News · Wiz blog

• 
  Wiz blog 4 Aug

  Wiz at Black Hat 2026: Driving AI Threat Readiness

  Announcing new capabilities that help organizations prepare for the AI era by expanding visibility and accelerating response, so security teams can defend at machine speed.
• 
  Wiz blog 4 Aug

  keyv and cacheable npm Package Hijacked in Supply Chain Attack

  Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages.
• 
  Wiz blog 3 Aug

  Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Era

  As AI expands who builds software, the developer workstation is becoming a new security perimeter. AI and third-party software increasingly operate with access to your most sensitive credentials and cloud environments.
• 
  Wiz blog 31 Jul

  S3 Clones in the Neoclouds

  S3 compatible services carry many of the same concerns as the original S3 service. This article highlights which assumptions break and what risks remain.
• 
  Wiz blog 30 Jul

  Rethinking Scanning for the AI Era: Wiz’s Agentic Code Security System

  Enterprise AI AppSec requires more than powerful models. It requires a system that balances speed, depth, and cost across the software lifecycle.
• 
  Wiz blog 30 Jul

  CosmosEscape: Taking Over Every Database in Azure Cosmos DB

  A critical vulnerability chain in Azure Cosmos DB enabled full read and write access to every Cosmos DB database.
• 
  Wiz blog 29 Jul

  Wiz’s First 6 Months as Part of Google

  Fast gets even faster: redefining security for the AI era and doubling down on our multicloud commit
• 
  Wiz blog 29 Jul

  The Wiz Red Agent is Now Generally Available

  Continuously uncover complex, exploitable risks to stay ahead in the AI Threat Era with the Red Agent
• 
  Wiz blog 28 Jul

  The risk hiding behind exposed MCP servers

  How unauthenticated Model Context Protocol (MCP) servers are opening doors to sensitive cloud data, IAM, and command execution.
• 
  Wiz blog 28 Jul

  Accelerating CISA BOD 26-04 Vulnerability and Triage Activities through Wiz

  Wiz enables organizations to continuously assess environments against the CISA KEV catalog, automating risk prioritization, rapid remediation, and forensic triage workflows.
• 
  Wiz blog 27 Jul

  Atlas: Wiz's autonomous AI Agent for vulnerability research, ranked #1 on CyberGym

  See how Wiz built Atlas, an autonomous AI system for vulnerability research that validates every finding with a real, working exploit.
• 
  Wiz blog 22 Jul

  Opening the Black Box: Agentless Threat Detection for Virtual Appliances

  Mapping appliances event logs to real-world campaigns: A step-by-step researcher’s guide to continuous agentless monitoring.
• 
  Wiz blog 21 Jul

  Agentless Threat Detection: Illuminating Cloud Blind Spots

  How Agentless Workload Detection exposes hidden threats in virtual appliances and modern cloud networks.
• 
  Wiz blog 21 Jul

  300 WINtegrations Strong: An Open Security Ecosystem Built for the Speed of AI

  As AI accelerates how organizations build and how attackers operate, a deeply connected security ecosystem is how defenders keep up.
• 
  Wiz blog 20 Jul

  Exploitation in the Wild of wp2shell

  Wiz Research has identified exploitation of "wp2shell", a critical pre-auth RCE vulnerability chain impacting WordPress Core (CVE-2026-63030 & CVE-2026-60137). Attackers are deploying persistent webshells on vulnerable servers. Organizations should prioritize patching or applying WAF mitigations.

  CVE-2026-63030, CVE-2026-60137
• 
  Wiz blog 15 Jul

  The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System

  Part 3: How the Red Agent bypassed a credit and paywall system by changing a single client-side value from false to true.
• 
  Wiz blog 14 Jul

  M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions

  Detect and mitigate malicious @asyncapi npm packages linked to the latest npm supply chain attack.
• 
  Wiz blog 13 Jul

  Why IaC Coverage Belongs on Your Security Dashboard

  Rethinking IaC coverage as a funnel that shows how much of your infrastructure is governed, traceable, and ready for remediation at speed
• 
  Wiz blog 9 Jul

  How ProdSec uses Wiz

  Automation, resilience, and security for the modern age
• 
  Wiz blog 9 Jul

  Wiz in the Verizon DBIR: How AI Acceleration and Cloud Sprawl Impact Modern Defense

  Verizon's latest DBIR highlights how attackers are exploiting familiar weaknesses at increasing speed and scale. Here's what Wiz research reveals about vulnerabilities, trust relationships, and AI in modern cloud environments.
• 
  Wiz blog 8 Jul

  GhostApproval: A Trust Boundary Gap in AI Coding Assistants

  Uncovering a category-level blind spot in modern AI coding assistants, and why the Human-in-the-Loop safety model fails against this classic threat
• 
  Wiz blog 8 Jul

  Wiz ASM for any environment, any risk, everywhere

  Protect the modern attack surface with new auto-reconnaissance capabilities, deep internal context, and the Red Agent to find any risk, anywhere.
• 
  Wiz blog 6 Jul

  FAQs from the Field: Is Wiz a Runtime Security Tool?

