Axios NPM Distribution Compromised in Supply Chain Attack
Overview On March 31, 2026 (at 00:21 UTC for v1.14.1 and 01:00 UTC for v0.30.4), an unknown threat actor compromised the npm account of an…
Category: CloudSecurity
Bringing Security Visibility to Vercel with Wiz
Modern application development has changed dramatically. Today’s apps are increasingly built using frontend frameworks, serverless functions, and edge infrastructure. Platforms like Vercel make it possible…
Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows
Today, we are thrilled to announce the General Availability of the Wiz Runtime Sensor for Windows. This milestone brings the same unified protection Wiz customers…
Cloud Attack Retrospective 2026: What Changed in 2025
In our latest Cloud Threats Retrospective, we analyzed publicly documented cloud incidents alongside cloud telemetry and hands-on investigations. The findings show that many of the…
Claude Mythos: AI Finds, Exploits Vulnerabilities Faster
TL;DR: Anthropic’s new model is capable of autonomously discovering zero-day vulnerabilities and developing working exploits. While access is currently highly restricted, Claude Mythos gives us…
GitHub Actions Security Pt 1: Attacks & Defenses
The tj-actions compromise hit 22,000 repositories. Ultralytics had cryptominers injected into PyPI releases. Trivy’s supply chain was breached through a workflow the authors believed was…
Introducing Shadow Data Discovery in Wiz
AI hasn’t just changed how we build — it’s changed how much data we keep. Across cloud environments, data is constantly created, duplicated, versioned, and…
Secure AI Endpoints with Wiz & Cloudflare
The industry has spent years bringing security closer to development – shifting left, embedding guardrails, and integrating checks earlier in the lifecycle. But AI has…
Securing AI Applications From Inception to Deployment
Recently, we introduced the Wiz AI Application Protection Platform (AI-APP) to secure AI-native applications end-to-end and provide the context needed to understand real risks across…
IaC Inventory: A Unified View Across Code, Deployments, and Cloud
AI applications are changing what “infrastructure” means. Agents, model endpoints, vector databases, and the guardrails that govern them are now core cloud resources , defined…
From Code to Pipeline: Wiz Code Now Secures Your Build Environment
Security teams have invested heavily in securing the code that developers write. But threat actors have moved upstream. CI/CD pipelines run with elevated privileges by…
Wiz and Databricks | Wiz Blog
Data has become the foundation of modern business, and platforms like Databricks now sit at the center of how organizations build, analyze, and power AI-driven…