Dirty Frag (CVE-2026-43284) Linux Privilege Escalation
A newly disclosed Linux kernel local privilege escalation vulnerability chain, dubbed “Dirty Frag” and assigned CVE-2026-43284 and CVE-2026-43500, enables attackers with local access to obtain…
Category: CloudSecurity
Wiz Integrates with Akamai for Edge Security
Your cloud security posture is only as strong as the weakest link in your stack, and for most teams shipping applications at scale, that weak…
Fixing Risk through Service Ownership with Wiz
Security teams rarely struggle to find risk. The harder challenge is making that risk actionable. In modern cloud and AI environments, the same issue can…
Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised
@beproduct/nestjs-auth 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7, 0.1.8, 0.1.9, 0.1.10, 0.1.11, 0.1.12, 0.1.13, 0.1.14, 0.1.15, 0.1.16, 0.1.17, 0.1.18, 0.1.19 @cap-js/db-service 2.10.1 @cap-js/postgres 2.2.2 @cap-js/sqlite 2.2.2…
Introducing Wiz Audit History: Track Every Change Across your Environment
Understanding how your cloud environment evolves is essential for maintaining a strong security posture and operational resilience. In the cloud and the AI era, change…
Fragnesia: Linux Kernel Local Privilege Escalation via ESP-in-TCP
Researchers have disclosed a new variant in the DirtyFrag family of Linux local privilege escalation (LPE) vulnerabilities, named “Fragnesia.” The vulnerability impacts the Linux kernel’s…
Wiz Integrates with HackerOne for Cloud Context
Security programs generate findings from many sources including automated scanners, cloud security tools, penetration tests, and bug bounty programs. Too often these findings live in…
Wiz for PQC Readiness: Eliminate Cryptographic Blind Spots
The Invisible Foundation: Why Cryptographic Readiness Matters Today For nearly half a century, the mathematical foundations of digital trust, algorithms like RSA and ECC, have…
Introducing Runtime Threat Detection for Google Cloud Run
Google Cloud Run has become one of the most widely adopted platforms for deploying containerized workloads without managing infrastructure. Teams across industries use it to…
durabletask: TeamPCP’s Latest PyPi Compromise
The supply chain campaign linked to TeamPCP continues with the compromise of durabletask v1.4.1, v1.4.2, and v1.4.3. DurableTask is the official Microsoft Python client for…
Wiz + Anthropic: Claude Enterprise Meets the Security Graph
AI tools like Google Gemini and Anthropic’s Claude are becoming part of how every team works. Developers are building with them. Sales teams are drafting…
State of SDLC Security 2026: How Risk Scales
In our 2026 State of SDLC Security report, we analyzed real-world development environments, public repositories, and production telemetry to understand how application risk is evolving…