  It's a common question we hear from prospects: "Does Wiz actually do runtime, or is it just risk prevention?" The short answer is yes, Wiz does runtime.
• 
  Wiz blog 2 Jul

  Build AI Security Agents with Wiz MCP

  Power AI-driven security with trusted security context, Wiz AI Agents, and Wiz AI Skills.
• 
  Wiz blog 2 Jul

  Breaking Down the White House’s Actions on Post-Quantum Cryptography Readiness

  The U.S. Federal Migration to PQC Just Got Real
• 
  Wiz blog 30 Jun

  Start Secure in the AI Era: Accelerating AI Threat Readiness with WizOS

  As the time from vulnerability discovery to exploitation shrinks, building with minimal, secured components is more important than ever. Here is how WizOS helps.
• 
  Wiz blog 29 Jun

  Bridging the Visibility Gap: A Unified Security Operating Model for Hybrid Cloud Teams

  Move beyond chasing vulnerabilities to a unified hybrid risk strategy. The Sensor Workload Scanner is now GA and extends our risk prioritization engine to on-premise environments to identify the critical attack paths across your hybrid cloud.
• 
  Wiz blog 29 Jun

  The Borderless Attack Surface: Securing Public Sector Hybrid Environments

  Aligning Modern CNAPP Telemetry with realistic risk assessments to drive agency efficiency through cross-team collaboration
• 
  Wiz blog 29 Jun

  The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API

  Part 2: How the Red Agent bypassed backend resolvers to expose an entire airline booking database in fifteen minutes
• 
  Wiz blog 26 Jun

  MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension

  By automatically loading MCP servers from workspace files, Amazon Q enabled attackers to execute code and access sensitive cloud environments.
• 
  Wiz blog 25 Jun

  Uncovering Hidden Attack Paths in Cloud Environments Using Runtime Signals

  Wiz now layers runtime signals into the Security Graph, exposing hidden attack paths to give security teams a complete picture of risk.
• 
  Wiz blog 24 Jun

  How AI Is Rewriting the SecOps Playbook

  The threat landscape has changed. Adversaries operate at machine speed, shrinking attacks from days to minutes. Defenders can no longer investigate and respond before damage occurs. In this new era, Security Operations must prioritize speed, automation, and continuous decision-making.
• 
  Wiz blog 23 Jun

  AI Threat Readiness Pillar 4: Detect and contain threats in real-time

  Your guide to operationalizing AI-powered threat detection and response with Wiz to stay ahead of AI-driven attackers.
• 
  Wiz blog 22 Jun

  Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows

  Secure your Windows fleet without sacrificing performance. Wiz pairs real-time threat detection with a memory-safe architecture that scales efficiently to protect your essential cloud infrastructure.
• 
  Wiz blog 18 Jun

  The President’s Executive Actions on AI Have a Lot to Say on Cybersecurity

  The spotlight has been on frontier models, but the goals are more far reaching -- including supercharging cyber defense and remediating risk at machine speed
• 
  Wiz blog 17 Jun

  The Red Agent POV: How it Reasoned its Way to SSRF

  Part 1: How the Red Agent uncovered a multi-step attack chain allowing SSRF-to-Local-File-Read on a GCP Cloud Run API
• 
  Wiz blog 17 Jun

  Introducing the Red Agent POV Series

  An inside look at how the Red Agent, our AI-Powered Attacker, uncovers complex, exploitable risks in the wild
• 
  Wiz blog 16 Jun

  Wiz Exposure Management Dashboard: Your CTEM Command Center

  New exposure management dashboard helps organizations align with CTEM to stay ahead in an era of AI exploiting vulnerabilities faster than ever
• 
  Wiz blog 12 Jun

  Navigating the New Federal Logging Mandate | OMB Memorandum M-26-14

  The White House Memorandum puts in place an “adaptive framework,” where agencies make risk-based, prioritized logging decisions.
• 
  Wiz blog 11 Jun

  AI Threat Readiness Pillar 3: Perform AI Code Analysis Natively in Wiz

  Your guide to operationalizing AI-powered code analysis with Wiz to stay ahead of AI driven development and adversaries
• 
  Wiz blog 9 Jun

  AI Threat Readiness Pillar 2: Accelerate Patching and Response

  Your guide to operationalizing ownership, remediation, and response with Wiz to keep pace with the AI threat landscape.
• 
  Wiz blog 8 Jun

  Introducing Wiz Cloud Cost: Powering Cost Management and Optimization with Context

  Wiz unifies cloud and AI cost visibility to help teams eliminate waste and improve spend efficiency across their AWS, Azure, and GCP environments.
• 
  Wiz blog 4 Jun

  AI Threat Readiness Pillar 1: Reduce Critical Exposures & Scan with AI

  Diving into the first pillar of the AI Threat Readiness Framework and how Wiz helps
• 
  Wiz blog 1 Jun

  From Posture to Runtime: A Unified Approach to OpenShift Security

  Unified visibility, posture, and runtime protection for security teams owning their side of the OpenShift shared responsibility model.
• 
  Wiz blog 1 Jun

  Eliminate Critical API Attack Paths with Wiz API SPM

  Wiz API SPM is now GA, enabling customers to discover APIs, assess APIs for exploitability, and prioritize remediation to mitigate the risk of an API-related breach.
• 
  Wiz blog 1 Jun

  Miasma: Supply Chain Attack Targeting RedHat npm Packages

  Detect and mitigate malicious npm packages linked to the latest npm supply chain attack, based on the open sourced Mini Shai-Hulud malware.
• 
  Wiz blog 28 May

  State of Post Quantum Cryptography

  Discussion of PQC relevant statistics that we see across our customers and other data sources.
• 
  Wiz blog 27 May

  Evidence at the Moment of Attack. Answers at AI Speed.

  Wiz Sensor Forensics is now generally available - automatically capturing forensic artifacts at the moment of detection and using AI to accelerate investigation for SOC and IR teams.
• 
  Wiz blog 27 May

  Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure

  Wiz CIRT and Wiz Research detail JINX-0164, a threat actor using LinkedIn social engineering, custom macOS malware, and CI/CD hijacking to target cryptocurrency organizations.
• 
  Wiz blog 27 May

  Defending at Machine-Speed: Building AI Threat Readiness with Wiz

  How Wiz helps organizations adopt an AI Operating Model for AI Threat Readiness

Older