Wiz Research

Git Push to Root: AI-Augmented Research Uncovers Critical GitHub RCE (CVE-2026-3854)

• Vulnerability Report

Git Push to Root: AI-Augmented Research Uncovers Critical GitHub RCE (CVE-2026-3854)

Do Son April 28, 2026 0

Wiz Research has unveiled a critical security flaw (CVE-2026-3854) within GitHub’s internal git infrastructure. The vulnerability, remarkably...

Read More Read more about Git Push to Root: AI-Augmented Research Uncovers Critical GitHub RCE (CVE-2026-3854)

The Invisible Backdoor: AI Exposes Malicious OAuth Apps Hiding in Microsoft Entra ID

• Cybercriminals

The Invisible Backdoor: AI Exposes Malicious OAuth Apps Hiding in Microsoft Entra ID

Do Son February 23, 2026 0

The integration of third-party applications into corporate environments has become the lifeblood of modern productivity, but it...

Read More Read more about The Invisible Backdoor: AI Exposes Malicious OAuth Apps Hiding in Microsoft Entra ID

The “Vibe Coding” Disaster: How a Simple Bug Exposed 4.75 Million Records on the AI Social Network Moltbook

• Data Leak

The “Vibe Coding” Disaster: How a Simple Bug Exposed 4.75 Million Records on the AI Social Network Moltbook

Do Son February 3, 2026 0

If you are a devotee of artificial intelligence and a frequent denizen of X/Twitter or Reddit, you...

Read More Read more about The “Vibe Coding” Disaster: How a Simple Bug Exposed 4.75 Million Records on the AI Social Network Moltbook

CodeBreach: Missing Regex Anchors Exposed AWS Console to Takeover

• Vulnerability Report

CodeBreach: Missing Regex Anchors Exposed AWS Console to Takeover

Do Son January 17, 2026 0

A seemingly minor misconfiguration in a regular expression could have allowed attackers to seize control of critical...

Read More Read more about CodeBreach: Missing Regex Anchors Exposed AWS Console to Takeover

CISA “Must-Patch” Alert: Critical Gogs Exploit CVE-2025-8110 Active in Wild

• Vulnerability Report

CISA “Must-Patch” Alert: Critical Gogs Exploit CVE-2025-8110 Active in Wild

Do Son January 13, 2026 0

The Cybersecurity and Infrastructure Security Agency (CISA) has added a dangerous new entry to its “Must-Patch” list,...

Read More Read more about CISA “Must-Patch” Alert: Critical Gogs Exploit CVE-2025-8110 Active in Wild

Critical Triton Flaws (CVSS 9.8) Expose AI Servers to Remote Takeover – Patch Now!

• Vulnerability Report

Critical Triton Flaws (CVSS 9.8) Expose AI Servers to Remote Takeover – Patch Now!

Do Son August 5, 2025 0

NVIDIA has released urgent software updates to address a set of critical vulnerabilities discovered in its popular...

Read More Read more about Critical Triton Flaws (CVSS 9.8) Expose AI Servers to Remote Takeover – Patch Now!

Critical Flaw in Wix’s New AI Platform Base44 Allowed Unauthorized Access to Private Enterprise Apps

• Vulnerability Report

Critical Flaw in Wix’s New AI Platform Base44 Allowed Unauthorized Access to Private Enterprise Apps

Do Son July 30, 2025 0

In a significant finding that highlights the risks associated with emerging AI development platforms, Wiz Research has...

Read More Read more about Critical Flaw in Wix’s New AI Platform Base44 Allowed Unauthorized Access to Private Enterprise Apps

Soco404: New Stealthy Cryptojacking Campaign Exploits Cloud Misconfigurations and PostgreSQL to Mine Crypto

• Malware

Soco404: New Stealthy Cryptojacking Campaign Exploits Cloud Misconfigurations and PostgreSQL to Mine Crypto

Do Son July 25, 2025 0

Wiz Research has uncovered a persistent and evolving cryptojacking operation known as “Soco404,” a campaign that exploits...

Read More Read more about Soco404: New Stealthy Cryptojacking Campaign Exploits Cloud Misconfigurations and PostgreSQL to Mine Crypto