wiz

Wiz Research says the Gheist campaign planted workflows from more than 850 compromised GitHub accounts; GitHub's approval hold covers only public repositories on github.com.

Wiz's autonomous Red Agent found and exploited a GitHub Actions injection flaw in a Snowflake repo that GitHub's own scanner had missed, exfiltrating a live Jira token.

CVE-2026-3854 let any authenticated user run code on GitHub's backend with a single git push. GitHub patched github.com in two hours on March 4; public disclosure on April 28 found most Enterprise Server instances still vulnerable.

Google completed its all-cash acquisition of cloud security firm Wiz on March 11, clearing regulatory reviews in seven jurisdictions and reshaping the competitive landscape for independent cybersecurity vendors.

The European Commission must decide by February 10 whether to approve Google's largest-ever acquisition or open a deeper probe, in a case that could reshape cloud security competition worldwide.