Google’s Wiz Acquisition: Impact on Water Utilities and Cybersecurity at GitHub

Summary

• Google’s Acquisition of Wiz: Google agreed to buy cloud security firm Wiz for $32 billion to strengthen its cloud security business.
• Water Utilities Security Focus: Attacks on water utilities are pushing operators to tighten defenses.
• Increasing Cyber Attacks on GitHub: Attackers keep targeting GitHub accounts, repositories and the software supply chain.

Google moves to buy Wiz

Google announced on March 18, 2025, that it had agreed to acquire Wiz, a fast-growing cloud security company, for $32 billion in cash. It is the largest acquisition in Alphabet’s history. The deal still needed regulatory approval, and Wiz was to join Google Cloud once it closed.

Google has said Wiz’s products will remain available on other major clouds, including AWS and Microsoft Azure. Customers asked.

What the deal means for security buyers

The deal fits a broader pattern of large tech companies buying security capabilities. If it closes, Wiz’s tools for finding risky cloud configurations and exposed data would sit inside Google Cloud, which could push rivals to strengthen their own offerings.

Water utilities tighten defenses

Attacks on water utilities have been rising. The stakes are high, because an intrusion at a small plant with one IT person and a remote-access tool left open can affect the safety of drinking water for thousands of households before anyone notices.

High-profile incidents have drawn attention to old control systems that were never designed for internet connections. Experts recommend thorough risk assessments and tested response plans.

What utilities are doing

Many utilities are adding monitoring and detection tools, writing incident response plans and working with outside security firms to fill gaps in their small IT teams.

Public trust in tap water depends on this work.

GitHub under pressure

GitHub, the main platform for hosting code, is a constant target. Attackers go after developer accounts and leaked secrets.

Recent incidents have involved stolen credentials and tampered code that put downstream users at risk. GitHub has responded by tightening its security policies and pushing developers toward safer practices.

What GitHub is doing

GitHub has made two-factor authentication mandatory for code contributors and offers secret scanning to catch leaked credentials. It also runs a bug bounty program and publishes security guidance for maintainers.

Developers share responsibility. Turn on two-factor authentication. Review third-party actions, and keep secrets out of code.

Three stories, one theme

Google’s Wiz deal, the push to secure water utilities and the pressure on GitHub point the same way: cloud services, critical infrastructure and code hosting all need stronger defenses. Each needs both better tools and better habits.

Fred Templeton, CISA, CASP, SEC+

Fred Templeton is a practicing Information Systems Auditor in the Washington DC area. Fred works as a government contractor and uses his skills in cyber security to make our country's information systems safer from cyber threats. Fred holds a master's degree in cybersecurity and is currently working on his PHD in Information Systems.