🐶 WE ACTUALLY DID IT. We built a Magical Dog Bus. 🚌
Meet the real security pack behind the magic at Wiz.
Every morning, they hop on the bus, roll into work, and protect everything you run, build & fetch. 🐾
Happy Dog Day from Wiz and our very best threat sniffers. 💙
Meet the real security pack behind the magic at Wiz.
Every morning, they hop on the bus, roll into work, and protect everything you run, build & fetch. 🐾
Happy Dog Day from Wiz and our very best threat sniffers. 💙
August 25, 2026 at 12:20 PM
🐶 WE ACTUALLY DID IT. We built a Magical Dog Bus. 🚌
Meet the real security pack behind the magic at Wiz.
Every morning, they hop on the bus, roll into work, and protect everything you run, build & fetch. 🐾
Happy Dog Day from Wiz and our very best threat sniffers. 💙
Meet the real security pack behind the magic at Wiz.
Every morning, they hop on the bus, roll into work, and protect everything you run, build & fetch. 🐾
Happy Dog Day from Wiz and our very best threat sniffers. 💙
🚨 BREAKING: Our AI Red Agent autonomously accessed Snowflake's Jira via a flaw written by GitHub's AI bot. Red Agent learned, exploited & extracted creds with 0 human help.
Kudos to Snowflake for swiftly addressing the issue 👏
Technical breakdown → wiz.io/blog/red-agent-snowflake-copilot-cicd-bug
Kudos to Snowflake for swiftly addressing the issue 👏
Technical breakdown → wiz.io/blog/red-agent-snowflake-copilot-cicd-bug
August 17, 2026 at 2:03 PM
🚨 BREAKING: Our AI Red Agent autonomously accessed Snowflake's Jira via a flaw written by GitHub's AI bot. Red Agent learned, exploited & extracted creds with 0 human help.
Kudos to Snowflake for swiftly addressing the issue 👏
Technical breakdown → wiz.io/blog/red-agent-snowflake-copilot-cicd-bug
Kudos to Snowflake for swiftly addressing the issue 👏
Technical breakdown → wiz.io/blog/red-agent-snowflake-copilot-cicd-bug
🚨 CosmosEscape: We found a single key that unlocked every database in Azure CosmosDB
One key >> Platform-wide impact.
Microsoft fully remediated the issue. ✅
Read the full research and see how Wiz uncovered CosmosEscape: www.wiz.io/blog/cosmose...
One key >> Platform-wide impact.
Microsoft fully remediated the issue. ✅
Read the full research and see how Wiz uncovered CosmosEscape: www.wiz.io/blog/cosmose...
July 30, 2026 at 12:01 PM
🚨 CosmosEscape: We found a single key that unlocked every database in Azure CosmosDB
One key >> Platform-wide impact.
Microsoft fully remediated the issue. ✅
Read the full research and see how Wiz uncovered CosmosEscape: www.wiz.io/blog/cosmose...
One key >> Platform-wide impact.
Microsoft fully remediated the issue. ✅
Read the full research and see how Wiz uncovered CosmosEscape: www.wiz.io/blog/cosmose...
🚨 Wiz Red Agent is GA!
AI-powered continuous pentesting that finds what traditional scanners miss: logic flaws, hidden APIs, auth bypasses & exploitable risks.
10K+ critical risks found in preview 🔥
wiz.io/blog/wiz-red...
AI-powered continuous pentesting that finds what traditional scanners miss: logic flaws, hidden APIs, auth bypasses & exploitable risks.
10K+ critical risks found in preview 🔥
wiz.io/blog/wiz-red...
July 29, 2026 at 12:54 PM
🚨 Wiz Red Agent is GA!
AI-powered continuous pentesting that finds what traditional scanners miss: logic flaws, hidden APIs, auth bypasses & exploitable risks.
10K+ critical risks found in preview 🔥
wiz.io/blog/wiz-red...
AI-powered continuous pentesting that finds what traditional scanners miss: logic flaws, hidden APIs, auth bypasses & exploitable risks.
10K+ critical risks found in preview 🔥
wiz.io/blog/wiz-red...
🧠 Meet Atlas: our AI vulnerability researcher. It found 200+ previously unknown vulnerabilities, ranked #1 on CyberGym (90.9%), and is helping power Wiz Code with continuous AI-powered security. 🏆
www.wiz.io/blog/atlas-a...
www.wiz.io/blog/atlas-a...
