HoneyBee: Automating Honeypots for Modern Threat Research
Honeypots are a powerful tool in threat research. They are intentionally vulnerable systems designed to attract attackers, allowing researchers to observe their techniques and learn…
Category: CloudSecurity
Supply Chain Risk in VSCode Extension Marketplaces
Wiz Research identified a pattern of secret leakage by publishers of VSCode IDE Extensions. This occurred across both the VSCode and Open VSX marketplaces, the…
The Foundation Modern AppSec Is Still Missing: Code to Cloud, Rebuilt the Right Way
Modern development practices mean everything is defined in code: containers, infrastructure, APIs, and CI workflows. But security hasn’t kept up. Siloed scanners like SCA, IaC…
Bringing Visibility to Kubernetes: Unified Inventory and Network Insight
Kubernetes has become the foundation of how teams build and run modern applications. It simplifies the deployment and management of containers across environments, but that…
Beyond the Checkbox: How Wiz Transforms SOC 2 into a Security Powerhouse
In the fast-paced world of SaaS, a SOC 2 Type 2 attestation report has become a non-negotiable ticket to entry. Alongside relatives like ISO 27001,…
How CISOs Should Plan Security Budgets for 2026
Budgets are up. Eighty-five percent of organizations increased cybersecurity spending this year, and nearly nine in ten expect to increase it again in 2026. Yet…
Securing U.S. Critical Infrastructure in the Cloud Era
The US’s critical infrastructure (CI), systems ranging from those that deliver electricity, clean water, and healthcare, to financial services, is undergoing a fundamental transformation. The…
Introducing Wiz ASM: Context-Driven Attack Surface Management
Modern environments span cloud, AI, on-premises, SaaS, APIs, and more – each introduces potential exposures that make the attack surface wider, more dynamic, and harder…
Securing AI Agents with Wiz AI-SPM
Artificial Intelligence is transforming how organizations operate — and intelligent agents are leading the charge. From copilots and remediation bots to data-driven assistants, these agents…
Defend Agentless Workload Detection | Cloud Security Guide
In cloud security, we’re obsessed with visibility. Yet, a massive blind spot persists in nearly every cloud environment- we can’t deploy traditional security agents on…
AWS designated as a critical third party to the UK financial sector
Amazon Web Services EMEA Sarl (AWS) has been designated as a critical third party (CTP) to the UK financial sector by HM Treasury. The CTP…
AI Agents in Wiz: Real Security, Real Impact
From vision to everyday impact AI-powered security only matters if it helps teams work smarter — seeing risk with more context, acting with precision, and…