Introducing AWS Continuum: Security at machine speed
What we believe We’ve been thinking deeply about enterprise security. The operating model that served us for the past decade (collect telemetry, store it, query…
Category: CloudSecurity
Operationalizing Wiz at Scale: Foundation to Force
In our previous blog in this series, we walked you through a 90-day action plan to achieve complete visibility and start your path to Zero…
Wiz for Microsoft 365: Bringing SaaS into the Security Graph
Microsoft 365 powers how many modern businesses collaborate, but it also connects deeply into the cloud environments that run those businesses. Today, we’re excited to…
Practical Package Security: The Unofficial Guide
Supply chain package compromises follow a familiar playbook: an attacker gains access to a maintainer account or build system, pushes a malicious update, and waits…
Introducing Penetration Test Findings: Unified Offensive Security in Wiz
The goal of any offensive security team is to find the “open doors” before an attacker does. However, in most organizations, the results of these…
Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild
A critical vulnerability (CVE-2026-0300) has been identified in Palo Alto Networks PAN-OS that allows unauthenticated attackers to achieve remote code execution (RCE) with root privileges.…
Wiz Exposure Management Dashboard: Your CTEM Command Center
In the new frontier AI era, models can autonomously discover vulnerabilities and generate working exploits, shrinking the window from discovery to exploitation to only hours.…
Securing Jenkins: Top Attack Flows & Misconfigurations
Jenkins is an open-source automation server widely used for CI/CD orchestration, pipeline automation, and infrastructure workflows. It integrates deeply with source control systems, container registries,…
Take the Wiz Zero Code Criticals Challenge
It’s been a big few weeks for how we ship code securely. At Wiz we expanded AI-BOM visibility, secure guardrails baked into agentic coding flows,…
Wiz & Lovable: Secure AI-Driven Development
Tools like Lovable have made it possible for anyone, beyond developers, to go from idea to deployed product in a matter of hours. Describe what…
Dirty Frag (CVE-2026-43284) Linux Privilege Escalation
A newly disclosed Linux kernel local privilege escalation vulnerability chain, dubbed “Dirty Frag” and assigned CVE-2026-43284 and CVE-2026-43500, enables attackers with local access to obtain…
Wiz Integrates with Akamai for Edge Security
Your cloud security posture is only as strong as the weakest link in your stack, and for most teams shipping applications at scale, that weak…