Twenty Years of Cloud Security Research
On March 14, 2006, AWS announced S3, marking the first AWS service that was generally available and what AWS celebrates as their start. Azure and…
Category: CloudSecurity
Trivy Compromised by “TeamPCP” | Wiz Blog
Update March 23, 17:40 UTC: Wiz Research has identified a parallel compromise of kics-github-action On March 19, 2026, threat actors compromised Aqua Security’s Trivy vulnerability…
AI Runtime Security: From Input to Real-World Impact
When most people think about AI runtime security, they think about prompt injection. But securing AI in production is much broader than filtering inputs —…
Uncovering Hidden Attack Paths in Cloud Environments Using Runtime Signals
Getting comprehensive visibility into your cloud environment starts with agentless inventory and risk analysis. Wiz builds a complete picture of your attack surface and the…
Wiz Launches AI Application Protection Platform (AI-APP)
AI hasn’t just changed how we build — it has fundamentally changed how risk emerges. AI applications are dynamic, interconnected systems — combining models, agents,…
Introducing Wiz Agents & Workflows for AI Security
AI is changing not just how we build — but how security operates. AI-generated code, autonomous agents, and dynamic applications are increasing both the speed…
Restrict AWS Management Console access to expected networks with sign-in resource-based policies and RCPs
Amazon Web Services (AWS) recently announced support for resource-based policies and resource control policies (RCPs) for AWS Sign-In. By using resource-based policies and RCPs, you…
Introducing the Wiz Red Agent- AI-Powered Attacker
Update (April 22, 2026): We are excited to announce that the Red Agent is now in Public Preview. At RSA 2026, we announced the launch…
How AI is Rewriting the SecOps Playbook
AI is changing the economics of both software development and cyberattacks. Organizations are shipping code faster than ever, increasingly with the help of AI agents…
KICS GitHub Action Compromised: TeamPCP Supply Chain Attack
The KICS GitHub Action was compromised with credential-stealing malware by TeamPCP, the same group behind the Trivy attack. KICS is an open source infrastructure as…
LiteLLM TeamPCP Supply Chain Attack: Malicious PyPI Packages
LiteLLM is the latest victim in TeamPCP’s spree of attacks targeting the open source ecosystem. Previously, Wiz has covered the compromises of Aqua Security’s Trivy…
Introducing Wiz Workflows: Build a Self-Healing Cloud
AI isn’t just helping developers write code: it’s reshaping the entire development lifecycle. With AI-assisted tools, agents, and MCP integrations speeding up development, the cloud…