RediShell security flaw in Redis: -remotely exploitable -CVSSv3 10/10 -impacts all versions released over the past 13 years -impacts 75% of cloud instances www.wiz.io/blog/wiz-res... redis.io/blog/securit...

Wiz Finds Critical Redis RCE Vulnerability: CVE‑2025‑49844 | Wiz Blog

A 13‑year Redis flaw (CVE‑2025‑49844) allows attackers to escape Lua sandbox and run code on hosts. See Wiz Research’s analysis and mitigations.

wiz.io

New threat hunting blogpost from our team - by checking which Linux processes normally use the Instance Metadata Service across thousands of cloud environments, we can identify exploitation of novel SSRF & RCE vulnerabilities when a process that shouldn't use IMDS suddenly does.

IMDS Abused: Hunting Rare Behaviors to Uncover Exploits | Wiz Blog

Wiz uncovered a zero-day vulnerability using IMDS anomaly detection. Learn how attackers exploit metadata services and how Wiz helps stop them.

wiz.io

Open-source supply chain attacks are often in the news, but they aren't all equally deserving of your time and attention - here's how they usually happen, and key questions to decide which ones are worth worrying about:

💡 Eden hosts Nichole Dove, @sherrod.bsky.social & @alonsch.bsky.social. Cloud chaos, career confessions & the future of cybersecurity. This one hits different. Listen now: 🍏 open.spotify.com/episode/6vGW... 🎧 podcasts.apple.com/us/podcast/l... 📺 www.youtube.com/watch?v=7Kwi...

Live Talk: Security Minds from Riot Games, Microsoft & Wiz

Crying Out Cloud · Episode

open.spotify.com

these blippi recasts are getting out of hand

🚨 New Wiz research: Active exploitation of Ivanti EPMM flaws (CVE-2025-4427 & 4428) enables RCE in the wild. Cloud systems are at risk; patch now. Wiz customers can find pre-built detection queries in the Threat Intelligence Center. Full details 👉 www.wiz.io/blog/ivanti-...

Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild | Wiz Blog

Wiz Threat Research has observed exploitation in-the-wild of CVE-2025-4427 and CVE-2025-4428, the latest vulnerabilities affecting Ivanti Endpoint Manager Mobile (EPMM).

wiz.io

'Ongoing' Ivanti hijack bug exploitation reaches clouds

'Ongoing' Ivanti hijack bug exploitation reaches clouds

Nothing like insecure code in security suites The "ongoing exploitation" of two Ivanti bugs has now extended beyond on-premises environments and hit customers' cloud instances, according to security shop Wiz.…

dlvr.it

Our team at Wiz Research has observed ongoing exploitation of the latest Ivanti EPMM vulnerabilities (CVE-2025-4427 & CVE-2025-4428) - more details and IOCs available here: www.wiz.io/blog/ivanti-...

Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild | Wiz Blog

Wiz Research has observed exploitation in-the-wild of CVE-2025-4427 and CVE-2025-4428, the latest vulnerabilities affecting Ivanti Endpoint Manager Mobile (EPMM).

wiz.io

If you'd like to learn more about this type of misconfiguration, how it can be exploited, and how to prevent it, @danielleaminov.bsky.social from my team at Wiz wrote a great introduction to this topic here: www.wiz.io/blog/spring-...

Exploring Spring Boot Actuator Misconfigurations | Wiz Blog

Misconfigurations in Spring Boot Actuator’s endpoints can leak environment variables, passwords, and API keys, and even lead to remote code execution.

wiz.io

Andrew Couts@couts.bsky.social · last yr.

NEW: The Signal clone TeleMessage got hacked in less than 20 mins thanks to a basic misconfiguration. @micahflee.com has the scoop (and his first piece for @wired.com!) www.wired.com/story/how-th...

wife: how was guarding the two paths today, honey? guard: [looking away] fine wife: did something happen? guard: [tearing up] no wife: would the other guard tell me something happened?

