Search: “Wiz Research”

136 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 105 Exploit / PoC 52 Malware 26 Data breach 25 Ransomware 23 Threat actor 14 Industry 9 AI safety & security 5 Research 4 AI industry 2 Advisory 2 Phishing & fraud 2 Policy & legal 2 Tools 2

SeverityAll critical 139 high 76 medium 35 low 10 info 14

Wiz researchers find sensitive DeepSeek data exposed to internet

CyberScoopJan 30, 17:41 UTC · Jan 30, 2025Ransomware in the wild

60

Wiz Discovers Flaws in GenAI Models Enabling Customer Data Theft

Infosecurity MagazineApr 5, 13:15 UTC · Apr 5, 2024Vulnerability

55

Microsoft fixed Azure AD bug that led to Bing.com results manipulation and account takeover

Security AffairsApr 3, 11:32 UTC · Apr 3, 2023Exploit / PoC in the wild1

60

Redis patches critical "RediShell" RCE vulnerability, update ASAP! (CVE-2025-49844)

Help Net SecurityOct 7, 00:00 UTC · Oct 7, 2025Vulnerability in the wildCVE-2025-49844

60

Massive supply-chain attack compromises 440 packages under four hours

CyberScoopAug 4, 22:07 UTC · Aug 4, 2026Exploit / PoC

60

Critical Vulnerabilities Found in NVIDIA's Triton Inference Server

Infosecurity MagazineAug 5, 15:45 UTC · Aug 5, 2025Vulnerability CVE-2025-23319 CVE-2025-23320 CVE-2025-23334+1 CVEs

60

Microsoft Azure vulnerability exposed thousands of cloud databases

CyberScoopAug 27, 13:15 UTC · Aug 27, 2021Vulnerability

55

Microsoft AI researchers exposed sensitive signing keys, internal messages

CyberScoopSep 18, 18:55 UTC · Sep 18, 2023Data breach in the wild

60

ChaosDB, a Critical Cosmos DB flaw affected thousands of Microsoft Azure Customers

Security AffairsAug 27, 17:36 UTC · Aug 27, 2021Exploit / PoC

60

Critical Cosmos Database Flaw Affected Thousands of Microsoft Azure Customers

The Hacker NewsAug 27, 07:59 UTC · Aug 27, 2021Vulnerability

55

Critical NVIDIA Container Toolkit flaw could allow access to the underlying host

Security AffairsSep 30, 08:15 UTC · Sep 30, 2024Vulnerability CVE-2024-0132

60

Ingress-nginx vulnerabilities can lead to Kubernetes cluster takeover

Help Net SecurityMar 25, 00:00 UTC · Mar 25, 2025Vulnerability CVE-2025-1097 CVE-2025-1098 CVE-2025-24514+2 CVEs

60

AttachMe: a critical flaw affects Oracle Cloud Infrastructure (OCI)

Security AffairsSep 22, 21:10 UTC · Sep 22, 2022Vulnerability

55

A flaw in Microsoft Azure App Service exposes customer source code

Security AffairsDec 23, 05:36 UTC · Dec 23, 2021Exploit / PoC in the wild1

60

CVE-2026-3854 GitHub flaw enables remote code execution

Security AffairsApr 28, 20:44 UTC · Apr 28, 2026Vulnerability CVE-2026-3854

60

65% of Leading AI Companies Found With Verified Secrets Leaks

Infosecurity MagazineNov 10, 16:45 UTC · Nov 10, 2025Vulnerability

55

String of defects in popular Kubernetes component puts 40% of cloud environments at risk

CyberScoopMar 26, 22:39 UTC · Mar 26, 2025Exploit / PoC in the wildCVE-2025-1974 CVE-2025-1097 CVE-2025-1098+2 CVEs

60

CodeBuild Flaw Put AWS Console Supply Chain At Risk

Infosecurity MagazineJan 15, 15:00 UTC · Jan 15, 2026Vulnerability in the wild1

60

Chaining NVIDIA's Triton Server flaws exposes AI systems to remote takeover

Security AffairsAug 5, 07:35 UTC · Aug 5, 2025Vulnerability CVE-2025-23319 CVE-2025-23320 CVE-2025-23334