July 27, 2026 at 3:38 PM
🧠 Meet Atlas: our AI vulnerability researcher. It found 200+ previously unknown vulnerabilities, ranked #1 on CyberGym (90.9%), and is helping power Wiz Code with continuous AI-powered security. 🏆
www.wiz.io/blog/atlas-a...
www.wiz.io/blog/atlas-a...
🚨 SDLC Security '26 report is here!
Wiz Research analyzed real dev envs, repos & prod telemetry on SDLC risk shifting upstream.
50% GH Actions
reuse risk clusters
86% macOS
AI amplifies risk
Full report ↓
www.wiz.io/reports/sdlc...
Wiz Research analyzed real dev envs, repos & prod telemetry on SDLC risk shifting upstream.
50% GH Actions
reuse risk clusters
86% macOS
AI amplifies risk
Full report ↓
www.wiz.io/reports/sdlc...
May 26, 2026 at 12:09 PM
🚨 SDLC Security '26 report is here!
Wiz Research analyzed real dev envs, repos & prod telemetry on SDLC risk shifting upstream.
50% GH Actions
reuse risk clusters
86% macOS
AI amplifies risk
Full report ↓
www.wiz.io/reports/sdlc...
Wiz Research analyzed real dev envs, repos & prod telemetry on SDLC risk shifting upstream.
50% GH Actions
reuse risk clusters
86% macOS
AI amplifies risk
Full report ↓
www.wiz.io/reports/sdlc...
The secret's out.🤫
Introducing THE ZERODAY.CLOUD COMMUNITY 👾
Inside:
• 0-day vulnerability deep dives from Xint, Moritz Sanft, Paul Gerste & more...
• Access to events & a network of world-class hackers
• CTFs with prizes
Join now :)
Introducing THE ZERODAY.CLOUD COMMUNITY 👾
Inside:
• 0-day vulnerability deep dives from Xint, Moritz Sanft, Paul Gerste & more...
• Access to events & a network of world-class hackers
• CTFs with prizes
Join now :)
May 4, 2026 at 11:44 AM
The secret's out.🤫
Introducing THE ZERODAY.CLOUD COMMUNITY 👾
Inside:
• 0-day vulnerability deep dives from Xint, Moritz Sanft, Paul Gerste & more...
• Access to events & a network of world-class hackers
• CTFs with prizes
Join now :)
Introducing THE ZERODAY.CLOUD COMMUNITY 👾
Inside:
• 0-day vulnerability deep dives from Xint, Moritz Sanft, Paul Gerste & more...
• Access to events & a network of world-class hackers
• CTFs with prizes
Join now :)
We responsibly disclosed the issue to GitHub, who deployed a fix on GitHub.com the same day (!) and released patches for all supported GHES versions.
GitHub Enterprise Server customers are strongly encouraged to update immediately.
GitHub Enterprise Server customers are strongly encouraged to update immediately.
April 28, 2026 at 3:39 PM
We responsibly disclosed the issue to GitHub, who deployed a fix on GitHub.com the same day (!) and released patches for all supported GHES versions.
GitHub Enterprise Server customers are strongly encouraged to update immediately.
GitHub Enterprise Server customers are strongly encouraged to update immediately.
🚨 BREAKING: Wiz Research discovered Remote Code Execution on GitHub.com with a single git push.
The flaw in @github.com allowed unauthorized access to millions of repositories belonging to other users and organizations 🤯
The flaw in @github.com allowed unauthorized access to millions of repositories belonging to other users and organizations 🤯
April 28, 2026 at 3:39 PM
🚨 BREAKING: Wiz Research discovered Remote Code Execution on GitHub.com with a single git push.
The flaw in @github.com allowed unauthorized access to millions of repositories belonging to other users and organizations 🤯
The flaw in @github.com allowed unauthorized access to millions of repositories belonging to other users and organizations 🤯
NEW CTF: AWS turned 20 🎉
So we built our monthly CTF challenge to celebrate: packed with challenges inspired by the last two decades of cloud ☁️
Oh, and… we made sure AI can't solve it 😅
So no prompts this time.
Ready to play?
www.cloudsecuritychampionship.com
So we built our monthly CTF challenge to celebrate: packed with challenges inspired by the last two decades of cloud ☁️
Oh, and… we made sure AI can't solve it 😅
So no prompts this time.
Ready to play?
www.cloudsecuritychampionship.com
March 30, 2026 at 3:34 PM
NEW CTF: AWS turned 20 🎉
So we built our monthly CTF challenge to celebrate: packed with challenges inspired by the last two decades of cloud ☁️
Oh, and… we made sure AI can't solve it 😅
So no prompts this time.
