Wiz Red Agent

Reported Context (2)

which they do largely by reasoning over and analyzing code. Through our work building the Wiz Red Agent – an AI-powered, context-aware pentester – we saw another gap, with more immediate implications: the Wiz Launches AI-Assisted Program to Find and Fix Public-Sector and Critical Infrastructure Exposures
Wiz Red Agent identified a script injection vulnerability in snowflakedb/snowflake-connector-net. The issue allowed an unauthenticated user to execute arbitrary commands within a GitHub Actions runner by opening a Wiz Exploits GitHub Actions Injection Flaw to Access Snowflake’s Jira

People (2)

MITRE ATT&CK (2)

Vendors (4)

Products (5)

Tools (2)

Industries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.