667 matches found
Introducing Wiz Workflows: Your path to building a self healing cloud
Orchestrate customizable workflows with agents, enabling end-to-end discovery and response in Wiz...
Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign
LiteLLM is the latest victim of TeamPCP’s open-source attack spree. Malicious versions 1.82.7 and 1.82.8 abuse Python’s .pth mechanism for stealthy persistence. The malware exfiltrates cloud credentials, CI/CD secrets, and keys to attacker-controlled domains...
KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack
Checkmarx KICS scanner is the latest victim of a credential-stealing supply chain attack by TeamPCP. Between 12:58–16:50 UTC on March 23, 35 tags were hijacked. Learn how to audit your workflows, identify malicious activity, and secure your GitHub Actions...
Introducing the Wiz Red Agent- AI-Powered Attacker
Red Agent is an AI-powered, context-aware attacker that uncovers complex exploitable risks across your entire attack surface, continuously and at scale...
Introducing Wiz AI Application Protection Platform (AI-APP)
Secure every layer of AI applications — infrastructure, data, access, models, agents, and applications — from code to runtime, across every environment you build in...
Introducing Wiz Agents & Workflows: Security at the Speed of AI
A new security operating model powered by AI agents that removes bottlenecks and enables teams to act at the speed of AI...
AI Runtime Threat Detection: From Input to Real-World Impact
Understanding and detecting AI-driven behavior across model, workload, and cloud...
Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack
On March 19, 2026, threat actors injected credential-stealing malware into Aqua Security’s Trivy scanner and related GitHub Actions. Learn how "TeamPCP" executed this breach and how to audit your environment...
Twenty Years of Cloud Security Research
This post will look at the past 20 years of cloud security research, separating the two decades into eras with important milestones defined that resulted in the change of one era to the next...
公式発表：WizがGoogleに合流
クラウドと AIセキュリティの新時代を切り開く...
Understanding and Reducing AI Risk in Modern Applications
Identify real AI risk by connecting signals in context across the layers of AI applications...
Introducing Wiz Tenant Manager: Multi-Tenant Management for Federated Organizations
Experience full Wiz security with zero friction, managing multiple tenants in a single console...
The Agile FedRAMP Playbook, Part 4: Reactive Risk Management through Enriched Incident Response
In the final part of our series, we explore Reactive Risk Management. Discover how Wiz for U.S. Government transforms cloud detection and response to help satisfy FedRAMP Rev 5 IR controls and FedRAMP 20x detection benchmarks...
Wiz Achieves CPSTIC Certification in Spain
Strengthening secure cloud modernization for Spain’s public sector through CPSTIC certification...
Seeing AI Clearly: Building Visibility Across Modern AI Applications
AI applications span models, agents, and cloud environments in ways traditional security tools weren’t designed to understand. Here’s why visibility breaks — and how a new, implementation-agnostic approach helps teams safely adopt AI...
The Agile FedRAMP Playbook, Part 3: Preventative Risk Management by building Secure by Design
In the third part of our series, we explore Preventative Risk Management. We discuss how shifting security into the development lifecycle helps organizations meet FedRAMP requirements...
Security Insights Where Work Happens: Notion Custom Agents + Wiz MCP
Bring Wiz cloud security insights into your Notion workspace with Custom Agents — enabling automated reporting, investigation, and security workflows where teams already work...
Wiz Leads the 2026 Latio Application Security Report with awards in 4 categories
Wiz has been recognized in the 2026 Latio Application Security Report. Wiz was spotlighted and awarded four distinct badges, reflecting our continuous commitment to protecting applications all the way from code to runtime...
Building an Agentic Cloud Security Ecosystem: A Reference Architecture with Wiz MCP and Infosys Cyber Next
Coordinated Multi-Agent Investigation and Remediation...
The Agile FedRAMP Playbook, Part 2: Proactive Risk Management with Continuous Monitoring
In the second part of our series, we dive into Proactive Risk Management. Discover how Wiz for U.S. Government automates visibility and prioritizes risk remediation to meet FedRAMP continuous monitoring requirements without slowing down innovation...
Would You Click ‘Accept’? Automatically detecting malicious Azure OAuth applications using LLMs
How Wiz Research automates detection of emerging malicious Azure app and consent phishing campaigns...
Wiz Named a Leader in The Forrester Wave™: Cloud Native Application Protection Solutions, Q1 2026
Forrester’s CNAPP evaluation rated Wiz with the highest Current Offering category score, which we believe reflects our commitment to protecting everything built and run in the cloud...
From Detection to Remediation: It’s Time to Rethink AppSec Around Exploitability and Root Cause Fixes
Learn how Wiz is fundamentally changing AppSec by using the Security Graph to connect validated runtime vulnerabilities directly back to source code. Stop chasing alerts and fix what’s truly exploitable...
