A developer released Plexavo, an open-source AWS cloud security scanner designed for solo developers and founders. The tool scans IAM, S3, EC2, and networking for misconfigurations and privilege escal…
An engineer at Softjourn nearly installed a malicious package recommended by an AI agent, but company policy requiring verification on GitHub prevented the installation. Separately, security researche…
Security researchers at Wiz found that S3-compatible object storage services from Nebius, Crusoe, Vultr, Lambda Labs, Cloudflare R2, and DigitalOcean lack many of Amazon S3's security protections, inc…
In June 2026, two AI agents demonstrated a machine-vs-machine supply chain attack on Snowflake: GitHub Copilot Autofix co-authored a commit that removed input sanitization from a shell block, and an a…
Wiz Research disclosed that its autonomous Red Agent found, exploited, and assessed the blast radius of a GitHub Actions injection in Snowflake's snowflake-connector-net repository within five days of…
Anthropic's August 2026 Risk Report raises its risk ratings for misalignment and non-novel bioweapons from 'very low' to 'low,' and reveals that a bioweapon safeguard was disabled for 11 months, affec…
Wiz's autonomous AI security agent Red Agent identified and exploited a critical vulnerability in Snowflake's GitHub Actions pipeline that GitHub Copilot had reviewed without flagging, gaining access …
Yossi Cohen, former director of Israel's Mossad intelligence agency, has been appointed strategic advisor at SoftBank, moving closer to founder Masayoshi Son with a mandate spanning AI, semiconductors…
Wiz, a cloud security company, announced the winners of its 2026 Partner Alliance Awards, recognizing partners and integrators for contributions to cloud security, AI risk management, and SOC moderniz…
Wiz's autonomous AI agent Red Agent discovered and exploited a GitHub Actions script injection vulnerability in Snowflake's CI/CD pipeline, exfiltrating internal Jira access credentials just five days…
Wiz, a cloud security company, reported that its AI agent discovered and exploited a GitHub Actions vulnerability to gain access to Snowflake's internal environment, a task that GitHub Copilot had mis…
Wiz disclosed on August 17 that its autonomous Red Agent exploited a GitHub Copilot Autofix-introduced shell injection vulnerability in Snowflake's public snowflake-connector-net repository, exfiltrat…
Wiz reported that GitHub Copilot Autofix introduced a script injection flaw in a Snowflake workflow, which Wiz's Red Agent exploited during authorized research. The vulnerable code entered Snowflake's…
Wiz's AI-powered red agent autonomously discovered and exploited a script injection vulnerability in Snowflake's snowflake-connector-net GitHub Actions workflow on June 23, extracting Jira credentials…
A 2026 arXiv audit of real-world Java workflows found only 4% compliance with least-privilege permission controls, and model-generated GitHub Actions workflows often inherit over-permissive habits fro…
Wiz announced closed-loop remediation capabilities to address AI-accelerated threats, including the Red Agent for validated risk discovery and the Green Agent for remediation guidance, with Remediatio…
OpenAI has appointed Dali Rajic, former president and COO of Wiz, as its new chief revenue officer to lead enterprise and cybersecurity initiatives. Rajic's experience at Wiz, which Google acquired fo…
OpenAI revenue chief Denise Dresser announced her departure on Thursday, joining a wave of senior leaders who have left the company since January 2024. PitchBook data shows 25 executives have departed…
Aikido Security's 2026 State of AI in Security and Development report found that 90% of organizations using 6-8 security tools experienced an incident, compared with 64% of those using 1-2 tools, and …
Wiz, a cloud security company, argues that AI is expanding the scope of data security, requiring organizations to understand not just where sensitive data is, but also how AI agents, models, and ident…