Skip to content
c/
coldstart
.dev
About
Blogs
All
Wiz
AWS
Google
Topic
All topics
Blogs
Threats
Latest from Wiz
100 articles
Page 1
Previous
Next
Wiz
/
Blogs
·
1d ago
The ROI of Agentic Remediation: Real-World Results with Wiz Green Agent
Wiz
/
Blogs
·
2d ago
From Reactive to Proactive: Empowering SOC Teams with the Wiz Red and Blue Agents
Wiz
/
Blogs
·
5d ago
“Black October” for AI Developer Platforms
Wiz
/
Blogs
·
5d ago
Key Takeaways: AI Threat Readiness Survey Report 2026
Wiz
/
Blogs
·
6d ago
The Rise of Agentic Attacks: What They Look Like, and Where They're Headed
Wiz
/
Blogs
·
8d ago
PHP2Shell: Exploitation Attempts and Remediation Trends
Wiz
/
Blogs
·
9d ago
The Pwn Request Reckoning: What Still Works Against GitHub Actions
Wiz
/
Blogs
·
10d ago
Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles
Wiz
/
Blogs
·
10d ago
Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
Wiz
/
Blogs
·
13d ago
ASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context
Wiz
/
Blogs
·
13d ago
ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors
Wiz
/
Blogs
·
14d ago
PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet
Wiz
/
Blogs
·
14d ago
LiteLLM Compromised, Steals Credentials
Wiz
/
Blogs
·
15d ago
Wiz Sensor on GKE. 1-Click Runtime Protection, Now Native.
Wiz
/
Blogs
·
15d ago
From Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM Usage
Wiz
/
Blogs
·
16d ago
Supply Chain Zero Days: Closing the Gap Between Publication and Detection
Wiz
/
Blogs
·
16d ago
Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack
Wiz
/
Blogs
·
21d ago
ASPM in the AI Era Part 1: Unified Visibility Across Your Stack
Wiz
/
Blogs
·
21d ago
Securing the Mission at Machine Speed: Wiz AI Agents Arrive in Wiz for Gov
Wiz
/
Blogs
·
28d ago
How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed)
Wiz
/
Blogs
·
29d ago
Introducing Wiz AI SAST: Application Security that Understands Your Code and Your Infrastructure
Wiz
/
Blogs
·
30d ago
What’s New in Wiz Service Catalog: Smarter Discovery, Governance, and Service-Level Context
Wiz
/
Blogs
·
35d ago
Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
Wiz
/
Blogs
·
36d ago
The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub
Wiz
/
Blogs
·
37d ago
Introducing the Wiz Partner Alliance Managed Service Provider Program
Wiz
/
Blogs
·
41d ago
Wiz Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026
Wiz
/
Blogs
·
41d ago
Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure
Wiz
/
Blogs
·
43d ago
Growing the WIN AI Ecosystem with Agent Integrations
Wiz
/
Blogs
·
48d ago
Exploring the new AWS Sign Up experience
Wiz
/
Blogs
·
48d ago
Building an AI Detection Engine That Understands Agent Intent
Wiz
/
Blogs
·
50d ago
Investing Together: Wiz Defend and Google Security Operations
Wiz
/
Blogs
·
55d ago
Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329
Wiz
/
Blogs
·
55d ago
Wiz achieves GovRAMP High Authorization
Wiz
/
Blogs
·
56d ago
Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise
Wiz
/
Blogs
·
63d ago
How Developers Prevent Production Risk at the Source
Wiz
/
Blogs
·
64d ago
Introducing Continuous Vulnerability Assessment: Real-Time Defense for the AI Threat Era
Wiz
/
Threats
·
65d ago
JetBrains Cadence Compromised via Exploitation of TeamCity Vulnerability (Incident)
Wiz
/
Threats
·
65d ago
Coder Module Registry Compromise Leads to Credential-Stealing Malware Distribution (Incident)
Wiz
/
Threats
·
69d ago
@7nohe/openapi-react-query-codegen Compromised in Supply Chain Attack (Campaign)
Wiz
/
Blogs
·
69d ago
Inside 90 days of attacks on AI infrastructure
Wiz
/
Blogs
·
69d ago
From Concept to Context Engine: How Wiz Built AI-Powered Data Discovery
Wiz
/
Blogs
·
69d ago
Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps
Wiz
/
Blogs
·
70d ago
Democratizing FinOps with Wiz: Driving Cost Attribution with the Wiz Service Catalog
Wiz
/
Blogs
·
70d ago
The State of Cloud Risk 2026: Most Security Findings Aren’t Real Attacker Opportunities
Wiz
/
Blogs
·
71d ago
日本のビジネスパーソンを対象としたWiz調査で 「AI導入加速」はクラウド移行を上回ることが明らかに
Wiz
/
Blogs
·
76d ago
Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
Wiz
/
Threats
·
77d ago
arrayref and Other Rust Crates Hijacked in Supply Chain Attack (Campaign)
Wiz
/
Blogs
·
77d ago
Wiz Penetration Test Findings is now GA
Wiz
/
Blogs
·
78d ago
How to Spot and Stop Rogue Device Joins
Wiz
/
Blogs
·
78d ago
