Cyber News

See how Wiz built Atlas, an autonomous AI system for vulnerability research that validates every finding with a real, working exploit.

Wiz Research has identified exploitation of "wp2shell", a critical pre-auth RCE vulnerability chain impacting WordPress Core (CVE-2026-63030 & CVE-2026-60137). Attackers are deploying persistent webshells on vulnerable servers. Organizations should prioritize patching or applying WAF mitigations.

Automation, resilience, and security for the modern age

It's a common question we hear from prospects: "Does Wiz actually do runtime, or is it just risk prevention?" The short answer is yes, Wiz does runtime.

Move beyond chasing vulnerabilities to a unified hybrid risk strategy. The Sensor Workload Scanner is now GA and extends our risk prioritization engine to on-premise environments to identify the critical attack paths across your hybrid cloud.

Wiz now layers runtime signals into the Security Graph, exposing hidden attack paths to give security teams a complete picture of risk.

The spotlight has been on frontier models, but the goals are more far reaching -- including supercharging cyber defense and remediating risk at machine speed

The White House Memorandum puts in place an “adaptive framework,” where agencies make risk-based, prioritized logging decisions.

Diving into the first pillar of the AI Threat Readiness Framework and how Wiz helps

Discussion of PQC relevant statistics that we see across our customers and other data sources.

Insights from real-world environments into how code, developer tooling, automation, and AI are reshaping application security.

Multi-ecosystem supply chain compromise by TeamPCP targets GitHub, NPM, and VSCode to steal credentials and establish persistence.

Wiz Audit History is now GA, providing a continuous, cross-cloud timeline of changes to resource configurations and findings to accelerate incident response and simplify compliance.