Wiz
4,500 clusters still exposed to potential pre-auth RCE and working exploit available
Two "unusual, open ports (8123 & 9000) that led to the exposed database" were not hard to find.
An attacker would need to craft a malicious container and run it "either directly (for example in services allowing shared GPU resources) or indirectly through a supply chain or social engineering attack"
Wiz, the fastest software company to grow from $1 million to $100 million in ARR should be aware how fast boasts about record-breaking achievements can look like yesterday's news. Just ask SentinelOne...
Two new cybersecurity tools “OSV-Scanner” and “Peach” that landed this week deserve attention – whether you are a CISO, Blue Team, or just trying to tighten up your application development or cloud practices. OSV-Scanner was released under an Apache 2.0 licence by Google. Peach is an open framework from Wiz
Oracle fixed the vulnerability "extraordinarily quickly" in July, but it is unclear when it was introduced
“There is currently no universal standard for cloud vulnerability enumeration..."