Wiz Blog

FeaturedThe Foundation Modern AppSec Is Still Missing: Code to Cloud, Rebuilt the Right WayArnon Trabelsi, Ziad GhallebOctober 17, 2025See every risk, from the first line of code to what’s running in production. No resource tagging. No CI/CD hacks. Just

4 days ago

FeaturedDismantling a Critical Supply Chain Risk in VSCode Extension MarketplacesRami McCarthyOctober 15, 2025Wiz Research has uncovered 550+ secrets hiding in plain sight. We worked with Microsoft to shut the door.

6 days ago

FeaturedIntroducing HoneyBee: How We Automate Honeypot Deployment for Threat ResearchYaara ShrikiOctober 7, 2025Turning attacker insights into stronger cloud security protections.

13 days ago

FeaturedRediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS scoreBenny Isaacs, Nir BrakhaOctober 6, 2025Wiz Research discovers vulnerability stemming from 13-year-old bug present in all Redis versions, used in 75% of

15 days ago

FeaturedDefending against database ransomware attacksDanielle Aminov, Shahar Dorfman, Hila RamatiOctober 6, 2025How attackers exploit exposed databases for extortion—and the defenses that work.

15 days ago

FeaturedAI Security 101: Mapping the AI Attack SurfaceSnegha RamnarayananOctober 2, 2025A practical guide to the risks, blind spots, and protections every security team needs to know.

19 days ago

FeaturedIntroducing zeroday.cloud: First-of-its-kind cloud and AI hacking competitionNir OhfeldSeptember 30, 2025Wiz and the leading CSPs are launching one of the largest hacking competitions ever to secure the open-source software powering the cloud ecos

21 days ago

FeaturedUnifying Cloud Risk and Network Defense: Wiz and Check Point Shashank Golla, Eyal Golombek, Ron Ben ArziSeptember 29, 2025Bring network context into the Security Graph to enrich cloud visibility and strengthen posture

22 days ago

FeaturedThe emerging use of malware invoking AIScott PiperSeptember 26, 2025A closer look at LameHug, the Amazon Q Developer Extension compromise, s1ngularity, and PromptLock.

25 days ago

Wiz achieves FedRAMP High authorization

25 days ago

Wiz achieves FedRAMP High authorizationAnnam Iyer, San Buonassisi, Bryan RosensteelSeptember 26, 2025Unified...

FeaturedWiz + HCP Terraform: Close the IaC-to-Cloud Infrastructure Security GapGilad Berenblut, Nadav TzukerSeptember 23, 2025Announcing the GA of our HCP Terraform connector, featuring new zero-configuration code-to-cloud mapping that traces any cloud ri

28 days ago

FeaturedIMDS Abused: Hunting Rare Behaviors to Uncover ExploitsHila Ramati, Gili TikochinskiSeptember 22, 2025When common processes start asking the wrong questions

29 days ago