Newsroom

"AI isn’t just helping defenders find vulnerabilities. It’s giving attackers the speed and expertise to exploit them faster than many companies can respond...."

"Demand for artificial-intelligence models turns AI credentials into lucrative black-market currency and target for cybercriminals..."

"Wiz researchers uncovered the secret-stealing supply-chain attack ..."

"The PHP scare may have faded from your feed, but the cleanup is far from over. ..."

"An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories...."

"In early August, Sagi Tzadik asked an AI agent to take a security flaw it had found in WordPress and see whether the same weakness could be made to work against Drupal, another popular content management system...."

"AI tools helped find one of the most severe online bugs ever. Cyber experts are racing to patch it before hackers use AI to exploit it...."

"As AI agents become increasingly adept at finding and exploiting vulnerabilities, companies are turning to automated systems that continuously test, patch, and defend their software...."

"AI assistants generate more code than traditional reviews can handle. Security checks in the editor and blocks in the build pipeline catch vulnerabilities before they land as workloads in the cloud or data center...."

"AI agents are proliferating in businesses, but their rapid deployment exposes them to increasing cybersecurity risks. Experts are struggling to keep pace, while solutions are emerging to secure these tools...."

"According to a recent report by cybersecurity firm Wiz, 81% of cloud services don’t even allow the option to configure systems to post-quantum algorithms, and less than 1% of companies are currently using post-quantum algorithms for digital signatures that verify users and systems are who they say they are. “Everywhere we look there is still a lot of work to be done,” report author Scott Piper wrote...."

"Yinon Costica co-founded Wiz, which Google acquired for $32 billion in the largest acquisition in its history. I sat down with him at Wiz in Tel Aviv to talk about the race to secure a world increasingly run by AI...."

"Alon Schindel joins Gregor Vand to discuss how AI has compressed the time from disclosure to exploit, the prospects for defenders to stay ahead, how Wiz approaches scanning and remediation, the growing strain on open source maintainers, and more...."

"The new program from Google-owned Wiz includes the launch of the Wiz Tenant Manager and consumption-based billing, and should enable MSPs and MSSPs to ‘scale their Wiz practices significantly,’ Channel Chief Andy Ritchie tells CRN...."

"Assaf Rappaport, CEO of Wiz—which was sold to Google for $32 billion—tells Roni Kuban how the deal negotiations unfolded...."

"The Google subsidiary, which helped a railroad and two hospitals, invited others to apply for its free scanning service...."

"Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said in a report...."

"Volume, variety and velocity were the catchcry of the big data age. But the same three words describe the threat landscape organisations face today. Criminals, nation-states and opportunists armed with AI can launch more attacks faster than ever before...."

"North Korean hackers are responsible for a new open source software (OSS) supply chain attack targeting the Rust ecosystem, cybersecurity firm Wiz reports...."

"Security researchers at Wiz, part of Google Cloud, have discovered a critical script injection vulnerability in one of Snowflake’s public repositories on GitHub that GitHub’s Advanced Security missed...."

"Wiz has named the winners of its 2026 Australian Partner Awards, the company's inaugural partner recognition programme in Australia...."

"Researchers from multiple security firms observed a variant of Mini Shai-Hulud, self-replicating malware linked to TeamPCP, in all the affected packages...."

"Cybersecurity company Wiz said on Thursday it had found a sweeping flaw that could have compromised Microsoft and thousands of its ​cloud customers...."

"IT professionals should use an abundance of care with AI coding assistants, one threat researcher warns...."

"Wiz’s new AI system just beat Mythos and GPT-5.5 Cyber on a key vulnerability discovery benchmark...."

"Former bug bounty researcher Gal Nagli describes how AI is replacing manual security research with automated attacks and defenses...."

"A “systematic vulnerability pattern” in at least six of the most widely used AI coding assistants can be abused to trick agents into accessing files outside the workspace sandbox, leading to remote code execution on the developer's machine...."

"Securing an offer from a mature startup may require a different approach than when going for a role at an early-stage venture...."

"Yinon Costica describes rare access to Google’s AI engine after historic exit...."

"Wiz Research found that Amazon's AI coding assistant auto-loaded MCP servers from repository config files with no consent step, handing attackers full access to developers' cloud accounts..."

"Alice Carlisle explains how Google Cloud’s latest security business uncovers hundreds of hidden corporate engineering tools within minutes of deployment..."

"Wiz CTO Ami Luttwak tells the Globes TECH IL Conference that AI is affecting cybersecurity faster than he expected...."

"The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prioritize code shipping over security...."

