How Grammarly Uses Wiz MCP to Automate Security at Scale
Since 2009, Grammarly has set the standard for AI assistance, supporting millions of users and thousands of organizations in brainstorming, composing, and enhancing communication that…
Category: CloudSecurity
Wiz Completes IRAP Assessment | Australia
Wiz has completed the Infosec Registered Assessors Program (IRAP) assessment at the Protected level — enabling Australian government agencies to adopt cloud securely, confidently, and…
Build to Runtime, Covered: A New Standard for Container Image Visibility
Containers are the foundation of modern applications. They’re fast, portable, and make deploying code at scale easier than ever. But the more containers you build…
A new type of long-lived key on AWS: Bedrock API keys
When AWS first launched two decades ago, the only way of authenticating applications was through long-lived access keys. Over the years AWS has created various…
Unpacking the 2025 Gartner Market Guide for CNAPP
At Wiz, our vision for cloud security has always been a unified, collaborative platform that empowers teams across the organization. That’s why we’re excited about…
Secrets Found. Owners Identified. Issues Fixed.
Every developer has been there: moving fast, pushing code, and realizing later that a credential made its way into a repo. It’s a common mistake,…
Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities
Cloudflare has deployed new Web Application Firewall (WAF) protections for two critical vulnerabilities affecting WordPress. The protections address an Unauthenticated Remote Code Execution (RCE) vulnerability…
s1ngularity: supply chain attack leaks secrets on GitHub: everything you need to know
Updated August 29th, 2PM UTC with details on the second phase of the attack On August 26, 2025, multiple malicious versions of the widely used…
s1ngularity’s aftermath: analysis of Nx supply chain attack
Wiz Research has been responding to the s1ngularity incident since news first broke on August 26th. At this point, active attacks seem to have lulled.…
Wiz Uncovers SES Abuse Campaign Using Stolen AWS Access Keys
Intro The Wiz Research team continuously monitors trends across the threat landscape using Wiz Defend’s threat detection rules. Our goal is to track attacker tradecraft…
WizOS Is Here: Container Security from the Image Up
Earlier this year we announced the private preview of WizOS: secured, minimal container images built from source and maintained by Wiz at near-zero CVEs. Today…
Widespread npm Supply Chain Attack: Breaking Down Impact & Scope Across Debug, Chalk, and Beyond
What happened? On September 8th, 2025, at around 9AM EST, a threat actor had managed to gain control of the npm account of well-known developer…