Wiz Research — Cyber Attacks, Breaches & Threat Activity

Related Threat Clusters

• GitHub Patches Critical RCE Vulnerability CVE-2026-3854

  A critical remote code execution vulnerability, tracked as CVE-2026-3854, was discovered in GitHub's internal git infrastructure, allowing authenticated users to execute arbitrary commands via a crafted git push…

  49 articles · Updated April 28, 2026
• Critical CosmosEscape Vulnerability Exposes Azure Cosmos DB to Potential Attacks

  Wiz Research disclosed a critical vulnerability named CosmosEscape in Azure Cosmos DB, allowing attackers to potentially compromise every database in the service, including Microsoft's internal systems like Entra ID,…

  6 articles · Updated July 30, 2026
• GitHub Agentic Workflows Vulnerability Exposes Private Repositories

  In July 2026, Noma Labs discovered a prompt injection vulnerability in GitHub's Agentic Workflows, named GitLost, allowing unauthenticated attackers to access private repositories by crafting a GitHub Issue in a public…

  2 articles · Updated August 25, 2026

Recent Intelligence Reports

• Agentic AI Security: Credentials and Permissions Define the Blast Radius — Blog.Gitguardian · August 25, 2026
• Critical Azure Cosmos DB flaw risked cross-tenant compromise | news — Scworld · July 30, 2026
• GitHub rushed to fix a critical vulnerability in less than six hours — Theverge · April 29, 2026

Related Entities