Spring 2026 SOC 1 and 2 reports are now available in OSCAL format
Amazon Web Services (AWS) is excited to release the Spring 2026 System and Organization Controls (SOC) 1 and 2 reports in machine-readable OSCAL format alongside…
Category: CloudSecurity
GitHub Actions Security Pt 2: AI-Powered Actions Analysis
AI-powered GitHub Actions from vendors like OpenAI, Anthropic, and Google are now running in thousands of public workflows. We set out to map the shared…
Red Agent and Claude Opus: Securing Production Targets at Scale
Wiz Red Agent, our AI-powered attacker, recently launched in Public Preview to all Wiz ASM Advanced customers, marking a major milestone in our mission to…
Copy Fail: Universal Linux Local Privilege Escalation Vulnerability
CVE-2026-31431 (dubbed “Copy Fail”) is an easily exploitable vulnerability in the Linux kernel that allows escalation from an unprivileged local user account to root access.…
Introducing the Red Agent POV Series
AI-powered offensive security has made significant progress in finding flaws that would have seemed out of reach for automated testing just a year ago, and…
The Red Agent POV: How it Reasoned its Way to SSRF
This is the first blog post in the Red Agent POV series, where we cover real-life examples of the Red Agent’s findings in production. In…
Introducing AWS Continuum: Security at machine speed
What we believe We’ve been thinking deeply about enterprise security. The operating model that served us for the past decade (collect telemetry, store it, query…
Operationalizing Wiz at Scale: Foundation to Force
In our previous blog in this series, we walked you through a 90-day action plan to achieve complete visibility and start your path to Zero…
Wiz for Microsoft 365: Bringing SaaS into the Security Graph
Microsoft 365 powers how many modern businesses collaborate, but it also connects deeply into the cloud environments that run those businesses. Today, we’re excited to…
Practical Package Security: The Unofficial Guide
Supply chain package compromises follow a familiar playbook: an attacker gains access to a maintainer account or build system, pushes a malicious update, and waits…
Introducing Penetration Test Findings: Unified Offensive Security in Wiz
The goal of any offensive security team is to find the “open doors” before an attacker does. However, in most organizations, the results of these…
Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild
A critical vulnerability (CVE-2026-0300) has been identified in Palo Alto Networks PAN-OS that allows unauthenticated attackers to achieve remote code execution (RCE) with root privileges.…