Wiz Defend Certification: Advance Cloud Threat Defense
Wiz Defend enables security teams to detect, stop, and investigate threats across cloud and hybrid environments — with full context from code to cloud to…
Category: CloudSecurity
Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets
Detect and mitigate malicious npm packages linked to the recent Shai-Hulud-style campaign. Over 25,000 affected repositories across ~350 unique users. Source link
Software Governance with Hosted Technologies Inventory
In the multi-cloud world, organizations rapidly deploy new servers, containers, and applications across multiple platforms. Each new cloud workload contains a multitude of hosted technologies-software…
WizOS: Secured Images Powered by AI
Today we’re excited to announce the General Availability of WizOS to help teams eliminate inherited container image risk and build on a foundation that is…
Wiz Service Catalog: Expand Risk Visibility & Ownership
When ownership breaks down, remediation slows down. Modern cloud environments are complex: distributed microservices, APIs, containers, and ephemeral components make it hard for developers to…
Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impact
Wiz Research and Wiz CIRT have been responding to the Shai-Hulud 2.0 incident (aka Sha1-Hulud) since news first broke on November 24, 2025. As of…
Wiz Exposure Management GA Release: Unifying UVM + ASM
We’re excited to announce the General Availability (GA) of Wiz Exposure Management, featuring our powerful new capabilities: Wiz Unified Vulnerability Management (UVM) and Wiz Attack…
Wiz reaches $1B in AWS Marketplace Lifetime Sales
Wiz has surpassed $1 billion in lifetime sales in AWS Marketplace, becoming the fastest security ISV in history to reach this milestone. Wiz and AWS…
Introducing Wiz SAST: Where Code Risk Meets Cloud Context
Modern development practices and AI copilots have dramatically increased the volume and velocity of code, with developers often moving from prompt → tab → commit…
Wiz Product Announcements at re:Invent 2025
AWS re:Invent is about rethinking what’s possible in the cloud. This year’s agenda is jam-packed with sessions about AI, infrastructure innovations, and of course, security.…
React2Shell (CVE-2025-55182): Critical React Vulnerability
TL;DR: CVE-2025-55182 is a critical unauthenticated RCE vulnerabilities in the React Server Components (RSC) “Flight” protocol. Default configurations are vulnerable – a standard Next.js app…
Top AWS re:Invent Announcements for Security Teams in 2025
AWS’s largest event of the year is re:Invent, which occurred just after Thanksgiving from Dec 2-5 this year. The weeks prior are referred to as…