Sonar vs Wiz

Sonar Extends Agentic Code Governance and Verification to Self-Managed Infrastructure

New press release dated September 29, 2026: Sonar Extends Agentic Code Governance and Verification to Self-Managed Infrastructure.

Sonar DNS Field Command Injection Fixed by Developer

A developer discovered a command injection vulnerability in the DNS custom resolver field of Sonar, a macOS network scanning tool. The field, which accepts user input for custom DNS servers like Pi-hole or NextDNS, was passed to a privileged command without proper validation, potentially allowing arbitrary code execution as root. The fix involved allowlisting input to only accept valid IP addresses, passing arguments as an array instead of a shell string, and narrowing the privileged interface. The article also details three other security fixes made during a full pass: moving API tokens from a plist to the Keychain, preventing CSV export formula injection, and implementing atomic writes to avoid data corruption.

• Sonar had a command injection vulnerability in its DNS resolver field.
• The vulnerability could allow running commands as root.
• The fix involves allowlisting IP addresses and using array arguments.

Introducing Wiz AI SAST: Application Security that Understands Your Code and Your Infrastructure

Find, validate, and fix complex business logic flaws with an AI code scanner backed by Wiz Research, operationalized within your existing security program.

Snyk Lays Off Over 200, Revenues Top $300M

Snyk, the cybersecurity firm co-founded in London and Tel Aviv, laid off over 200 employees in June 2026, more than double the initial reports of 90. This was revealed in a new filing at Companies House. The reduction in force represents about 20% of its global workforce, impacting employees in the US and Israel, with a financial charge of up to $13.8 million. Despite the layoffs, Snyk's revenues grew 11% to $309 million in the fiscal year ending 2025, attributed to new customer wins. However, losses increased from $169 million to $189 million due to higher investments. The company, now headquartered in Boston, has raised over $1 billion from investors including Tiger Global and was valued at $8.5 billion in 2021. Snyk continues to build its AI security business, having acquired Invariant Labs in 2025.

• Snyk laid off over 200 employees in June 2026, representing about 20% of its global workforce.
• Revenues reached $309 million in fiscal year 2025, up 11% year-over-year.
• Losses increased from $169 million to $189 million.

Wiz Newsroom Updates: New Company News and Recent Coverage

The Wiz Newsroom page has been updated with new company news items including 'Wiz’s First 6 Months as Part of Google', 'Scan for Good: Using AI to discover and fix high-priority exposures', and 'Atlas: Wiz's autonomous AI Agent for vulnerability research'. Recent coverage now includes articles from SecurityBrief AU, SecurityWeek, and Infosecurity Mag, among others.