ICYMI: June 2026 @AWS Security
Read all about the latest AWS security features, compliance updates, and hands-on resources in our new, monthly digest posts. You’ll find expert blog posts, new…
Category: CloudSecurity
Wiz + HCP Terraform: Close the IaC-to-Cloud Infrastructure Security Gap
Infrastructure-as-Code (IaC) is a gift to engineers. By centralizing infrastructure definitions in Terraform, teams can standardize, review, and reuse patterns across every environment. HashiCorp has…
Wiz for Government Earns FedRAMP High Security Approval
We are excited to share that Wiz for Government has achieved FedRAMP® High authorization. This milestone reinforces Wiz’s commitment to helping U.S. public sector organizations…
M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions
On July 14, 2026, an attacker opened 37 pull requests to the AsyncAPI generator repository. Almost all attempted to add a fake charity donation page.…
Emerging Threat: AI-Powered Malware Attacks
Recently there have been a few malicious campaigns involving attacker payloads that invoked AI. AI has been used by threat actors for all sorts of…
New compliance guidance available: HITRUST i1 on AWS
We are pleased to announce the publication of a new AWS compliance implementation guidance: HITRUST i1 Compliance on AWS: Customer Implementation Guidance with an Illustrative…
Unifying Cloud Risk and Network Defense: Wiz and Check Point
A scan can find risks, but without context, it is impossible to know which ones truly matter. A vulnerability may look critical, but if it…
Why IaC Coverage Belongs on Your Security Dashboard
Every security domain has a number that tells you how much of it is under control. Identity has MFA adoption. Patching has mean time to…
Introducing zeroday.cloud: Cloud and AI Hacking Event
The Wiz Research team is proud to launch zeroday.cloud, a first-of-its-kind cloud hacking competition with a prize pool totaling up to about $4.5 million in…
The AI Attack Surface Explained
AI is changing the way organizations build, ship, and interact with software. And with it comes a new security reality. As more teams adopt generative…
Database Ransomware: How It Works and How to Stop It
Intro In recent years, attackers have increasingly turned to “malware-less” Living-off-the-Land operations against cloud and SaaS environments. This trend has also extended to extortion and…
Wiz Finds Critical Redis RCE Vulnerability: CVE‑2025‑49844
Wiz Research has uncovered a critical Remote Code Execution (RCE) vulnerability, CVE-2025-49844 which we’ve dubbed #RediShell, in the widely used Redis in-memory data structure store.…