company
Cloud security company where Dali Rajic serves as president and COO before joining OpenAI.
No evidence-backed relationships are recorded.
Compiling any project that resolved the poisoned crate on August 20 was enough to run a credential stealer. Wiz links the infrastructure to DPRK-attributed campaigns.
Reality
A dev.to post ships a deliberately misconfigured AWS environment and a CSV scorecard so tools can be graded on found-versus-missed. The comparison it argues for has not been published yet.
Reality
An account published on dev.to says Copilot Autofix stripped input sanitization from a Snowflake workflow, and an autonomous offensive agent exploited it inside a week.
Reality
Wiz says the VS Code extension auto-loaded MCP server configs from the workspace and handed spawned processes the developer's full environment. Fixed in language server 1.65.0.
Reality
The largest deal in ServiceNow's history cost about 4% of its market cap and bought it a story investors would pay for. Security buyers should read the consolidation signal.
Reality
Two years of SIEM ingestion cuts left the data layer that agentic detection will run on, and 24% of security leaders now rank visibility above staffing as their top barrier.
Reality
Wiz says rogue device registrations are drifting toward benign names, while nearly one in seven Entra tenants saw such an attack in 90 days. Naming strings were never the signal.
Reality
Wiz withdrew the load-bearing part of its Snowflake finding after GitHub's review. The defect underneath is ordinary workflow syntax: untrusted input substituted before sanitisation, behind a guard that never fires.
Reality
Wiz says attackers are using the WebDriver API's documented remote-command features to plant a modified XMRig on internet-facing Selenium Grid nodes. Authentication is off by default.
Reality
Wiz says a TeamCity honeypot exposing JDWP was mining Monero within hours, and GreyNoise counted more than 6,000 unique IPs scanning for the protocol in 90 days.
Reality