GitHub Action supply chain attack: reviewdog/action-setup
March 21, 2025 update: We can now publicly disclose two additional details on this incident. 1) the specific target mentioned in the original post is…
Category: CloudSecurity
Catching rogue AI behavior with identity-aware analytics
When you look at your AI bill, it can be hard to tell if anything is amiss. You first need a baseline so you can…
Announcing Cloudflare Wallets: The programmable wallet for the agentic Internet
Today, it is difficult for AI agents to try out new APIs. They often have to navigate through a login page designed for humans and…
Spring 2026 PCI DSS and PCI 3DS compliance packages for AWS now available
Amazon Web Services (AWS) is pleased to announce the successful completion of our Payment Card Industry (PCI) Data Security Standard (DSS) and Three Domain Secure…
Your agent can now debug Workers with local tracing
Starting today, wrangler dev and vite dev automatically capture OpenTelemetry traces for local Worker invocations. When Cloudflare’s tooling detects an agent session, it points the…
keyv and cacheable npm Package Hijacked in Supply Chain Attack
Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple npm packages in the Keyv/Cacheable ecosystem. This blog presents our initial findings…
Wiz at Black Hat 2026: Driving AI Threat Readiness
In an age where frontier models can autonomously discover zero-day vulnerabilities and chain exploits at machine speed, vulnerabilities will be discovered and disclosed faster than…
Wiz to Join Google Cloud: Making Magic Together
Today we have reached yet another milestone on our journey – we have signed a deal to be acquired by Google. The deal is subject…
CloudTrail Network Activity Events for AWS VPC Endpoints
Everyone that uses VPC Endpoints should enable network activity events for VpceAccessDenied errors. For those that have not yet applied restrictive VPC Endpoint Policies, Network…
Fileless XMRig-C3 Cryptominer Targets PostgreSQL Servers
Wiz Threat Research identified a new variant of an ongoing malicious campaign targeting misconfigured and publicly exposed PostgreSQL servers. In the observed attack, the threat…
Your agent needs a computer, not a container — introducing @cloudflare/computer
The most capable agents have something simple in common: they are given their own computer to work with. Coding agents work this way. You give…
Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Era
Developers hold cloud credentials, npm publish tokens, and direct access to source code, and their work requires installing packages and running third-party code on their…