"“The Miasma repository is an evolution of the Mini Shai-Hulud toolkit, and was open-sourced June 8 via four previously compromised users,” Rami McCarthy, principal threat researcher at Wiz, told The Register. ..."

"Yinon Costica, VP of Product at Wiz, on building a product-led enterprise motion, compressing time-to-value, and winning cloud security with focus..."

"Federal agencies are rapidly adopting generative artificial intelligence, AI-enabled enterprise software and AI coding assistants to improve productivity and modernize operations. ..."

"A so-called software supply chain attack, in which hackers corrupt a legitimate piece of software to hide their own malicious code, was once a relatively rare event but one that haunted the cybersecurity world with its insidious threat of turning any innocent application into a dangerous foothold in a victim’s network. ..."

"The new wave of Mini Shai-Hulud campaign unearthed in the wild is proof that software supply chain poisoning is quickly becoming the repeat hit of 2026. ..."

"Fresh kernel flaw comes with public exploit code and continues ugly run of highly reliable privilege escalation bugs tied to memory and page-cache handling..."

"On May 12, Wiz Cloud Japan held a press briefing on cyberattack trends in the AI ​​era and new cloud security risks. ..."

"Critical flaws affecting core components and extensions in PostgreSQL and MariaDB could allow remote code execution. The bugs, some over 20 years old, have now been patched...."

"When it comes to securing enterprise supply chains, now heavily infused with AI applications and agents, a software bill of materials (SBOM) no longer provides a complete inventory of all the components in the environment. Enter AI-BOMs...."

" Wiz Research used AI models to uncover a vulnerability in GitHub’s internal git infrastructure that could have allowed attackers to access millions of public and private code repositories...."

"A new report out today from Wiz finds that artificial intelligence has shifted from experimental tooling to default cloud infrastructure, with 81% of observed environments running managed AI services and 90% running self-hosted AI software...."

"With Wiz and AI agents, Google is gearing up for a cyberwar where machines fight at speeds humans can't match...."

"Six insights from Wiz co-founder and CTO Ami Luttwak on hiring, speed, branding, and scaling globally...."

"Wiz recently announced the launch of its new AI Application Protection Platform, which is aimed at providing “end-to-end” security for AI applications, the Google-owned company said...."

"Sophisticated cyberattacks targeting a variety of open source projects, including the Trivy security-scanner project, the widely used Axios Javascript package, as well as Anthropic's accidental publishing of source code for its flagship Claude Code — all in a 10-day period — underscore the risks posed to software supply chains...."

"“We now believe the new models are essentially the best cybersecurity researchers in the world, and that’s a problem,” Luttwak said, because it means hackers could use the models’ capabilities to find and exploit vulnerabilities...."

"Cybersecurity risks are becoming more complex as AI adoption outpaces governance, leaders said at an Expert Voices roundtable last week...."

"Suspected North Korean hackers have bugged a software package that has been used by thousands of US companies in a major supply-chain attack that could take months to recover from, security experts said Tuesday...."

"Wiz's Ami Luttwak on AI-built apps bypassing authentication, exposing customer data..."

"TeamPCP hackers tell Forbes that AI helped them launch a devastating spree of attacks. But they wouldn’t have succeeded if developers’ security hadn’t been so weak in the first place...."

"Google has officially acquired cybersecurity firm Wiz for $32 billion in cash, a full year after the companies announced the deal. This marks Google’s biggest acquisition in its history...."

"After two years of finding flaws in AI infrastructure, two Wiz researchers advise security pros to worry less about prompt injection and more about vulnerabilities...."

"Wiz has continued to expand its platform with updates including the launch of its Model Context Protocol (MCP) Server. ..."

"AI agents are increasingly seen as a way to reinforce the capabilities of cybersecurity teams — but which can do the best job? Wiz has developed a benchmark suite of 257 real-world challenges spanning five offensive domains: zero-day discovery, CVE (code vulnerability) detection, API security, web security, and cloud security to find out...."

"In the new episode of Handelsblatt Disrupt, technology reporter Larissa Holzki spoke with the entrepreneur about three new cyber threats in the AI ​​age..."

"Moltbook exposed private data of over 6,000 users, Wiz reports..."

"Wiz and Irregular recently completed a joint study on the true economics of AI-driven cyberattacks. ..."

"The CodeBuild CI/CD misconfiguration—which was discovered by Wiz researchers and quickly remediated by AWS—could have put a vast number of AWS customer environments at risk and should serve as an ‘alarm bell’ for the cybersecurity industry, Wiz CTO Ami Luttwak tells CRN...."