Cloud Attack Retrospective 2026: What Changed in 2025
In our latest Cloud Threats Retrospective, we analyzed publicly documented cloud incidents alongside cloud telemetry and hands-on investigations. The findings show that many of the…
Category: CloudSecurity
Claude Mythos: AI Finds, Exploits Vulnerabilities Faster
TL;DR: Anthropic’s new model is capable of autonomously discovering zero-day vulnerabilities and developing working exploits. While access is currently highly restricted, Claude Mythos gives us…
GitHub Actions Security Pt 1: Attacks & Defenses
The tj-actions compromise hit 22,000 repositories. Ultralytics had cryptominers injected into PyPI releases. Trivy’s supply chain was breached through a workflow the authors believed was…
Introducing Shadow Data Discovery in Wiz
AI hasn’t just changed how we build — it’s changed how much data we keep. Across cloud environments, data is constantly created, duplicated, versioned, and…
Secure AI Endpoints with Wiz & Cloudflare
The industry has spent years bringing security closer to development – shifting left, embedding guardrails, and integrating checks earlier in the lifecycle. But AI has…
Securing AI Applications From Inception to Deployment
Recently, we introduced the Wiz AI Application Protection Platform (AI-APP) to secure AI-native applications end-to-end and provide the context needed to understand real risks across…
IaC Inventory: A Unified View Across Code, Deployments, and Cloud
AI applications are changing what “infrastructure” means. Agents, model endpoints, vector databases, and the guardrails that govern them are now core cloud resources , defined…
From Code to Pipeline: Wiz Code Now Secures Your Build Environment
Security teams have invested heavily in securing the code that developers write. But threat actors have moved upstream. CI/CD pipelines run with elevated privileges by…
Wiz and Databricks | Wiz Blog
Data has become the foundation of modern business, and platforms like Databricks now sit at the center of how organizations build, analyze, and power AI-driven…
Context.ai OAuth Token Compromise | Wiz Blog
On April 19th, 2026, Vercel disclosed a security incident involving unauthorized access to their internal systems. According to their incident report, the attacker compromised an…
Wiz Expands API Discovery with Google Apigee
Every modern application is stitched together by APIs. They connect your frontend to your backend, your services to each other, and your platform to your…
Closing the Security Gap in the Age of Agentic Coding
From Writing Code to Orchestrating It The way software gets built has fundamentally changed. Developers are no longer writing every line of code, they’re orchestrating…