Wiz Penetration Test Findings is now GA
We are excited to share that the Wiz Penetration Test Findings is now Generally Available (GA), giving offensive security teams a single home for all…
Category: CloudSecurity
Ultralytics AI Library Hacked via GitHub for Cryptomining
Security researchers have identified a supply chain attack targeting deployment versions of the Ultralytics Python package. The compromised versions, 8.3.41 and 8.3.42, contain malicious code…
Wiz supports creation of new Japan tenants
Wiz infrastructure now supports the creation of new tenants in Tokyo and Osaka, furthering our mission to empower leading organizations in Japan to accelerate their…
A Cloud-First Approach to Vulnerability Remediation: A Holistic Approach
Editor’s note: In our previous blog post, we talked about a workflow for managing and prioritizing vulnerabilities in the cloud. In this blog post, we…
Implement custom authentication for tools integration using request Lambda interceptor in AgentCore Gateway
When deploying AI agents with Amazon Bedrock AgentCore, organizations benefit from built-in modern support for OAuth 2.0, AWS Identity and Access Management (IAM), and API…
How to Stop AI-Generated Rogue Entra Device Joins
Attackers have long relied on repeatable tools and conventions that leave recognizable fingerprints. AI threatens to erode this defensive advantage by enabling attackers to vary…
2026 Wiz Partner Alliance Award Winners
Building cloud security at scale takes more than just great technology. It requires a powerful ecosystem of partners aligned around a unified platform story spanning…
Top AWS re:Invent Announcements for Security Teams 2024
AWS’s largest event of the year is re:Invent, which occurred just after Thanksgiving from Dec 2-6 this year. The weeks prior are referred to as…
Inside a New Wave of LLM Hijacking on AWS
On November 26, 2024, Wiz Research identified a threat actor we track as JINX-2401 attempting to hijack LLM models across multiple AWS environments. With the…
Red Agent Exploits Snowflake Vuln Missed by Github Copilot
As part of ongoing security research conducted through Snowflake’s HackerOne vulnerability disclosure program, Wiz Research’s “Red Agent”—an autonomous, AI-powered security research tool—identified a critical GitHub…
Updates to your AWS Sign-In experience
Amazon Web Services (AWS) is gradually introducing updates to the AWS Sign-In and sign-up experience to a limited number of customers. We’re sharing these changes…
The Closed Loop Remediation Playbook with Wiz
As response windows shrink due to AI-powered exploitation, security teams need to get three historically difficult challenges right: discovering risk, prioritizing it, and fixing it…