url first and the real link as a relative /blog/<slug> path, resolve it against www.wiz.io. The documented RSS only covers the cloud-threat-landscape slice, not all blog posts.. | 2026-07-05 admiralty audit: B, original cloud-security research from Wiz Research, but the blog feed mixes in marketing and policy re-reporting; resolve slugs against www.wiz.io. No status change. | 2026-10-22 (S3): `feed https://www.wiz.io/feed/rss.xml 15` works (dated, direct) and carried two relevant Wiz CIRT posts on 2026-10-19 and 2026-10-20; it was in no slice this fire, so include it in the next rotation.
Cited in 17 entries
Citation cadence
Citation days per ISO week (25 weeks of coverage span, total 16).
- Gheist: stolen GitHub tokens plant a secret-dumping workflow in every repository they reach; GitHub's July approval hold stops it on public github.com repositories but not on private ones or GitHub Enterprise Server2026-10-27
- LiteLLM 1.107.0: the PyPI wheels and the official Docker images carried a credential stealer and a dormant remote-code loader that Python starts at every launch, published through the maintainers' own release workflow with stolen developer tokens2026-10-22
- ARTEX: Microsoft reports Storm-0940, a China-state aligned actor, running an open-source multi-agent LLM penetration-testing framework against hundreds of organizations, with privileged cloud access in under three hours in some cases, and Expel sees the same infrastructure abuse Okta self-service registration2026-10-22
- CVE-2026-42016 + CVE-2026-42018, JFrog Artifactory: chaining two previously-patched token flaws turns an unauthenticated request into full administrative control in two API calls, confirmed exploited since mid-August2026-09-12
- CVE-2026-82329, JFrog Artifactory: an unauthenticated attacker gets administrative access under default configuration (CVSS 9.8)2026-09-01
- Wiz's autonomous AI red-teaming agent found and exploited a GitHub Actions command-injection flaw in Snowflake's public connector repo, exfiltrating live Jira credentials via an out-of-band callback2026-08-28
- A hijacked crates.io account added the first dependency arrayref has taken in ten years, and that dependency ran a backdoor at compile time; every machine that built an affected project during a ninety-minute window must be treated as compromised2026-08-23
- Wiz Cloud Threat Highlights H1 2026: LiteLLM had four separate security events in six months, unauthenticated MCP endpoints turned up across hundreds of environments, and a new extortion actor goes after service accounts rather than people2026-08-08
- AsyncAPI npm packages backdoored via a GitHub Actions pull_request_target token theft, delivering a multi-stage IPFS implant (M-RED-TEAM)2026-07-14
- GhostApproval (CVE-2026-12958, CVE-2026-50549), symlink + confirmation-UI misrepresentation lets a malicious repo write outside six AI coding assistants' workspace sandbox2026-07-09
- CVE-2026-12957, Amazon Q Developer auto-loaded workspace MCP configs, enabling repo-planted code execution and AWS credential theft (Wiz)2026-06-27
- CVE-2026-52806, Gogs self-hosted Git server: argument injection to OS command execution (BSI critical batch)2026-06-20
- TeamPCP open-sources its Mini Shai-Hulud framework, spawning a new "Phantom Gyp" derivative2026-06-09
- "Miasma" worm backdoors 32 Red Hat Cloud Services npm packages via OIDC trusted-publishing abuse2026-06-02
- Wiz CIRT names JINX-0164, LinkedIn-recruiter lures, AUDIOFIX macOS infostealer, MINIRAT npm pivot into CI/CD2026-05-29
- CVE-2026-46300, Linux kernel: local privilege escalation via xfrm ESP-in-TCP ("Fragnesia"), listed by CISA as exploited and chained with the PHP2Shell flaws to reach root, PoC public2026-05-15
- Mini Shai-Hulud hits TanStack: a pull_request_target Pwn Request, Actions cache poisoning and OIDC token theft from runner memory published 84 malicious @tanstack versions with valid provenance2026-05-13