Wiz’s First 6 Months as Part of Google

Fast gets even faster: redefining security for the AI era and doubling down on our multicloud commit...

CVE-2026-13410 Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled

Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled. The default user agent is initialised with SSLverifymode explicitly disabled. An attacker with network man-in-the-middle MITM capability between the Dancer application and googleapis.com can intercept the...

OpenBlow Deanonymization Issues

A production deployment of OpenBlow was observed HTTP archive of a full, real whistleblower submission to route its anonymous reporting flow through Google. The intake CAPTCHA is Google reCAPTCHA, enforced as a mandatory, server-validated gate on report submission, and the UI additionally pulls a...