Cyber News

    Dashboard / Cyber News

    OMIGOD: Critical Vulnerabilities in OMI Affecting Countless Azure Customers
    Ni
    Nir Ohfeld-2021-09-14

    OMIGOD: Critical Vulnerabilities in OMI Affecting Countless Azure Customers

    Wiz Research recently found 4 critical vulnerabilities in OMI, which is one of Azure's most ubiquitous yet least known software agents and is deployed on a large portion of Linux VMs in Azure.
    “Secret” Agent Exposes Azure Customers To Unauthorized Code Execution
    Al
    Alon Schindel

    “Secret” Agent Exposes Azure Customers To Unauthorized Code Execution

    2021-09-14

    Wiz goes (even more) global
    As
    Assaf Rappaport

    Wiz goes (even more) global

    2021-09-14

    ChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them
    Al
    Alon Schindel

    ChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them

    2021-08-29

    ChaosDB: How we hacked thousands of Azure customers’ databases
    Sa
    Sagi Tzadik-2021-08-26

    ChaosDB: How we hacked thousands of Azure customers’ databases

    As part of building a market-leading CNAPP, Wiz Research is constantly looking for new attack surfaces in the cloud. Two weeks ago we discovered an unprecedented breach that affects Azure’s flagship database service, Cosmos DB.
    Is your organization leaking sensitive Dynamic DNS data? Here’s how to find out
    Am
    Ami Luttwak

    Is your organization leaking sensitive Dynamic DNS data? Here’s how to find out

    2021-08-06

    Black Hat 2021: How isolated is your AWS cloud environment?
    Am
    Ami Luttwak

    Black Hat 2021: How isolated is your AWS cloud environment?

    2021-08-04

    Black Hat 2021: DNS loophole makes nation-state level spying as easy as registering a domain
    Sh
    Shir Tamari

    Black Hat 2021: DNS loophole makes nation-state level spying as easy as registering a domain

    2021-08-04

    The 10 must-attend sessions at Black Hat 2021
    Be
    Benjamin Miller-2021-06-24

    The 10 must-attend sessions at Black Hat 2021

    The 10 must-attend sessions at Black Hat 2021
    Salesforce Ventures, Blackstone, and Aglaé Join Team Wiz!
    As
    Assaf Rappaport

    Salesforce Ventures, Blackstone, and Aglaé Join Team Wiz!

    2021-06-10

    New 451 Research report analyzes Wiz and the cloud security market
    Ad
    Adi Ravitz

    New 451 Research report analyzes Wiz and the cloud security market

    2021-05-24

    Wiz becomes fastest growing security startup ever with new $1.7B valuation
    As
    Assaf Rappaport

    Wiz becomes fastest growing security startup ever with new $1.7B valuation

    2021-03-22

    82% of companies unknowingly give 3rd parties access to all their cloud data
    Sh
    Shir Tamari-2021-02-02

    82% of companies unknowingly give 3rd parties access to all their cloud data

    Cloud identity permissions are complex. So complex that innocent looking permissions provided to 3rd party vendors can lead to unintended exposure of all of your data.
    Recent Linux sudo vulnerability affects a major percent of cloud workloads
    Am
    Ami Luttwak

    Recent Linux sudo vulnerability affects a major percent of cloud workloads

    2021-02-02

    The SolarWinds Attack
    Am
    Ami Luttwak

    The SolarWinds Attack

    2021-02-01

    Wiz comes out of stealth with $100M Series A funding to reinvent cloud security
    As
    Assaf Rappaport

    Wiz comes out of stealth with $100M Series A funding to reinvent cloud security

    2020-12-09

    CISA Advisory Highlights Red Team Findings to Help Organizations Assess Risk, Identify Threats and Enable Effective Incident Response
    CI
    CISA-17 days ago

    CISA Advisory Highlights Red Team Findings to Help Organizations Assess Risk, Identify Threats and Enable Effective Incident Response

    CISA Releases Foundational, Flexible Guidance to Help Federal Agencies Implement Effective Logging, Visibility and Operational Standards
    CI
    CISA

    CISA Releases Foundational, Flexible Guidance to Help Federal Agencies Implement Effective Logging, Visibility and Operational Standards

    22 days ago

    CISA Unveils New Cybersecurity Resources for K-12 Schools and Districts
    CI
    CISA

    CISA Unveils New Cybersecurity Resources for K-12 Schools and Districts

    30 days ago

    CISA, FBI and Partners Warn Organizations of Gunra Ransomware Actors Targeting Multiple Critical Infrastructure Sectors
    CI
    CISA

    CISA, FBI and Partners Warn Organizations of Gunra Ransomware Actors Targeting Multiple Critical Infrastructure Sectors

    2026-08-10

    CISA Guide Helps Federal Agencies Securely and Effectively Use Open Source Software
    CI
    CISA-2026-07-30

