706 matches found
Streamline Software Bill of Materials (SBOM) Generation with Wiz's Agentless SBOM
Enhance software security and supply chain risk management with Wiz's agentless scanning technology for effortless SBOM creation...
Exploitable and unpatched KeePass vulnerability: everything you need to know
Detect and mitigate CVE-2023-32784, a vulnerability in KeePass which allows the extraction of the master password in cleartext from the application's memory...
Deloitte and Wiz Announce a Strategic Alliance to Help their Mutual Clients Accelerate Digital Transformation with a Modern Cloud Security Strategy
New alliance to enable organizations to proactively identify, prioritize, remediate, and prevent risks in their cloud...
S3 Clones in the Neoclouds
S3 compatible services carry many of the same concerns as the original S3 service. This article highlights which assumptions break and what risks remain...
Defending at Machine-Speed: Building AI Threat Readiness with Wiz
How Wiz helps organizations adopt an AI Operating Model for AI Threat Readiness...
Under the Radar: Exploring Spring Boot Actuator Misconfigurations
Wiz Threat Research investigates misconfigurations in Spring Boot Actuator’s endpoints that can leak environment variables, passwords, and API keys, and even lead to remote code execution...
How Wiz customers are flippin' vulnerabilities this July 4th weekend
Did you know that 40% of all Wiz customers are now in the Zero Critical Club? Here’s how three companies joined their ranks by eliminating critical issues in their cloud environments...
NamespaceHound: protecting multi-tenant K8s clusters
NamespaceHound is an open-source tool for detecting the risk of potential namespace crossing violations and anonymous access opportunities in multi-tenant clusters...
Extend Wiz to your Developers: Enable secure cloud development with agility
New capabilities extend Wiz CNAPP to secure the entire software pipeline, enabling organizations to securely develop for the cloud...
Securing clouds, securely
Let's take a look at how Wiz designed the agentless workload scanner to be modular and scalable, and what security measures Wiz takes to protect sensitive customer data...
Unveiling eBPF: Revolutionizing Security and Observability
An Introduction to Extended BPF and Its Transformative Impact...
A security community success story of mitigating a misconfiguration
Learn about the process of preventing security issues by changing things outside of your environment by looking at how a misconfiguration was occurring when Github Actions were integrated with AWS IAM roles and the improvements made that have now made this misconfiguration much less likely...
Recap: Wiz innovations at Google Cloud NEXT ‘23
The integration of Wiz’s CNAPP and Google Cloud helps both cloud defenders and builders improve security and innovate faster...
Wiz integrates with Amazon Security Lake to improve cloud security through cloud security data sharing
New integration enables customers to consolidate security logs, run investigations and analyze security metrics in their customer-owned data lake...
The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API
Part 2: How the Red Agent bypassed backend resolvers to expose an entire airline booking database in fifteen minutes...
The Red Agent POV: How it Reasoned its Way to SSRF
Part 1: How the Red Agent uncovered a multi-step attack chain allowing SSRF-to-Local-File-Read on a GCP Cloud Run API...
CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild
Wiz Research discovered a critical supply chain vulnerability that abused a CodeBuild misconfiguration to take over key AWS GitHub repositories - including the JavaScript SDK powering the AWS Console...
Operationalizing Cloud Security: How PwC and Wiz Help Turn Risk into Resilience
PwC leverages Wiz to empower secure cloud transformation—bridging strategy, visibility, and execution...
Wiz observes exploitation in the wild of PAN-OS vulnerabilities
Detect and mitigate CVE-2024-0012 and CVE-2024-9474, PAN-OS vulnerabilities which Wiz Threat Research has observed being exploited in-the-wild. Organizations should patch urgently...
Wizards of security, casting spells on themselves for ultimate digital security
Wiz practices what it preaches. Let’s look at how the security team at Wiz uses the power of the Wiz platform to monitor all its cloud-based infrastructure and services...
Improve MTTR with Wiz’s AI-powered remediation guidance using Microsoft Azure OpenAI service
Organizations can now improve their mean time to remediate MTTR with AI-generated remediation steps...
Wiz extends vulnerability scanning support to MacOS instances
Wiz customers can now detect vulnerabilities in MacOS workloads and their software components with agentless scanning, and assess their secure configurations against built-in CIS Benchmarks for Apple MacOS...
Wiz recognized with top score for the current offering category in The Forrester Wave™: Cloud Workload Security, Q1, 2024
Learn why Forrester recognized Wiz as the top ranked in the current offering category on the market out of the top 13 providers, and how their analysis connects with the Wiz vision...