60

NVIDIA Container Toolkit Vulnerability Exposes AI Systems to Risk

Infosecurity MagazineSep 30, 17:15 UTC · Sep 30, 2024Vulnerability CVE-2024-0132

60

Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners

The Hacker NewsJan 17, 04:05 UTC · Jan 17, 2025Vulnerability in the wildCVE-2024-50603

60

DHS urges Microsoft customers to update Azure to avoid security flaw

CyberScoopAug 31, 12:16 UTC · Aug 31, 2021Ransomware in the wild

60

Chinese cyber spies are using Ivanti EPMM flaws to breach EU, US organizations

Help Net SecurityMay 23, 00:00 UTC · May 23, 2025Exploit / PoC in the wildCVE-2025-4427 CVE-2025-4428

60

Critical Gogs zero

Security AffairsDec 11, 21:30 UTC · Dec 11, 2025Exploit / PoC CVE-2025-8110

60

Developers scramble as critical React flaw threatens major apps

CyberScoopDec 3, 19:23 UTC · Dec 3, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-66478

60

Attacks pinned to critical React2Shell defect surge, surpass 50 confirmed victims

CyberScoopDec 11, 17:17 UTC · Dec 11, 2025Ransomware in the wildCVE-2025-55182

60

Researchers Disclose Critical Vulnerability in Oracle Cloud Infrastructure

The Hacker NewsSep 22, 10:43 UTC · Sep 22, 2022Vulnerability

55

Microsoft fixes OMIGOD bugs in secret Azure app

The RecordDec 13, 00:00 UTC · Dec 13, 2022Vulnerability CVE-2021-38647 CVE-2021-38648 CVE-2021-38645+1 CVEs

60

Critical NVIDIA Container Toolkit Flaw Allows Privilege Escalation on AI Cloud Services

The Hacker NewsJul 21, 06:29 UTC · Jul 21, 2025Vulnerability CVE-2025-23266 CVE-2024-0132 CVE-2025-233591

60

Experts disclosed 2 critical flaws in Alibaba cloud database services

Security AffairsApr 20, 16:02 UTC · Apr 20, 2023Exploit / PoC

60

Ivanti Patches EPMM Vulnerabilities Exploited for Remote Code Execution in Limited Attacks

The Hacker NewsMay 21, 06:53 UTC · May 21, 2025Vulnerability in the wildCVE-2025-4427 CVE-2025-4428 CVE-2025-22462

60

CISA urges enterprises to fix Microsoft Azure Cosmos DB flaw

Security AffairsAug 30, 13:11 UTC · Aug 30, 2021Vulnerability

55

Microsoft Azure flaws could allow to access PostgreSQL DBs of other customers

Security AffairsApr 30, 21:05 UTC · Apr 30, 2022Vulnerability

55

Threat actors exploit Aviatrix Controller flaw to deploy backdoors and cryptocurrency miners

Security AffairsJan 14, 10:24 UTC · Jan 14, 2025Malware in the wildCVE-2024-50603

60

U.S. CISA adds Aviatrix Controllers vulnerability to its Known Exploited Vulnerabilities catalog

Security AffairsJan 17, 14:40 UTC · Jan 17, 2025Exploit / PoC in the wildCVE-2024-50603

60

Attackers hit React defect as researchers quibble over proof

CyberScoopDec 6, 17:14 UTC · Dec 6, 2025Ransomware in the wildCVE-2025-55182 CVE-2025-66478

60

AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain Attacks

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2026Exploit / PoC in the wild

60

DeepSeek database exposed highly sensitive information

Security AffairsJan 30, 23:00 UTC · Jan 30, 2025Research

55

AI Company Hugging Face Detects Unauthorized Access to Its Spaces Platform

The Hacker NewsJun 1, 07:55 UTC · Jun 1, 2024Data breach

60

Wiz releases PEACH framework for cloud applications

Help Net SecurityJan 11, 12:12 UTC · Jan 11, 2024Vulnerability

55