Wiz is a Leader in 2025 IDC MarketScape for ASPM
As software development accelerates, organizations are rethinking how to secure everything from third-party code and cloud infrastructure to developer pipelines and exposed secrets. The growing…
Category: CloudSecurity
How AI Is Changing Security, According to Wiz Customers
AI is transforming security. While attackers are experimenting with AI to scale phishing, fraud, and automation, defenders are focused on how it can help them…
DORA Compliance in the Cloud: Insights from Deloitte and Wiz
The European Union’s Digital Operational Resilience Act (DORA) is reshaping cybersecurity in the financial sector by introducing a regulatory framework aimed at strengthening the resilience…
Shai-Hulud npm Supply Chain Attack
On September 15, 2025, malicious versions of multiple popular packages were published to npm. They contained a post-install script that harvested sensitive data and exfiltrated…
Introducing Wiz Incident Response: Your Expert Partner for Cloud Security Incidents
Today, we’re excited to introduce the public preview of Wiz Incident Response, our new service offering to help organizations investigate, contain, and recover from cloud…
Wiz Research Finds Risks in 20% of Vibe-Coded Apps
The LLM revolution has profoundly transformed code generation, giving rise to “vibe coding,” where natural language prompts replace traditional programming. This paradigm shift empowers a…
The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System
This Red Agent POV focuses on business-logic flaws, and deep dives into a critical paywall bypass discovered in a leading B2B platform’s data API. As…
Authenticate legitimate AI agent traffic with AWS WAF Bot Control
As AI agents and automated tools increasingly access web applications, distinguishing legitimate bot traffic from malicious attempts has become a critical security challenge. Traditional approaches…
Security Hub adds AI workload protection and multicloud support for Microsoft Azure
Security Hub is our foundation for full-stack enterprise security across clouds. It centralizes your security operations and turns raw signals into prioritized insights, so your…
3 Real Cloud Attacks Caused by App Misconfigurations
In the race to build and ship, the phrase “it just works” often describes everything a developer aspires to achieve. But for security teams, it…
ICYMI: June 2026 @AWS Security
Read all about the latest AWS security features, compliance updates, and hands-on resources in our new, monthly digest posts. You’ll find expert blog posts, new…
Wiz + HCP Terraform: Close the IaC-to-Cloud Infrastructure Security Gap
Infrastructure-as-Code (IaC) is a gift to engineers. By centralizing infrastructure definitions in Terraform, teams can standardize, review, and reuse patterns across every environment. HashiCorp has…