Announcing the 2026 Wiz Partner Alliance Award Winners
Wiz
/
Blogs
·
79d ago
Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Due to an AI-Generated GitHub Copilot “Autofix”
Wiz
/
Blogs
·
79d ago
The Closed Loop Remediation Playbook with Wiz
Wiz
/
Blogs
·
82d ago
Wiz on Wiz: How the Wiz FinOps Team Uses Wiz Cloud Cost
Wiz
/
Blogs
·
82d ago
Securing Data in the AI era
Wiz
/
Blogs
·
83d ago
How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign
Wiz
/
Blogs
·
83d ago
Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain
Wiz
/
Blogs
·
86d ago
Inside the Metabase SQLi: Exploited in the Wild
Wiz
/
Threats
·
90d ago
Payroll Pirates Phishing Campaign Targets Microsoft 365 Financial Workflows (Campaign)
Wiz
/
Blogs
·
90d ago
Cloud Threat Highlights: H1 2026
Wiz
/
Blogs
·
90d ago
Wiz Brings Automated DISA STIG Assessment to Amazon Linux 2023 and Windows Server 2025
Wiz
/
Blogs
·
92d ago
Wiz at Black Hat 2026: Driving AI Threat Readiness
Wiz
/
Blogs
·
92d ago
keyv and cacheable npm Package Hijacked in Supply Chain Attack
Wiz
/
Threats
·
93d ago
keyv and cacheable npm Package Hijacked in Supply Chain Attack (Campaign)
Wiz
/
Blogs
·
93d ago
Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Era
Wiz
/
Blogs
·
96d ago
S3 Clones in the Neoclouds
Wiz
/
Threats
·
97d ago
CaptiveCrunch: Midnight Blizzard Hospitality Network AiTM Campaign (Campaign)
Wiz
/
Blogs
·
97d ago
Rethinking scanning for the AI era: Wiz’s Agentic Code Security System
Wiz
/
Blogs
·
97d ago
CosmosEscape: Taking Over Every Database in Azure Cosmos DB
Wiz
/
Blogs
·
98d ago
Wiz’s First 6 Months as Part of Google
Wiz
/
Blogs
·
98d ago
The Wiz Red Agent is Now Generally Available
Wiz
/
Blogs
·
99d ago
The risk hiding behind exposed MCP servers
Wiz
/
Blogs
·
99d ago
Accelerating CISA BOD 26-04 Vulnerability and Triage Activities through Wiz
Wiz
/
Blogs
·
100d ago
Atlas: Wiz's autonomous AI Agent for vulnerability research, ranked #1 on CyberGym
Wiz
/
Blogs
·
105d ago
Opening the Black Box: Agentless Threat Detection for Virtual Appliances
Wiz
/
Threats
·
106d ago
Cl0p Exploitation of PTC Windchill and FlexPLM Vulnerability (Campaign)
Wiz
/
Blogs
·
106d ago
Agentless Visibility: Uncovering Cloud Blind Spots
Wiz
/
Blogs
·
106d ago
300 WINtegrations Strong: An Open Security Ecosystem Built for the Speed of AI
Wiz
/
Blogs
·
107d ago
Exploitation in the Wild of wp2shell
Wiz
/
Threats
·
109d ago
SleeperGem: RubyGems Supply Chain Attack Targets Dormant Maintainer Accounts (Campaign)
Wiz
/
Threats
·
111d ago
NadMesh: Autonomous AI-Focused Botnet Targeting Cloud and AI Infrastructure (Campaign)
Wiz
/
Threats
·
112d ago
CVE-2025-54068 Exploited in Large-Scale Laravel Livewire Credential Theft Campaign (Campaign)
Wiz
/
Blogs
·
112d ago
The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System
Wiz
/
Blogs
·
113d ago
M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions
Wiz
/
Threats
·
114d ago
AsyncAPI Supply Chain Compromise via GitHub Actions (Campaign)
Wiz
/
Blogs
·
114d ago
Why IaC Coverage Belongs on Your Security Dashboard
Wiz
/
Threats
·
116d ago
Cryptomining campaign targeting Linux SSH servers (Campaign)
Wiz
/
Threats
·
117d ago
Jscrambler npm Package Compromised in Supply Chain Attack (Campaign)
Wiz
/
Blogs
·
118d ago
How ProdSec uses Wiz
Wiz
/
Blogs
·
118d ago
Wiz in the Verizon DBIR: How AI Acceleration and Cloud Sprawl Impact Modern Defense
Wiz
/
Threats
·
119d ago
Compromised Injective SDK npm Package Exfiltrates Cryptocurrency Wallet Keys (Campaign)
Wiz
/
Blogs
·
119d ago
GhostApproval: A Trust Boundary Gap in AI Coding Assistants
Wiz
/
Blogs
·
119d ago
Wiz ASM for any environment, any risk, everywhere
Wiz
/
Threats
·
120d ago
Coordinated GitHub API Enumeration and Access Token Abuse (Campaign)
Wiz
/
Blogs
·
121d ago
FAQs from the Field: Is Wiz a Runtime Security Tool?
Wiz
/
Blogs
·
125d ago
Build AI Security Agents with Wiz MCP
Wiz
/
Blogs
·
125d ago
Breaking Down the White House’s Actions on Post-Quantum Cryptography Readiness
Wiz
/
Blogs
·
127d ago
Start Secure in the AI Era: Accelerating AI Threat Readiness with WizOS
Wiz
/
Blogs
·
128d ago
Bridging the Visibility Gap: A Unified Security Operating Model for Hybrid Cloud Teams
Wiz
/
Blogs
·
128d ago
The Borderless Attack Surface: Securing Public Sector Hybrid Environments
Wiz
/
Blogs
·
128d ago
The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API
Page 1
Previous
Next