Wiz researchers, assisted by the company's AI vulnerability researcher Atlas, discovered a single credential named the Cosmos Master Key that could unlock every database on Microsoft's Azure Cosmos DB…
Wiz researchers discovered CosmosEscape, a flaw in Azure Cosmos DB's Gremlin API that exposed a platform-wide master key granting read-write access to every Cosmos DB account, including network-isolat…
Wiz, Microsoft, Bugcrowd, Nebula Security, and Aikido all announced AI systems that find real software vulnerabilities, but benchmarks like CyberGym measure known-bug reproduction, not real-world disc…
Wiz's Project Atlas, a vulnerability research system using specialized AI agents, scored 90.9% on the CyberGym benchmark, surpassing published results from Anthropic, OpenAI and Microsoft, according t…
Iaroslav Belkin, founder of Belkin Marketing, lost $4,000 on a Google bill after a team member enabled Gemini API access on a project with a public API key, which was exploited by automated scanners. …
Google is rolling out enterprise access to CodeMender, a DeepMind AI agent for automatically hunting and patching software vulnerabilities, now available in preview via the Gemini Enterprise Agent Pla…
Microsoft's July Patch Tuesday set a record with 570 CVEs, including two zero-days under active exploitation. Meanwhile, security researchers published GhostApproval and Friendly Fire, revealing that …
Anthropic's automated chatbot dismissed a security vulnerability report from Wiz researchers, claiming the issue fell outside Claude Code's threat model, even though Anthropic had already patched the …
Google Cloud COO Francis deSouza announced that AI-powered defenders now have a decisive advantage over attackers by leveraging deep enterprise context, citing the first known AI-built zero-day exploi…
Wiz CEO Assaf Rappaport has quietly assembled a 19-company portfolio focused on AI and cybersecurity since closing the $32 billion sale of Wiz to Google Cloud, completing at least 10 investments in th…
Legacy codebases encode organizational history in formats that AI agents cannot safely interpret, leading to architectural hallucinations when agents apply public-code patterns to enterprise systems. …
Cybersecurity firm Wiz discovered GhostApproval, a vulnerability affecting six major AI coding assistants including Amazon Q Developer, Anthropic Claude Code, and Cursor, that allows attackers to esca…
Security firm Wiz discovered a flaw called GhostApproval in six popular AI coding assistants—Amazon Q Developer, Anthropic's Claude Code, Augment, Cursor, Google Antigravity, and Windsurf—that allows …
Security firm Wiz discovered a vulnerability named GhostApproval in six AI coding assistants, including Amazon Q Developer and Google Antigravity, that allows attackers to trick agents into accessing …
Google announced the first 33 startups selected for its Gemini Startup Forum: Cybersecurity program, which focuses on AI-native cybersecurity solutions. The cohort includes companies like Capsule Secu…
Google Threat Intelligence and Wiz Attack Surface Management have begun integration to help organizations prioritize security risks by matching real-world exposures with real-time adversary activity. …
Moltbook exposed 1.5 million API authentication tokens in a January security breach due to a misconfigured Supabase backend, according to security firm Wiz. The breach, which also leaked 35,000 email …
1Password acquired Israeli startup Apono for $250M-$300M to govern what AI agents and humans can do inside enterprise systems. Apono's platform grants just-in-time, intent-based access and automatical…
Over 100 Stanford graduates walked out during Google CEO Sundar Pichai's commencement speech on Sunday, protesting Google's Project Nimbus contract with Israel. The protesters blew whistles, waved Pal…
Nvidia and Google are negotiating with Israeli tax authorities to pay corporate taxes in US dollars rather than shekels, following a 20% surge in the Israeli currency against the dollar over the past …