So an expert on sin, but also cos and tan

🎙️All you need to know on bug bounty insights w/ @rhynorater.bsky.social! @amitaico.bsky.social & Eden dive into hacks, lessons & wild stories on Crying Out Cloud. 🔗 Listen now: 🍏 podcasts.apple.com/us/podcast/b... 🎧 open.spotify.com/episode/6B6q... 📺 youtube.com/watch?v=eW6k...

Bug Bounty Secrets, Hacker Communities, and a Hit of Volleyball with Justin Gardner

Podcast Episode · Crying Out Cloud · 05/08/2025 · 40m

podcasts.apple.com

🚨 OH NOOOO! Someone stole the secret recipe of ExfilCola. We need your help tomorrow to get it back. Set your clocks for 9 a.m. ET ⏰ You'll need curiosity, cloud IR skills, and a taste for solving mysteries. 🧠 Do you think you can crack it?

This. is. massive! 🥁✨ Meet the Wiz Vulnerability Database—for CVEs that actually matter in the cloud. AI-powered reports, expert insights & fix guidance. No fluff, just essentials. 🔍 Explore: wiz.io/vulnerabilit...

#IngressNightmare: Wiz Research uncovers a critical vulnerability in Ingress-NGINX 🚨 Wiz Research found a novel attack vector in one of Kubernetes's most fundamental projects, Ingress-NGINX, which is rated CVSS 9.8.

BREAKING: Internal #DeepSeek database publicly exposed 🚨 Wiz Research has discovered "DeepLeak" - a publicly accessible ClickHouse database belonging to DeepSeek, exposing highly sensitive information, including secret keys, plain-text chat messages, backend details, and logs.

New phone, Houthis

Pantheon is such an amazing show, I feel so late to the game only watching it now. I also appreciate how it was released slightly before Gen AI became mainstream, otherwise I suspect the script might have been different. Almost makes it seem like an alternate history.

Turns out when you investigate a compromised Github Actions you ... find another compromised Github Action: www.wiz.io/blog/new-git...

GitHub Action supply chain attack: reviewdog/action-setup | Wiz Blog

A supply chain attack on tj-actions/changed-files leaked secrets. Wiz Research found another attack on reviewdog/actions-setup, possibly causing the compromise.

wiz.io

What an honor to share our talk on “In-the-Wild Abuse of App Misconfigs” at @districtcon.bsky.social year 0! So much talent in one place, and massive kudos to the organizers for creating such an epic event and overcoming an entire-block power outage. Looking forward to next year! 🪩✨🌸

📢 JUST DROPPED: Analyzing 150K+ cloud accounts, we took a deep dive into #AI adoption. And the results? Wild.

This is cool @feedly.com. Thanks for working with us on it. It's true- Feedly uplevels our detection game in a big way @ GreyNoise. feedly.com/customers/po...

Case Study: GreyNoise Doubles Detection Output with Feedly | Feedly

Discover how GreyNoise used Feedly Threat Intelligence to automate OSINT workflows, double detection output, and save hours of manual effort daily.

feedly.com

Why is everyone suddenly talking about #DeepSeek? 👀 Our new podcast features Gal Nagli from the Wiz Research team, breaking it down with Eden Naftali and @amitaico.bsky.social. 🔗 Listen now: 🍏 podcasts.apple.com/us/podcast/d... 🎧 open.spotify.com/episode/5HIP...

DeepSeek Data Leak with Gal Nagli (Wiz Research)

Podcast Episode · Crying Out Cloud · 01/30/2025 · 11m

podcasts.apple.com

I get what they're trying to do, but this isn't an ideal solution. Would be better if MITRE / NIST maintained an EOL enumeration database similar to CVE. Meanwhile, for those not familiar, endoflife.date is a great reference for determining which versions of popular software are EOL.

Socket@socket.dev · 2y ago

📌 Node.js EOL versions just got their own CVE and critics are calling it “the worst CVE of the year.” Is this CVE a helpful PSA or an abuse of the system? Dive into the debate: socket.dev/blog/node-js... #NodeJS #cybersecurity #JavaScript

Learn more on how to shifting focus on attacker behavior — ⚙️ like unusual permissions escalations or lateral movement patterns in our blog by @merav-b.bsky.social & and Gili Tikochinski: www.wiz.io/blog/detecti...