    CISA Guide Helps Federal Agencies Securely and Effectively Use Open Source Software

    CISA and Partners Unveil Updated Software Bill of Materials Resource That Improves Transparency, Security and Risk-Informed Decision Making
    CI
    CISA

    CISA and Partners Unveil Updated Software Bill of Materials Resource That Improves Transparency, Security and Risk-Informed Decision Making

    2026-07-29

    CISA Joins Australia and Others to Publish Guidance to Isolate Operational Technology and Enabling Systems in Critical Infrastructure
    CI
    CISA

    CISA Joins Australia and Others to Publish Guidance to Isolate Operational Technology and Enabling Systems in Critical Infrastructure

    2026-07-28

    CISA, NSA, FBI and Partners Warn Zimbra Collaboration Suite Users of Ongoing Russian State-Supported Malicious Threat Activity
    CI
    CISA

    CISA, NSA, FBI and Partners Warn Zimbra Collaboration Suite Users of Ongoing Russian State-Supported Malicious Threat Activity

    2026-07-23

    CISA, FBI, EPA and U.S. Government Partners Update Warning of Iran-Affiliated Threat Actors Targeting Critical Infrastructure Programmable Logic Controllers
    CI
    CISA-2026-07-22

    CISA, FBI, EPA and U.S. Government Partners Update Warning of Iran-Affiliated Threat Actors Targeting Critical Infrastructure Programmable Logic Controllers

    CISA and Partners Publish Guidance to Help Software Manufacturers and Online Service Providers Work With Security Researchers
    CI
    CISA

    CISA and Partners Publish Guidance to Help Software Manufacturers and Online Service Providers Work With Security Researchers

    2026-07-15

    The story behind the intelligence
    Ha
    Hazel Burton

    The story behind the intelligence

    8 days ago

    “Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend
    Da
    David J. Bianco

    “Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend

    15 days ago

    JavaScript obfuscation: From party trick to phishing kit
    Ja
    James Hodgkinson-15 days ago

    JavaScript obfuscation: From party trick to phishing kit

    Learn the basics of what obfuscation is, why a researcher would try to reverse it, and several ways to approach the problem.
    Choose your fighter: Balancing competing requirements to select models for your AI SOC
    Da
    David J. Bianco

    Choose your fighter: Balancing competing requirements to select models for your AI SOC

    16 days ago

    The safety penalty: Reclaiming operational sovereignty in the age of AI
    Da
    David J. Bianco

    The safety penalty: Reclaiming operational sovereignty in the age of AI

    17 days ago

    Is Cyber missing the Marque?
    Mi
    Mick Baccio

    Is Cyber missing the Marque?

    22 days ago

    UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
    Jo
    Joey Chen-22 days ago

    UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities

    The newly identified SPECTRE implant represents an evolution in commodity intrusion tooling, integrating cross-platform C2 operations, process injection, credential theft, anti-analysis protections, and kernel-level endpoint detection and response (EDR) bypass functionality.
    UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
    Jo
    Joey Chen

    UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations

    22 days ago

    Describing attacks with crime script analysis
    Ma
    Martin Lee

    Describing attacks with crime script analysis

    23 days ago

    Curiouser and Curiouser
    Wi
    William Largent

    Curiouser and Curiouser

    29 days ago

    Dissecting the JWR phishing framework
    Ch
    Chetan Raghuprasad-29 days ago

    Dissecting the JWR phishing framework

    Cisco Talos recently identified an undocumented phishing framework, internally branded "JWR" by its developer, built to convincingly impersonate checkout and login pages across major payment and shopping platforms.
    Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities
    Ci
    Cisco Talos

    Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities

    2026-08-11

    Why metaphor may dictate your security strategy
    Ma
    Martin Lee

    Why metaphor may dictate your security strategy

    2026-08-06

    “Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI
    Ni
    Nick Biasini

    “Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI

    2026-08-04

    [Webinar] Tales from the Frontlines: An exclusive briefing on Q2 incidents
    Am
    Amy Ciminnisi-2026-08-03

    [Webinar] Tales from the Frontlines: An exclusive briefing on Q2 incidents

    Register for an exclusive, unrecorded 30-minute webinar to review the most high-impact incidents Talos IR faced in Q2.

    Latest News

    See All
    PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
    in
    [email protected] (The Hacker News)-4 days ago

    PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

    Bimbo Bakeries USA Confirms Data Breach in Oracle EBS Zero-Day Attack
    Gu
    Guru Baran-4 days ago

    Bimbo Bakeries USA Confirms Data Breach in Oracle EBS Zero-Day Attack

    Magento StyleSmuggler zero-day exploited to deploy Linux backdoor
    Bi
    Bill Toulas-4 days ago

    Magento StyleSmuggler zero-day exploited to deploy Linux backdoor