Blog
Wiz in the Verizon DBIR: How AI Acceleration and Cloud Sprawl Impact Modern Defense
Verizon's latest DBIR highlights how attackers are exploiting familiar weaknesses at increasing speed and scale. Here's what Wiz research reveals about vulnerabilities, trust relationships, and AI in modern cloud environments.
GhostApproval: A Trust Boundary Gap in AI Coding Assistants
Uncovering a category-level blind spot in modern AI coding assistants, and why the Human-in-the-Loop safety model fails against this classic threat
Wiz ASM for any environment, any risk, everywhere
Protect the modern attack surface with new auto-reconnaissance capabilities, deep internal context, and the Red Agent to find any risk, anywhere.
Build AI Security Agents with Wiz MCP
Power AI-driven security with trusted security context, Wiz AI Agents, and Wiz AI Skills.
Breaking Down the White House’s Actions on Post-Quantum Cryptography Readiness
The U.S. Federal Migration to PQC Just Got Real
Start Secure in the AI Era: Accelerating AI Threat Readiness with WizOS
As the time from vulnerability discovery to exploitation shrinks, building with minimal, secured components is more important than ever. Here is how WizOS helps.
Bridging the Visibility Gap: A Unified Security Operating Model for Hybrid Cloud Teams
Move beyond chasing vulnerabilities to a unified hybrid risk strategy. The Sensor Workload Scanner is now GA and extends our risk prioritization engine to on-premise environments to identify the critical attack paths across your hybrid cloud.
The Borderless Attack Surface: Securing Public Sector Hybrid Environments
Aligning Modern CNAPP Telemetry with realistic risk assessments to drive agency efficiency through cross-team collaboration
The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API
Part 2: How the Red Agent bypassed backend resolvers to expose an entire airline booking database in fifteen minutes
MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension
By automatically loading MCP servers from workspace files, Amazon Q enabled attackers to execute code and access sensitive cloud environments.
Uncovering Hidden Attack Paths in Cloud Environments Using Runtime Signals
Wiz now layers runtime signals into the Security Graph, exposing hidden attack paths to give security teams a complete picture of risk.
How AI Is Rewriting the SecOps Playbook
The threat landscape has changed. Adversaries operate at machine speed, shrinking attacks from days to minutes. Defenders can no longer investigate and respond before damage occurs. In this new era, Security Operations must prioritize speed, automation, and continuous decision-making.
AI Threat Readiness Pillar 4: Detect and contain threats in real-time
Your guide to operationalizing AI-powered threat detection and response with Wiz to stay ahead of AI-driven attackers.
Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows
Secure your Windows fleet without sacrificing performance. Wiz pairs real-time threat detection with a memory-safe architecture that scales efficiently to protect your essential cloud infrastructure.
The President’s Executive Actions on AI Have a Lot to Say on Cybersecurity
The spotlight has been on frontier models, but the goals are more far reaching -- including supercharging cyber defense and remediating risk at machine speed
The Red Agent POV: How it Reasoned its Way to SSRF
Part 1: How the Red Agent uncovered a multi-step attack chain allowing SSRF-to-Local-File-Read on a GCP Cloud Run API
Introducing the Red Agent POV Series
An inside look at how the Red Agent, our AI-Powered Attacker, uncovers complex, exploitable risks in the wild
Wiz Exposure Management Dashboard: Your CTEM Command Center
New exposure management dashboard helps organizations align with CTEM to stay ahead in an era of AI exploiting vulnerabilities faster than ever
Navigating the New Federal Logging Mandate | OMB Memorandum M-26-14
The White House Memorandum puts in place an “adaptive framework,” where agencies make risk-based, prioritized logging decisions.
AI Threat Readiness Pillar 3: Perform AI Code Analysis Natively in Wiz
Your guide to operationalizing AI-powered code analysis with Wiz to stay ahead of AI driven development and adversaries
AI Threat Readiness Pillar 2: Accelerate Patching and Response
Your guide to operationalizing ownership, remediation, and response with Wiz to keep pace with the AI threat landscape.
Introducing Wiz Cloud Cost: Powering Cost Management and Optimization with Context
Wiz unifies cloud and AI cost visibility to help teams eliminate waste and improve spend efficiency across their AWS, Azure, and GCP environments.
AI Threat Readiness Pillar 1: Reduce Critical Exposures & Scan with AI
Diving into the first pillar of the AI Threat Readiness Framework and how Wiz helps
Eliminate Critical API Attack Paths with Wiz API SPM
Wiz API SPM is now GA, enabling customers to discover APIs, assess APIs for exploitability, and prioritize remediation to mitigate the risk of an API-related breach.