Unveiling good and bad behaviors on the Agentic Internet
The Internet isn’t a single lane of traffic. For a long time, the rule of thumb in web security was that bots are bad, while…
Category: CloudSecurity
Give any website a WebMCP interface
Today we are launching a developer preview of WebMCP on Cloudflare. Switch it on and browser agents can start working with your site, with no…
Automate certificates with ACME support in AWS Certificate Manager
Customers tell us that managing TLS certificates at scale is one of their biggest operational concerns. The Certification Authority Browser Forum (CA/Browser Forum) has mandated…
Wiz Brings Automated DISA STIG Assessment to Amazon Linux 2023 and Windows Server 2025
The challenge: STIG compliance without automation For federal agencies and defense contractors operating in AWS GovCloud, Amazon Linux 2023 and Windows Server 2025 are rapidly…
Route Amazon Bedrock Guardrails interventions to Amazon Security Lake
Security teams investigating AI-related incidents need guardrail intervention data alongside their existing security telemetry. Routing Amazon Bedrock Guardrails violations to Amazon Security Lake makes this…
Cloud Threat Highlights: H1 2026
In the first half of 2026, Wiz’s Research and CIRT teams tracked threats affecting thousands of cloud environments. We saw a notable increase in the…
Key Takeaways from the 2025 State of AI in the Cloud Report
AI adoption continues to surge across cloud environments, driving innovation but also introducing new security challenges. In our second annual State of AI in the…
AWS partners with Anthropic and OpenAI to bring AWS Continuum into developer workflows
Customers have access to models that are continuously getting better with each new generation bringing larger context windows, stronger reasoning, and lower token costs. Getting…
GitHub Action tj-actions/changed-files supply chain attack
March 17, 2025 update: Wiz Threat Research has identified another compromised GitHub Action called reviewdog/action-setup, that may have contributed to the compromise of tj-actions/changed-files. As…
GitHub Action supply chain attack: reviewdog/action-setup
March 21, 2025 update: We can now publicly disclose two additional details on this incident. 1) the specific target mentioned in the original post is…
Catching rogue AI behavior with identity-aware analytics
When you look at your AI bill, it can be hard to tell if anything is amiss. You first need a baseline so you can…
Announcing Cloudflare Wallets: The programmable wallet for the agentic Internet
Today, it is difficult for AI agents to try out new APIs. They often have to navigate through a login page designed for humans and…