WizOS Is Here: Container Security from the Image Up
Earlier this year we announced the private preview of WizOS: secured, minimal container images built from source and maintained by Wiz at near-zero CVEs. Today…
Category: CloudSecurity
Widespread npm Supply Chain Attack: Breaking Down Impact & Scope Across Debug, Chalk, and Beyond
What happened? On September 8th, 2025, at around 9AM EST, a threat actor had managed to gain control of the npm account of well-known developer…
Wiz is a Leader in 2025 IDC MarketScape for ASPM
As software development accelerates, organizations are rethinking how to secure everything from third-party code and cloud infrastructure to developer pipelines and exposed secrets. The growing…
How AI Is Changing Security, According to Wiz Customers
AI is transforming security. While attackers are experimenting with AI to scale phishing, fraud, and automation, defenders are focused on how it can help them…
DORA Compliance in the Cloud: Insights from Deloitte and Wiz
The European Union’s Digital Operational Resilience Act (DORA) is reshaping cybersecurity in the financial sector by introducing a regulatory framework aimed at strengthening the resilience…
Shai-Hulud npm Supply Chain Attack
On September 15, 2025, malicious versions of multiple popular packages were published to npm. They contained a post-install script that harvested sensitive data and exfiltrated…
Introducing Wiz Incident Response: Your Expert Partner for Cloud Security Incidents
Today, we’re excited to introduce the public preview of Wiz Incident Response, our new service offering to help organizations investigate, contain, and recover from cloud…
Wiz Research Finds Risks in 20% of Vibe-Coded Apps
The LLM revolution has profoundly transformed code generation, giving rise to “vibe coding,” where natural language prompts replace traditional programming. This paradigm shift empowers a…
The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System
This Red Agent POV focuses on business-logic flaws, and deep dives into a critical paywall bypass discovered in a leading B2B platform’s data API. As…
Authenticate legitimate AI agent traffic with AWS WAF Bot Control
As AI agents and automated tools increasingly access web applications, distinguishing legitimate bot traffic from malicious attempts has become a critical security challenge. Traditional approaches…
Security Hub adds AI workload protection and multicloud support for Microsoft Azure
Security Hub is our foundation for full-stack enterprise security across clouds. It centralizes your security operations and turns raw signals into prioritized insights, so your…
3 Real Cloud Attacks Caused by App Misconfigurations
In the race to build and ship, the phrase “it just works” often describes everything a developer aspires to achieve. But for security teams, it…