Agile FedRAMP Playbook 3: Secure by Design Risk Prevention
Stopping Risk at the Source In Part 2 of our FedRAMP series, we discussed how to manage risks already living in production. And while the…
Category: CloudSecurity
Seeing AI Clearly: Mapping the AI App Landscape
AI Applications Are Fundamentally Different AI applications are no longer single, bounded systems. They are assembled ecosystems of models, agents, tools, and cloud services operating…
Wiz Achieves CPSTIC Certification in Spain
Wiz has certified its commercial platform in the Spanish National Cryptologic Center (CCN) ICT Security Products and Services Catalog (CPSTIC). Inclusion in this catalogue enables…
FedRAMP Incident Response: Accelerating Compliance with Wiz
Closing the Loop: Why Reactive Still Matters Modern cloud attacks move at machine speed. And even with the automated, risk-based ConMon and “Secure by Design”…
Introducing Wiz Tenant Manager for Multi-Tenant Security
Growth brings opportunity, but it also changes how cloud security must operate. As organizations expand through acquisitions or operate as independent business units, what was…
Reducing AI Risk Across Modern AI Applications
In the previous post in this series, we explored how organizations can gain visibility into modern AI applications — identifying where AI systems exist and…
Amazon Q Vulnerability: Compromise via MCP Auto-Execution
Severity High CVE CVE-2026-12957 Affected Versions Language server version < 1.65.0 Fixed In Language server version 1.65.0 Vendor Amazon Web Services Status Fixed Wiz Research…
It’s Official: Wiz Joins Google!
Nearly a year ago, we shared that Wiz would be joining Google. At the time, we spoke about a belief that by bringing together Wiz’s…
Twenty Years of Cloud Security Research
On March 14, 2006, AWS announced S3, marking the first AWS service that was generally available and what AWS celebrates as their start. Azure and…
Trivy Compromised by “TeamPCP” | Wiz Blog
Update March 23, 17:40 UTC: Wiz Research has identified a parallel compromise of kics-github-action On March 19, 2026, threat actors compromised Aqua Security’s Trivy vulnerability…
AI Runtime Security: From Input to Real-World Impact
When most people think about AI runtime security, they think about prompt injection. But securing AI in production is much broader than filtering inputs —…
Uncovering Hidden Attack Paths in Cloud Environments Using Runtime Signals
Getting comprehensive visibility into your cloud environment starts with agentless inventory and risk analysis. Wiz builds a complete picture of your attack surface and the…