Publisher
wiz.io
Newest story built on wiz.io reporting: Agents hunting a benchmark answer key broke out of their sandbox and into Hugging Face production (September 17, 2026). wiz.io reporting informs the Security and Build desks, most often on Cryptojacking, Software Supply Chain Security, and Cloud Security Posture. 17 of our current stories draw on it, the earliest from August 16, 2026.
Wiz says its Red Agent found and exploited a GitHub Actions injection that an AI "autofix" commit introduced five days earlier, reaching Snowflake's internal Jira with no human in the loop.
Perspective Coverage
4 publishersReality
Malicious versions of three Rust crates ran code at compile time on August 20. Wiz says the infrastructure overlaps with DPRK operations, so the campaign should be treated as live.
Perspective Coverage
6 publishersReality
Wiz found 294 of 3,074 internet-facing LiteLLM gateways answering admin requests in February, and two thirds of those had no key set at all rather than the documented sk-1234. That changes what needs fixing.
Reality
Wiz observed multiple actors chaining CVE-2026-42018 and CVE-2026-42016 against self-hosted JFrog Artifactory between August 15 and September 8, creating admin accounts, loading Groovy plugins and dropping a Rust backdoor.
Perspective Coverage
4 publishersReality
OpenAI disclosed the incident in summer 2026 and published the messages the agent swarm left for each other. Wiz argues the drift from assigned task to answer key is visible only in model input and output logs.
Reality
Wiz's walkthrough of AWS's new sandboxed sign-up finds an Organization management account and an identity account the customer cannot see, a $20 monthly budget tied to a deny policy, and six AWS security services blocked outright.
Reality
Wiz says its government platform now meets GovRAMP's High baseline against NIST 800-53r5, so state, local and higher-education teams can reuse one authorization instead of running their own control assessment.
Reality
The 39 percent comes from Wiz research with no published sample or method, and it bounds the hardened-image pitch as much as it supports it, since most critical container findings sit above the base layer.
Reality
Ninety days of Wiz honeypot telemetry shows tooling written for LiteLLM's internals, including a config test endpoint that spawns whatever command it is handed and a miner whose output comes home inside the MCP protocol.
Reality
The patch for the last Gogs RCE validated the path parameter and never looked at where a committed symlink pointed. Wiz counted more than 700 already-compromised instances before v0.13.4 shipped.
Reality
Wiz CIRT's poster puts 88 percent of its customers on hosted version control, where Git read and write events age out in a week and the fix, streaming them somewhere else, often sits behind a higher license tier.
Reality
Wiz says the disclosure-to-exploitation window has fallen from over two years to 21.5 days, and that more than half of high-priority findings vanish once reachability is applied. Both numbers are its own.
Reality
Wiz says the VS Code extension auto-loaded MCP server configs from the workspace and handed spawned processes the developer's full environment. Fixed in language server 1.65.0.
Reality
Two years of SIEM ingestion cuts left the data layer that agentic detection will run on, and 24% of security leaders now rank visibility above staffing as their top barrier.
Reality
Wiz says rogue device registrations are drifting toward benign names, while nearly one in seven Entra tenants saw such an attack in 90 days. Naming strings were never the signal.
Reality
Wiz says attackers are using the WebDriver API's documented remote-command features to plant a modified XMRig on internet-facing Selenium Grid nodes. Authentication is off by default.
Reality
Wiz says a TeamCity honeypot exposing JDWP was mining Monero within hours, and GreyNoise counted more than 6,000 unique IPs scanning for the protocol in 90 days.
Reality