Ready to play?
www.cloudsecuritychampionship.com
So we built our monthly CTF challenge to celebrate: packed with challenges inspired by the last two decades of cloud ☁️
Oh, and… we made sure AI can't solve it 😅
So no prompts this time.
Ready to play?
www.cloudsecuritychampionship.com
🎉 IT'S OFFICIAL: wiz joins Google to secure the AI era.
This is a massive moment for our customers and our team.
Thank you to every customer, partner, and Wizard who made this moment possible 💙
We can't wait to share what's next.
wiz.io/blog/google-...
This is a massive moment for our customers and our team.
Thank you to every customer, partner, and Wizard who made this moment possible 💙
We can't wait to share what's next.
wiz.io/blog/google-...
March 11, 2026 at 12:54 PM
🎉 IT'S OFFICIAL: wiz joins Google to secure the AI era.
This is a massive moment for our customers and our team.
Thank you to every customer, partner, and Wizard who made this moment possible 💙
We can't wait to share what's next.
wiz.io/blog/google-...
This is a massive moment for our customers and our team.
Thank you to every customer, partner, and Wizard who made this moment possible 💙
We can't wait to share what's next.
wiz.io/blog/google-...
How good is AI at hacking? We built a benchmark to find out. 🧪
Introducing the Offensive AI Benchmark, the framework that tests AI agents on 250+ real-world offensive security challenges.
Check it out →
www.wiz.io/cyber-model-...
Introducing the Offensive AI Benchmark, the framework that tests AI agents on 250+ real-world offensive security challenges.
Check it out →
www.wiz.io/cyber-model-...
February 12, 2026 at 4:16 PM
How good is AI at hacking? We built a benchmark to find out. 🧪
Introducing the Offensive AI Benchmark, the framework that tests AI agents on 250+ real-world offensive security challenges.
Check it out →
www.wiz.io/cyber-model-...
Introducing the Offensive AI Benchmark, the framework that tests AI agents on 250+ real-world offensive security challenges.
Check it out →
www.wiz.io/cyber-model-...
🚨 CodeBreach: Wiz Research identified a critical repository-hijacking vulnerability that abused a CodeBuild Regex flaw to compromise core AWS GitHub repos, including a core lib running at the heart of the cloud's most critical interface - the #AWS Console.
January 15, 2026 at 3:05 PM
🚨 CodeBreach: Wiz Research identified a critical repository-hijacking vulnerability that abused a CodeBuild Regex flaw to compromise core AWS GitHub repos, including a core lib running at the heart of the cloud's most critical interface - the #AWS Console.
🧠 Just in time for a new year, a NEW CTF drop!
Think you know Terraform inside out? State of Affairs (challenge 7) might change your mind...
This challenge uncovers an overlooked #Terraform risk and proves IaC tools are part of your supply chain.
www.cloudsecuritychampionship.com/challenge/7
Think you know Terraform inside out? State of Affairs (challenge 7) might change your mind...
This challenge uncovers an overlooked #Terraform risk and proves IaC tools are part of your supply chain.
www.cloudsecuritychampionship.com/challenge/7
December 29, 2025 at 2:23 PM
🧠 Just in time for a new year, a NEW CTF drop!
Think you know Terraform inside out? State of Affairs (challenge 7) might change your mind...
This challenge uncovers an overlooked #Terraform risk and proves IaC tools are part of your supply chain.
www.cloudsecuritychampionship.com/challenge/7
Think you know Terraform inside out? State of Affairs (challenge 7) might change your mind...
This challenge uncovers an overlooked #Terraform risk and proves IaC tools are part of your supply chain.
www.cloudsecuritychampionship.com/challenge/7
Day 2 at zeroday.cloud, let’s roll. 👾
👀 Didn’t register? No panic.
Walk-ins are welcome for the onsite CTF and all the action happening on the floor.
Flags are hidden. Only the sharp survive.
👀 Didn’t register? No panic.
Walk-ins are welcome for the onsite CTF and all the action happening on the floor.
Flags are hidden. Only the sharp survive.
December 11, 2025 at 12:19 PM
Day 2 at zeroday.cloud, let’s roll. 👾
👀 Didn’t register? No panic.
Walk-ins are welcome for the onsite CTF and all the action happening on the floor.
Flags are hidden. Only the sharp survive.
👀 Didn’t register? No panic.
Walk-ins are welcome for the onsite CTF and all the action happening on the floor.
