What happened
On Sept 30, Wiz introduced WizOS Helm Charts — hardened, signed, CVE-scanned Kubernetes charts maintained to the same standard as WizOS base images — plus Wiz Research analysis of 1,500 popular Artifact Hub charts finding 61 source repos (7.5%) with confirmed supply-chain risk, including 'PWN Request'-style CI/CD weaknesses and unowned dependencies.
Why it matters
It extends AI-infrastructure supply-chain assurance to the Helm layer that SCA/container scanning miss (images from other people's registries, mutable tags, CI/CD trust abuses), with published evidence of real-world risk in the AI/ML tooling deployment chain.
Applicability
Platform/SRE teams deploying Kubernetes-based AI stacks should adopt hardened charts and audit community charts against Wiz's disclosed risk patterns; relevant to cloud security and AI-infrastructure security programs.