The Agile FedRAMP Playbook, Part 1: Why Risk is Your Best Starting Point
Compliance shouldn't mean a standstill for innovation. The first of our four-part series explores how Wiz quickly reached FedRAMP High through a "risk-first" philosophy. In parts 2-4 we’ll explore how Wiz helps with FedRAMP requirements through proactive, preventative, and reactive risk managemen...
Introducing AI Cyber Model Arena: A Real-World Benchmark for AI Agents in Cybersecurity
Wiz Research’s AI Cyber Model Arena benchmarks offensive AI security on 257 real-world challenges zero-days, CVEs, API/web, and cloud across AWS/Azure/GCP/K8s demonstrating what AI models and agents can really do...
Wiz + Spotify Backstage: Security at the Developer’s Desk
Bring Wiz Issues directly into Backstage, so developers can act on security issues in the tools they use everyday...
Building AI Security Together: New Ways to Partner with Wiz for AI Security in 2026
Enhancing the Wiz Integration Network with a new WIN MCP, developer AI agent, WIN AI security category, and partner AI hackathon...
Hacking Moltbook: The AI Social Network Any Human Can Control
1 exposed database. 35,000 emails. 1.5M API keys. And 17,000 humans behind the not-so-autonomous AI network...
The Year in Wiz Research: 2025 Most Read Blogs
A look back at the cloud security investigations and vulnerabilities that defined the year, from AI breakthroughs to supply chain shifts...
AI Agents vs Humans: Who Wins at Web Hacking in 2026?
Wiz Research teamed up with Irregular, a frontier AI security lab, to settle this once and for all...
Introducing the WIN Partner Index: The Integrations That Powered Modern Cloud Security in 2025
A data-driven industry benchmark showing how integrations are adopted, gain traction, and deliver value across modern cloud security programs...
AI-Powered Forensics, at Cloud Speed
Reviewing Wiz’s approach to forensics in the cloud era, and announcing the public preview of AI-powered, context-aware forensics capabilities...
Introducing SITF: The First Threat Framework Dedicated to SDLC Infrastructure
Moving beyond simple checklists to visualize, map, and block attacks on production SDLC infrastructure...
WizExtend is Here: AI and Cloud Security Insights in Your Daily Workflow
Get risk insights and take remediation actions right from your in-browser CSP portal, VCS console, or as you’re reading up on the latest threat research...
From Detection to Remediation: Wiz in Your JetBrains IDE
The Wiz JetBrains IDE plugin is now generally available, enabling developers to fix risks before code leaves their local environment...
Agentic Browser Security: 2025 Year-End Review
Are agentic browsers the new Flash? A 2025 review of new attacks, vendor security layers, and a roadmap for navigating AI browser risks...
CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild
Wiz Research discovered a critical supply chain vulnerability that abused a CodeBuild misconfiguration to take over key AWS GitHub repositories - including the JavaScript SDK powering the AWS Console...
A 90-Day Action Plan to Turn Resolutions into Results with Wiz
Whether you’re new to Wiz or early in your cloud security journey, start the year strong by turning cloud security resolutions into real impact in your first 90 days with Wiz...
Introducing the Wiz Partner Alliance: A New Chapter for Partner Success
Building the future of cloud security, together...
Preparing for Post-Quantum Cryptography
Learn what you can do today to prepare for Q-Day...
Wiz Recognized as a 2025 Customers’ Choice in the Gartner® Peer Insights™ Voice of the Customer for CNAPP
Wiz is proud to be the only vendor recognized as a Customers’ Choice for two consecutive years...
Expanding the Zero Critical Club to set a new standard for AppSec and SecOps teams
We are introducing Zero Code Criticals and Zero Time to Respond clubs to give every team a clear north star for secure development and rapid response...
Snipping the Long Tail of Shai-Hulud 2.0
Wiz Research reveals the data behind Shai-Hulud's 2.0 long tail, the massive gap in cloud credential rotation, a potential link to the Trust Wallet incident, and how we finally "snipped the tail" on a month of ongoing infections...
Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert
Outpacing React2Shell using pre-breach alerts from Wiz ASM to eliminate exploitable risk before attackers find them...
MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know
Detect and mitigate CVE-2025-14847, an unauthenticated information leak vulnerability in MongoDB. Exploitation has been observed in the wild. Organizations should patch urgently...
The Kenna Transition: Your Strategic Shift to Exposure Management
How the Kenna sunset is giving security leaders the opportunity to outgrow vulnerability silos and adopt a unified exposure management model...
Bringing Oracle Cloud Identity to Wiz
Unified visibility into OCI identities, permissions, and policies — mapped into Wiz’s Security Graph...
From MCP to Vibe Coding: Full Endpoint Visibility in Wiz AI Security
How Wiz AI-SPM delivers a complete view of exposed AI application endpoints — from Vibe Coding to MCP — and why that visibility matters...
Zero‑Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025, with a Record High of CVEs in Critical Cloud Infra
ZDC awarded hackers $320,000 and uncovered a record‑breaking tally of critical CVEs for core cloud infrastructure, underscoring the scale and urgency of securing the open‑source software that underpins the modern cloud...