The Wave

1. 5h agoWiz ResearchWhat is APT29? | WizWiz publishes an explainer profiling APT29, the Russian SVR-attributed cyber espionage group, covering its aliases, notable campaigns, and tradecraft.1 outletCyber1 linked
2. 5h agoWiz ResearchWhat is a Zero-Day Vulnerability? Risk, Examples & Defense | WizWiz Research publishes an explainer defining zero-day vulnerabilities, outlining attack stages, exploit markets, notable incidents, and defensive playbooks.1 outletCyber5 linked
3. 4d agoTechTarget · research by WizScan for Good: Free AI security tool finds nearly 500 critical flawsWiz's free Scan for Good initiative, built with Google DeepMind and CISA, has surfaced more than 475 high and critical exposures across public sector, healthcare and open-source environments.

   15 articles · 2 outlets

   1. 5d agoWiz ResearchPickupTowards a better cloud vulnerability response model | Wiz Blog
   2. 4d agoTechTargetPickupScan for Good: Free AI security tool finds nearly 500 critical flaws
   3. 4d agoWiz ResearchSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz Blog
   4. 2d agoWiz ResearchPickupClaude Mythos and Cybersecurity: What Actually Changes? | Wiz
   5. 2d agoWiz ResearchPickupSoftware Supply Chain Security: Key Risks and Best Defenses | Wiz
   6. 5h agoWiz Research“Black October” for AI Developer Platforms | Wiz Blog
   7. 5h agoWiz ResearchPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
   8. 5h agoWiz ResearchGitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
   9. 5h agoWiz ResearchGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz Blog
   10. 5h agoWiz ResearchScan for Good: Finding Critical Exposures with AI | Wiz Blog
   11. 5h agoWiz ResearchHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz Blog
   12. 5h agoWiz ResearchScan for Good: AIを活用した重大な露出の特定 | Wiz ブログ
   13. 5h agoWiz ResearchArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 | Wiz Blog
   14. 5h agoWiz ResearchBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz Blog
   15. 5h agoWiz ResearchPickupA U.S. Navy Cloud Broker enhances cloud security with Wiz | Wiz

   CyberAI169 linked
4. 5d agoWiz ResearchThe SolarWinds Attack | Wiz BlogWiz publishes a running cloud-focused guidance blog on the SolarWinds supply-chain attack, detailing hybrid on-prem-to-cloud attack vectors and detection steps for cloud security teams.1 outletCyber14 linked
5. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz BlogWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.

   10 articles

   1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
   2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
   3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
   4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
   5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
   6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
   7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
   8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
   9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
   10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz

   Cyber161 linked
6. 5d agoWiz ResearchStorm-0558 Update: Takeaways from Microsoft's recent report | Wiz BlogWiz Research analyzes Microsoft's September 2023 follow-up report on the Storm-0558 breach, drawing out takeaways on how the MSA signing key was likely stolen and what remains unanswered.1 outletCyber27 linked
7. 5d agoWiz ResearchCompromised Microsoft Key: More Impactful Than We Thought | Wiz BlogWiz Research finds the compromised Microsoft MSA signing key could forge tokens for far more Azure AD applications than Microsoft disclosed, and that forged tokens are hard for customers to detect.1 outletCyber33 linked
8. 5d agoWiz ResearchNSA top 10 cloud security strategies: key takeaways | Wiz BlogWiz Research summarizes the NSA and CISA joint "top ten" cloud security mitigation strategies, which cover shared responsibility, identity, key management, data, CI/CD and logging, and places them alongside a CSRB cloud security review and a CISA report on Russian intelligence cloud adaptation.1 outletCyber4 linked
9. 5d agoWiz ResearchCVE-2022-27518 exploited in the wild by APT5: everything you need to know | Wiz BlogWiz Research explains that NSA and Citrix report China-linked APT5 is exploiting the CVE-2022-27518 Citrix ADC/Gateway flaw, lists affected versions and fixes, and points customers to NSA hunting guidance.1 outletCyber3 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.