Threat Research at WIZ
Israel
Joined March 2016
- Tweets130
- Following224
- Followers171
- Likes1K
List of most popular/active public repos on GitHub - April edition:
- @openclaw hype is over?
- @Microsoft GenAI tutorials are back to the first place
- April normalized to AI models and established learning
resources
Monthly list of most popular/active public repos on GitHub:
- @openclaw keeps the first place (although its half pace comparing to February)
- Rise of the personal claude skills and harnesses over official anthropics/skills
- karpathy/autoresearch - fast-breaker
Turns out # of forks is a great metric of repo popularity. Here is the most popular/forked repos of Feb 2026. Of course, #OpenClaw is leading the pack:
With #shaihulud2 refuses to die with the long tale of infections (117 new compromised machines in the last 72 hours, most of them form @Cursor IDE), all @github has to do is disable the gho_ tokens of the super-spreaders (last 2 active spreaders are Cpreet and moh-abed).
Re #IngressNightmare - until yesterday, there have been only one Critical and 12 Highs in K8s according to official CVE feed[k8s.io/docs/reference/issues…] (since 2017). Its 2 and 15 now. This is big.
tj-actions - saga continues... 🍿
Based on our analysis, here's the current map of compromised actions:
Most frequent languages in private vs public GitHub repos (Java - the most common compiled language - is only 8th):
Some interesting stats inside. Here are couple teasers - GitHub Apps permission scopes (second and third are dangerous scopes):
Stripe can start preparing bounty...
Someone just exploited github.com/stripe-samples/ac… with a Pwn Request and added their payloads to the main branch… @stripe
Recently I've stumbled on the real piece of art, a funny collection of @MITREcorp CWE Explanation diagrams. This made my day (CWE 306 Missing Authentication):
Hot from the oven for #KubeCon - a new #Kubernetes security tool for red-teamers and cluster operators to test for Lateral Movements and multi-tenancy isolation. Use responsibly😉 at github.com/wiz-sec-public/na…
🕺 Introducing 'NamespaceHound' — A free new tool to help secure multi-tenant clusters!
🔍 Detect potential cross-tenant violations
🕹️ Explore lateral movement opportunities
🔐 Protect your resources with confidence
Learn more in our new blog:
wiz.io/blog/introducing-name…