5 Surprising facts from the Cloud Security Salary Guide
Wiz is releasing a new report providing insight into various jobs in the field of cloud security and compensation packages they offer; here are 5 key facts from our data...
Wiz inducted into the JPMorgan Chase Hall of Innovation
We're excited to announce that JPMorgan Chase has made Wiz a new member of their Hall of Innovation!...
Wiz integrates with AWS Security Hub to help you better manage your AWS security posture
New integration enables AWS customers to send Wiz security issues detected in AWS resources to Security Hub...
Wiz Receives Morgan Stanley Innovation Award at 20th Innovation Summit
Recognition in the Cyber category honors Wiz for its exceptional technology partnership with one of the world’s leading financial institutions...
Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure
New initiative partners with under-resourced organizations to uncover, remediate exploitable risk at scale...
Wiz achieves GovRAMP High Authorization
Delivering unified cloud security and accelerating secure modernization to protect citizen data and critical infrastructure...
Inside 90 days of attacks on AI infrastructure
Wiz honeypots uncover active campaigns targeting LiteLLM, MCP servers, and AI frameworks through RCE, blind prompt injection, and memory credential theft...
The State of Cloud Risk 2026: Most Security Findings Aren’t Real Attacker Opportunities
Wiz Research telemetry reveals why the majority of high-severity findings lack a path to compromise...
Announcing the 2026 Wiz Partner Alliance Award Winners
Recognizing the partners, integrators, and visionaries driving cloud security transformation, AI risk management, and SOC modernization across AMER, EMEA, and ANZ...
300 WINtegrations Strong: An Open Security Ecosystem Built for the Speed of AI
As AI accelerates how organizations build and how attackers operate, a deeply connected security ecosystem is how defenders keep up...
The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System
Part 3: How the Red Agent bypassed a credit and paywall system by changing a single client-side value from false to true...
Wiz at Wiz: Reducing Risk through Service Ownership
How Wiz security uses Service Catalog to turn cloud risk into service ownership...
Securing the AI Edge: Wiz and Cloudflare Integrate for End-to-End AI Protection
Gain a unified view of AI application endpoints and DNS exposure across your environment, including which are protected by Cloudflare and which need to be secured...
Wiz Becomes Fastest Security ISV to Reach $1 Billion in AWS Marketplace Lifetime Sales
A milestone fueled by customer trust and a partnership built for scale...
Wiz Research Discovers One in Five Organizations Exposed to Systemic Risks in Vibe-Coded Applications - Here's How to Secure Them
New research reveals four common security risks systematically affecting vibe-coded applications - with remediation strategies curated together with Lovable...
Inside Grammarly’s AI-driven automation with the MCP Server for Wiz
Meet the system that cut manual triage times by 90% and enables engineers to focus on strategic thinking...
Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild
Wiz Threat Research has observed exploitation in-the-wild of CVE-2025-4427 and CVE-2025-4428, the latest vulnerabilities affecting Ivanti Endpoint Manager Mobile EPMM...
Wiz Acquires Gem Security to Reinvent Threat Detection in the Cloud
We’re pushing for consolidation, bolstering our Cloud Detection and Response capabilities, and delivering on the promise of security operations for the cloud era...
5 Cloud Security Predictions for 2023
COVID's impact still resonates. Remote work, AI, and a turbulent economy have made the future unpredictable, including the future of cloud security. But we still have best practices for you! Let's examine 5 cloud security predictions to be aware of in 2023...
Investing Together: Wiz Defend and Google Security Operations
Continuing to deepen the integration between Wiz Defend and Google Security Operations, helping teams work faster wherever they choose to investigate...
Uncovering Hidden Attack Paths in Cloud Environments Using Runtime Signals
Wiz now layers runtime signals into the Security Graph, exposing hidden attack paths to give security teams a complete picture of risk...
Introducing the Red Agent POV Series
An inside look at how the Red Agent, our AI-Powered Attacker, uncovers complex, exploitable risks in the wild...
Eliminate Critical API Attack Paths with Wiz API SPM
Wiz API SPM is now GA, enabling customers to discover APIs, assess APIs for exploitability, and prioritize remediation to mitigate the risk of an API-related breach...
State of Post Quantum Cryptography
Discussion of PQC relevant statistics that we see across our customers and other data sources...
Dirty Frag: Linux Kernel Local Privilege Escalation via ESP and RxRPC
Unpatched kernel flaw chain CVE-2026-43284, CVE-2026-43500 enables root escalation on major Linux distributions...