Hacking Moltbook: AI Social Network Reveals 1.5M API Keys
What is Moltbook, and Why Did it Attract Our Attention? Moltbook, the weirdly futuristic social network, has quickly gone viral as a forum where AI…
Category: CloudSecurity
WIN 2026: Building the AI Security Ecosystem
We launched the Wiz Integration Network two and a half years ago with a simple but ambitious goal: to collaborate with the industry to better…
Wiz + Spotify Backstage: Security at the Developer’s Desk
Every developer has a mental map of their services. You know what you own. You know what’s on fire. You know what used to be…
The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API
This Red Agent POV focuses on Broken Object-Level Authorization (BOLA), and deep dives into a critical authorization bypass vulnerability discovered in an airline’s GraphQL booking…
Bridging the Visibility Gap: A Unified Security Operating Model for Hybrid Cloud Teams
Over the last two decades, the enterprise landscape has undergone a massive transformation. Established organizations migrated to the cloud to capture efficiency gains, while a…
What the June 2026 Threat Technique Catalog update means for your AWS environment
The AWS Customer Incident Response Team (AWS CIRT) encounters patterns that repeat across engagements when helping customers respond to security incidents. We’re passionate about making…
Securing Public Sector Hybrid Environments with Wiz XM
Digital transformation across the U.S. Public Sector has reached a pragmatic milestone. To accelerate mission delivery, federal, state, and local agencies are actively operating within…
AI Cyber Model Arena: Testing AI Agents in Cybersecurity
We are excited to launch the AI Cyber Model Arena. This work introduces a benchmark suite of 257 real-world challenges spanning five offensive domains: zero-day…
FedRAMP High Playbook: Start with Risk, Not Checklists
In the world of government compliance, ‘fast’ isn’t usually a word thrown around lightly. Historically, taking a product from ‘Ready’ to ‘Authorized’ in the FedRAMP…
From Detection to Remediation: It’s Time to Rethink AppSec Around Exploitability and Root Cause Fixes
Five years after Log4Shell, the industry faced another critical RCE, this time in the React and Next.js ecosystems. Nearly 40% of cloud environments were affected…
Wiz Named a Leader in The Forrester Wave: Cloud Native Application Protection Solutions, Q1 2026
Cloud fundamentally changed the way we build and maintain software, and AI is changing everything again. Development cycles have accelerated from months to minutes. Cloud…
FedRAMP ConMon: Shifting to Continuous Monitoring
The Shift from “Periodic” to “Continuous” In the first part of our FedRAMP series, we explored Wiz’s accelerated journey to FedRAMP High. However, seasoned CSPs…