Skip to content
securitytabs

Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR

MentionsAtlassianGitHubSnowflakeJira

Wiz Red Agent independently discovered and exploited a GitHub Actions injection missed by GitHub’s Advanced Security, validated access to sensitive data in Snowflake’s internal Jira, and assessed the blast radius—all without human intervention, five days after the flaw became live.

Summary from Wiz Blog.

Explained

The technology and terms in this story. Learn more

More in Vulnerabilities