Flags are hidden. Only the sharp survive.
Day 1 of zeroday.cloud = PURE EXPLOIT ENERGY 👾
From crowd shots 👀 to researchers buried deep in terminals 💻
From first checks being claimed
To live container escapes blowing minds in real time.
See you tomorrow!
From crowd shots 👀 to researchers buried deep in terminals 💻
From first checks being claimed
To live container escapes blowing minds in real time.
See you tomorrow!
December 11, 2025 at 10:01 AM
Day 1 of zeroday.cloud = PURE EXPLOIT ENERGY 👾
From crowd shots 👀 to researchers buried deep in terminals 💻
From first checks being claimed
To live container escapes blowing minds in real time.
See you tomorrow!
From crowd shots 👀 to researchers buried deep in terminals 💻
From first checks being claimed
To live container escapes blowing minds in real time.
See you tomorrow!
Day 1 at zeroday.cloud didn’t come to play 😈
New vulns dropped in Grafana, Linux Kernel, 3 Redis, and 2 PostgreSQL - and every. single. one. worked 🤯
100% success rate for day one.
Let’s see what we find tomorrow 👀
New vulns dropped in Grafana, Linux Kernel, 3 Redis, and 2 PostgreSQL - and every. single. one. worked 🤯
100% success rate for day one.
Let’s see what we find tomorrow 👀
December 11, 2025 at 9:37 AM
Day 1 at zeroday.cloud didn’t come to play 😈
New vulns dropped in Grafana, Linux Kernel, 3 Redis, and 2 PostgreSQL - and every. single. one. worked 🤯
100% success rate for day one.
Let’s see what we find tomorrow 👀
New vulns dropped in Grafana, Linux Kernel, 3 Redis, and 2 PostgreSQL - and every. single. one. worked 🤯
100% success rate for day one.
Let’s see what we find tomorrow 👀
Zeroday.cloud 2025 kicks off TOMORROW! 💻
London, brace yourself -
IDEs open. Exploits cooking.
13 zero-days are on the line 💣
Don't miss it. Here's the schedule ahead ⬎
London, brace yourself -
IDEs open. Exploits cooking.
13 zero-days are on the line 💣
Don't miss it. Here's the schedule ahead ⬎
December 9, 2025 at 2:57 PM
Zeroday.cloud 2025 kicks off TOMORROW! 💻
London, brace yourself -
IDEs open. Exploits cooking.
13 zero-days are on the line 💣
Don't miss it. Here's the schedule ahead ⬎
London, brace yourself -
IDEs open. Exploits cooking.
13 zero-days are on the line 💣
Don't miss it. Here's the schedule ahead ⬎
🎧 Your age after React2Shell... 𝟴𝟴.
Cloud Security Wrapped 2025 is HERE ↓
Check out our exclusive insights from our Wiz Research team!
Spotify, are we doing it right? 🎵
Cloud Security Wrapped 2025 is HERE ↓
Check out our exclusive insights from our Wiz Research team!
Spotify, are we doing it right? 🎵
December 9, 2025 at 1:30 PM
🎧 Your age after React2Shell... 𝟴𝟴.
Cloud Security Wrapped 2025 is HERE ↓
Check out our exclusive insights from our Wiz Research team!
Spotify, are we doing it right? 🎵
Cloud Security Wrapped 2025 is HERE ↓
Check out our exclusive insights from our Wiz Research team!
Spotify, are we doing it right? 🎵
🚨 React2Shell (CVE‑2025‑55182) in‑the‑wild exploitation & deep‑dive analysis. Critical RCE across React 19, Next.js & all RSC frameworks. Patch now.
www.wiz.io/blog/nextjs-...
www.wiz.io/blog/nextjs-...
December 8, 2025 at 5:25 PM
🚨 React2Shell (CVE‑2025‑55182) in‑the‑wild exploitation & deep‑dive analysis. Critical RCE across React 19, Next.js & all RSC frameworks. Patch now.
www.wiz.io/blog/nextjs-...
www.wiz.io/blog/nextjs-...
🎉 This is not a dream 💤 OUR WizZZZ BOOTH IS NOW OPEN.
Behold the ULTIMATE cloud security booth!
Games, demos, swag, naps… and the coziest cloud security playground in history 🛏️
Come see why CISOs are finally sleeping through the night 😴
Behold the ULTIMATE cloud security booth!
