Tag: Wiz
Wiz finds one in ten LiteLLM servers trust the sample admin key
Thousands of exposed AI gateways accept the demo key printed in LiteLLM's setup guide.
Snowflake CI workflow injection leaks Jira tokens through crafted issues
Wiz's Red Agent found a GitHub Actions injection in a Snowflake repository that exposed Jira credentials via a specially crafted…
Azure Cosmos DB bug could have unlocked every tenant database
Wiz found a chain it calls CosmosEscape that let a crafted Gremlin query grab a platform-wide master key.
Critical GitHub.com and Enterprise Server RCE Vulnerability Enables Full Server Compromise
CVE-2026-3854 allowed any authenticated user to compromise GitHub backend servers via injected git push options, exposing millions of private repositories.…