Newsroom

"Cybersecurity professionals are closing out 2025 confronting yet another information-disclosure vulnerability, drawing widespread concern as threat hunters and researchers race to avoid impacts comparable to previous defects dubbed with a “bleed” suffix. ..."

"Rami McCarthy, principal security researcher at cybersecurity firm Wiz, says that reinforcement learning is one way to continuously adapt to attacker behavior, but it’s only part of the picture. ..."

"Participants earned rewards at the hacking competition for Grafana, Linux Kernel, Redis, MariaDB, and PostgreSQL vulnerabilities...."

"Raaz Herberg is the Chief Marketing Officer and VP Product Strategy at Wiz, the fastest-growing cloud security company in history. ..."

"In November, Wiz announced enhancements to its AI security posture management (AI-SPM) offering through a major expansion of its coverage, with the platform now covering AI agents as well as usage of the Model Context Protocol (MCP)...."

"At this week's Black Hat Europe conference, two researchers urged developers to adopt a shared responsibility model for open source software and not leave it all up to GitHub to handle...."

"A high-severity unpatched security vulnerability in Gogs has come under active exploitation, with more than 700 compromised instances accessible over the internet, according to new findings from Wiz...."

"New York-based cloud security firm Wiz has entered the Indian market, betting that the country's rapid shift to cloud and AI-driven workloads will accelerate demand for unified security platforms. ..."

"Wiz has found threat actors exploiting GitHub tokens, giving them access to GitHub Action Secrets and, ultimately, cloud environments...."

"Open source React executes malicious code with malformed HTML—no authentication needed...."

"The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting hundreds of packages in the NPM (Node Package Manager) registry and publishing stolen data in 30,000 GitHub repositories...."

"The cloud and AI security superstar is launching the Partner Alliance program—including a dedicated new services track—in response to partner demand, Channel Chief Andy Ritchie tells CRN exclusively...."

"Self-replicating malware has infected almost 500 open-source packages, exposing more than 26,000 GitHub repositories in less than 24 hours...."

"Wiz found the secrets and warned that they can expose training data, organizational structures, and private models...."

"Assaf Rappaport, CEO and cofounder of the cybersecurity firm Wiz, has had experience with some titans of tech, including Microsoft CEO Satya Nadella and Alphabet CEO Sundar Pichai...."

"Report from Wiz also says developers are uploading extensions that include access tokens and other secrets...."

"A 13-year-old flaw with a CVSS score of 10 in the popular data storage service allows for full host takeover, and more than 300k instances are currently exposed...."

"Wiz has teamed up with Microsoft, Google and AWS and is inviting cloud security researchers to its Zeroday.Cloud competition...."

"Inside the cybersecurity boom, strong team, and bold gamble that helped Wiz CEO Assaf Rappaport win a $32 billion deal with Google..."

"Gründerszene spoke with co-founder Yinon Costica about the future of Wiz, Germany as a business location, and his most important advice to founders...."

"Rami McCarthy, principal security researcher at cybersecurity company Wiz, told Recorded Future News that developers rely daily on a lot of small software building blocks, known as packages, to do their jobs. ..."

"Yinon Costica joins Big Technology Podcast to discuss the extent of the cybersecurity threats that generative AI is creating, from vulnerabilities in AI software to the risks involved in “vibe coding.”..."

"Traditional incident response models were never built with cloud-native architectures in mind. They often rely on retrofitted tools and processes that can’t keep pace with how fast modern environments move...."

"The newly emerged worm has spread across hundreds of open source software packages, stealing credentials and infecting other components without much direct attacker input...."

"The doom of cyberattacks is real at security and tech trade shows, where dark colors and actors dressed as hackers dominate the show floor. It’s high stakes, high stress all the time. ..."

"On today’s episode of Equity, Wiz co-founder and chief technologist Ami Luttwak joined Rebecca Bellan to discuss how AI is fundamentally reshaping cybersecurity threats, from supply chain attacks that leverage vibe coding to hackers targeting the AI agents that developers rely on daily...."

"Yinon Costica, co-founder of Wiz, looks back on the company's incredible history and shares his outlook for the future...."

"Nx is the latest target of a software supply chain attack in the NPM ecosystem, with multiple malicious versions being uploaded to the NPM registry on Tuesday evening...."

"As more organizations integrate vibe coding and AI-assisted coding into their application development processes, it's important to remember to put security first...."

"Experts say agentic AI will rapidly change cybersecurity, freeing up talent to focus on more dynamic work. But with AI agents still in their infancy, they also urge CISOs to ask a lot of questions before committing to this new security paradigm...."

"According to a post-incident evaluation by Wiz researchers, the Nx compromise has resulted in the exposure of 2,180 accounts and 7,200 repositories across three distinct phases...."

"Security researchers have lifted the lid on a chain of high-severity vulnerabilities that could lead to remote code execution (RCE) on Nvidia's Triton Inference Server...."

"Ami Luttwak helped build Wiz through a pandemic and a new tech paradigm. He tells Business Insider why the rise of AI demands new security approaches...."

"As chief technology officer of one of the fastest-growing software startups ever, Ami Luttwak has spent a lot of time and effort ensuring Wiz’s user interface was just right. But the Wiz co-founder now says he imagines a future, maybe a year or two from now, where that interface has been made largely irrelevant by AI...."

"The rise of "vibe coding" platforms that enable developers to build software with minimal traditional coding could create a slew of new security risks for organizations...."

"Because A.I. is so quick on offense, a mere human can’t play good defense anymore. “They’re going to be outnumbered 1,000 to 1,” said Ami Luttwak, co-founder of the cybersecurity company Wiz...."

"A critical NVIDIA Container Toolkit vulnerability could be exploited using a three-line Dockerfile, Wiz revealed...."

"A deep dive into Raaz Herzberg’s unconventional journey from product manager to CMO at $32B cybersecurity leader Wiz. ..."

"When Google first attempted to acquire cloud security wunderkind Wiz last summer for $23 billion, the company’s leadership had a surprising response: We’re flattered, but no thanks...."

"Attackers exploit exposed Nomad, Docker, and Gitea instances to deploy XMRig miners within minutes, draining cloud resources and evading detection...."

" The "ongoing exploitation" of two Ivanti bugs has now extended beyond on-premises environments and hit customers' cloud instances, according to security shop Wiz...."

"Wiz's Ami Luttwak joins ISMG to discuss managing the 'speed of AI' trade-off in security control...."

"Raaz Herzberg, Wiz VP of product strategy and chief marketing officer, discusses the strategy behind Google’s purchase and why the company plans to offer services to multiple cloud providers. ..."

"A series of newly discovered critical vulnerabilities can easily enable “full takeover” of certain Kubernetes clusters and may represent the most serious security issue to affect Kubernetes environments in recent years...."

"Google agreed to buy Wiz, the fast-growing cybersecurity start-up, for $32 billion in the company’s biggest push to strengthen its cloud-computing business and expand beyond the search engine and consumer internet services that made it a household deal...."

"Researchers from the cloud security firm Wiz published findings on Wednesday that show that DeepSeek left one of its critical databases exposed on the internet, leaking system logs, user prompt submissions, and even users’ API authentication tokens—totaling more than 1 million records—to anyone who came across the database...."

"Threat actors are exploiting a critical-severity remote code execution (RCE) vulnerability in Aviatrix Controller to deploy malware, cybersecurity firm Wiz reports...."

"Fazal Merchant, a former finance chief of DreamWorks, came out of retirement to join Wiz...."