Games, demos, swag, naps… and the coziest cloud security playground in history 🛏️
Come see why CISOs are finally sleeping through the night 😴
December 2, 2025 at 2:00 AM
🎉 This is not a dream 💤 OUR WizZZZ BOOTH IS NOW OPEN.
Behold the ULTIMATE cloud security booth!
Games, demos, swag, naps… and the coziest cloud security playground in history 🛏️
Come see why CISOs are finally sleeping through the night 😴
Behold the ULTIMATE cloud security booth!
Games, demos, swag, naps… and the coziest cloud security playground in history 🛏️
Come see why CISOs are finally sleeping through the night 😴
New CTF challenge ($20,000 IN PRIZES) 💥
We're running "Operation Cloudfall" - a live CTF during BlackHat & zeroday.cloud on December 10-11.
Get your free pass to the event today: zeroday.cloud/operation-cloudfall
See you in London 🇬🇧
We're running "Operation Cloudfall" - a live CTF during BlackHat & zeroday.cloud on December 10-11.
Get your free pass to the event today: zeroday.cloud/operation-cloudfall
See you in London 🇬🇧
November 6, 2025 at 5:55 PM
New CTF challenge ($20,000 IN PRIZES) 💥
We're running "Operation Cloudfall" - a live CTF during BlackHat & zeroday.cloud on December 10-11.
Get your free pass to the event today: zeroday.cloud/operation-cloudfall
See you in London 🇬🇧
We're running "Operation Cloudfall" - a live CTF during BlackHat & zeroday.cloud on December 10-11.
Get your free pass to the event today: zeroday.cloud/operation-cloudfall
See you in London 🇬🇧
🎃 Something spooky's brewing in the cloud...
Introducing a new CTF challenge - "Game of Pods" 🕸️
💀 Written by top Azure researcher & worth 30 points, it's our BIGGEST challenge yet!
Get your skills ready for zeroday.cloud: cloudsecuritychampionship.com
Introducing a new CTF challenge - "Game of Pods" 🕸️
💀 Written by top Azure researcher & worth 30 points, it's our BIGGEST challenge yet!
Get your skills ready for zeroday.cloud: cloudsecuritychampionship.com
October 27, 2025 at 1:41 PM
🎃 Something spooky's brewing in the cloud...
Introducing a new CTF challenge - "Game of Pods" 🕸️
💀 Written by top Azure researcher & worth 30 points, it's our BIGGEST challenge yet!
Get your skills ready for zeroday.cloud: cloudsecuritychampionship.com
Introducing a new CTF challenge - "Game of Pods" 🕸️
💀 Written by top Azure researcher & worth 30 points, it's our BIGGEST challenge yet!
Get your skills ready for zeroday.cloud: cloudsecuritychampionship.com
Need a partner to finish that exploit chain for ZERODAY.CLOUD?
We just launched our Research Collaboration Center at zeroday.cloud/collab to connect researchers, combine skills, and meet the deadline. 🤝
The clock is ticking... ⏱️
We just launched our Research Collaboration Center at zeroday.cloud/collab to connect researchers, combine skills, and meet the deadline. 🤝
The clock is ticking... ⏱️
October 23, 2025 at 4:00 PM
Need a partner to finish that exploit chain for ZERODAY.CLOUD?
We just launched our Research Collaboration Center at zeroday.cloud/collab to connect researchers, combine skills, and meet the deadline. 🤝
The clock is ticking... ⏱️
We just launched our Research Collaboration Center at zeroday.cloud/collab to connect researchers, combine skills, and meet the deadline. 🤝
The clock is ticking... ⏱️
Our biggest reminder yet. ZERODAY.CLOUD.
A first-of-its-kind, open-source cloud hacking competition.
Find vulnerabilities in the critical open-source software that powers the cloud, and compete for your share of a $4.5M prize pool.
➡️ www.zeroday.cloud
A first-of-its-kind, open-source cloud hacking competition.
Find vulnerabilities in the critical open-source software that powers the cloud, and compete for your share of a $4.5M prize pool.
➡️ www.zeroday.cloud
October 16, 2025 at 5:24 PM
Our biggest reminder yet. ZERODAY.CLOUD.
A first-of-its-kind, open-source cloud hacking competition.
Find vulnerabilities in the critical open-source software that powers the cloud, and compete for your share of a $4.5M prize pool.
➡️ www.zeroday.cloud
A first-of-its-kind, open-source cloud hacking competition.
Find vulnerabilities in the critical open-source software that powers the cloud, and compete for your share of a $4.5M prize pool.
➡️ www.zeroday.cloud