← Back to the boardNews
The Infostealer Incursion: Cloud, Code & AI Breaches | Wiz Blog
Why it’s here: Specialist cybersecurity threat research on infostealer-driven compromise of cloud, code, and AI credentials bears directly on federal cyber policy and on AI and cloud firms' standing in DC, so it is relevant despite having no explicit policy hook.
Trace across the boardItem
4h agoWiz Research · research by NordStellarThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz BlogWiz Research maps the cloud, code and AI secrets that infostealer malware harvests from developer endpoints and details how attackers turn them into cloud access, using NordStellar telemetry to rank stealer families and secret types.1 outletCyber18 linked
Connected
18 links- NewsTowards a better cloud vulnerability response model | Wiz BlogBoth involve Microsoft, Wiz, Azure
- NewsHackers compromise 4,800 GitHub accounts to steal cloud credentialsBoth involve GitHub, Azure, Amazon Web Services
- NewsHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz BlogBoth involve Wiz, GitHub, Amazon Web Services
- NewsThousands of GitHub repos hit with secret-stealing malwareBoth involve GitHub, Azure, Amazon Web Services
- NewsIntroducing Atlas: Wiz's AI vulnerability researcher | Wiz BlogBoth involve Wiz, GitHub, Google Cloud Platform
- NewsThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz BlogBoth involve Wiz, Google Cloud Platform
- NewsOperation Stormbreaker case study | WizBoth involve Wiz, Amazon Web Services
- NewsQubole supply chain attack exposed AWS, Entra ID, and Okta credentialsBoth involve Wiz, Amazon Web Services
- NewsHunting for signs of persistence in the cloud: an IR guide following the CircleCI incident | Wiz BlogBoth involve Azure, Amazon Web Services
- NewsHacking GitHub with a Semicolon & Claude with Sagi Tzadik | WizBoth involve Wiz, GitHub
- NewsAI Coding Agents Leak Thousands of Secrets to GitHubBoth involve Claude Code, GitHub
- NewsHow to Evaluate AI Agent Cybersecurity Capabilities | Wiz BlogBoth involve Claude Code, Wiz
- NewsGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz BlogBoth involve Wiz, GitHub
- NewsMicrosoft CISO urges Artex regulation, but experts say it won’t workBoth involve Microsoft, Wiz, GitHub
- NewsCursor confirms security breach led to malicious Claude Code extensionBoth involve Claude Code, Wiz
- NewsBuilding an AI Detection Engine for Agent Intent | Wiz BlogBoth involve OpenAI, Wiz
- NewsU.S. elections readinessBoth involve Amazon Web Services, Google Cloud Platform
- NewsWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz BlogBoth involve Microsoft, Wiz
About
- OpenAI
- Microsoft
- Claude Code
- Wiz
- GitHub
- Azure
- Amazon Web Services
- Google Cloud Platform