Cyber News

    Dashboard / Cyber News

    See and Secure Everything at the Edge with Wiz and Akamai
    Ra
    Ravid Shlomian-2026-05-08

    See and Secure Everything at the Edge with Wiz and Akamai

    Akamai edge configurations are now visible on the Wiz Security Graph, giving teams a single understanding of risk from edge to runtime
    Dirty Frag: Linux Kernel Local Privilege Escalation via ESP and RxRPC
    Ra
    Rami McCarthy

    Dirty Frag: Linux Kernel Local Privilege Escalation via ESP and RxRPC

    2026-05-08

    Build Fast, Build Secure: Wiz findings are now in Lovable
    Ro
    Roi Kessler

    Build Fast, Build Secure: Wiz findings are now in Lovable

    2026-05-07

    It's Time to Go After Achieving Zero Code Criticals
    Sa
    Salman Ladha

    It's Time to Go After Achieving Zero Code Criticals

    2026-05-07

    The Jenkins Threat Landscape
    Me
    Merav Bar-2026-05-06

    The Jenkins Threat Landscape

    What usage patterns, plugin adoption, and configuration choices reveal about the Jenkins attack surface.
    Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild
    Me
    Merav Bar

    Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild

    2026-05-06

    Introducing Penetration Test Findings: Unified Offensive Security in Wiz
    Sh
    Shaked Rotlevi

    Introducing Penetration Test Findings: Unified Offensive Security in Wiz

    2026-05-05

    Practical Package Security: The Unofficial Guide
    Ra
    Rami McCarthy

    Practical Package Security: The Unofficial Guide

    2026-05-04

    From Foundation to Force: Your Guide to Operationalizing Wiz at Scale
    Ke
    Kelsey Nelson-2026-05-04

    From Foundation to Force: Your Guide to Operationalizing Wiz at Scale

    Following your foundation, operationalize Wiz across development, detection and response, and program maturity so your security program never stops getting stronger.
    Meet Wiz for M365: Bringing SaaS into the Security Graph
    Or
    Or Goldenberg

    Meet Wiz for M365: Bringing SaaS into the Security Graph

    2026-05-04

    Copy Fail: Universal Linux Local Privilege Escalation Vulnerability
    Sh
    Shahar Dorfman

    Copy Fail: Universal Linux Local Privilege Escalation Vulnerability

    2026-05-01

    Red Agent and Claude Opus: Securing Production Targets at Scale
    Sh
    Shaked Rotlevi

    Red Agent and Claude Opus: Securing Production Targets at Scale

    2026-04-30

    The (In)security Landscape of AI-Powered GitHub Actions (Part 2/2)
    Sh
    Shay Berkovich-2026-04-30

    The (In)security Landscape of AI-Powered GitHub Actions (Part 2/2)

    When AI meets CI/CD: permission bypasses, prompt injection, and what to do about it.
    Key Takeaways from the 2026 State of AI in the Cloud Report
    Wi
    Wiz Threat Research

    Key Takeaways from the 2026 State of AI in the Cloud Report

    2026-04-29

    Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware
    Gi
    Gili Tikochinski

    Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware

    2026-04-29

    Wiz Code Week Recap: Securing AI Native Development
    Mi
    Mike McGuire

    Wiz Code Week Recap: Securing AI Native Development

    2026-04-29

    Modern Defensible Architecture: Resilience for the Australian Federal Government
    Ro
    Rodman Ramezanian-2026-04-29

    Modern Defensible Architecture: Resilience for the Australian Federal Government

    How Wiz enables Australian government agencies to operationalise MDA with real-time context, zero trust enforcement, and end-to-end cloud visibility.
    Securing GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854)
    Sa
    Sagi Tzadik

    Securing GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854)

    2026-04-28

    NIST NVD Update: What it Means For Vulnerability Management
    Sh
    Shaked Rotlevi

    NIST NVD Update: What it Means For Vulnerability Management

    2026-04-27

    Wiz at Google Next: Machine-Speed Defense for Any Cloud, Any Platform, Any AI
    Ba
    Bandhna Bedi

    Wiz at Google Next: Machine-Speed Defense for Any Cloud, Any Platform, Any AI

    2026-04-22

    Closing the Security Gap in the Age of Agentic Coding
    Ba
    Bandhna Bedi-2026-04-21

    Closing the Security Gap in the Age of Agentic Coding

    AI agents are writing more and more code. Ensure it's secure. Learn how Wiz Code plugins and the Green Agent bring machine-speed remediation to your AI-IDE.
    Mapping Your API Ecosystem: Wiz Expands API Discovery with Apigee
    Sa
    Saar Shtalryd

    Mapping Your API Ecosystem: Wiz Expands API Discovery with Apigee

    2026-04-21

    Context.ai OAuth Token Compromise
    Ma
    Maayan Bentor

    Context.ai OAuth Token Compromise

    2026-04-20

    Wiz and Databricks: Adding Databricks to the Wiz Security Graph
    Sn
    Snegha Ramnarayanan

    Wiz and Databricks: Adding Databricks to the Wiz Security Graph

    2026-04-20

    From Code to Pipeline: Wiz Code Now Secures Your Build Environment
    Zi
    Ziad Ghalleb-2026-04-20

    From Code to Pipeline: Wiz Code Now Secures Your Build Environment

    Threat actors have moved upstream, and while security teams have focused on the code developers write, the systems that build and deliver that code have remained a blind spot.
    IaC Inventory: A Unified View Across Code, Deployments, and Cloud
    Al
    Alex Kearns

    IaC Inventory: A Unified View Across Code, Deployments, and Cloud

    2026-04-17

    Securing AI Applications From Inception to Deployment
    Am
    Amit Hofree

    Securing AI Applications From Inception to Deployment

    2026-04-16

    How to Harden GitHub Actions: An Updated Guide
    Sh
    Shay Berkovich

    How to Harden GitHub Actions: An Updated Guide

    2026-04-15

    Securing the AI Edge: Wiz and Cloudflare Integrate for End-to-End AI Protection
    Gi
    Gilad Hoze-2026-04-14

    Securing the AI Edge: Wiz and Cloudflare Integrate for End-to-End AI Protection

    Gain a unified view of AI application endpoints and DNS exposure across your environment, including which are protected by Cloudflare and which need to be secured
    Introducing Shadow Data Detection: Reduce Cost and Risk Across Your Cloud
    Ma
    Matika Lidgi

    Introducing Shadow Data Detection: Reduce Cost and Risk Across Your Cloud

    2026-04-14

    Primer on GitHub Actions Security - Threat Model, Attacks and Defenses (Part 1/2)
    Sh
    Shay Berkovich

    Primer on GitHub Actions Security - Threat Model, Attacks and Defenses (Part 1/2)

    2026-04-14

    Claude Mythos: Preparing for a World Where AI Finds and Exploits Vulnerabilities Faster Than Ever
    Am
    Ami Luttwak

    Claude Mythos: Preparing for a World Where AI Finds and Exploits Vulnerabilities Faster Than Ever

    2026-04-10

    Cloud Threats Retrospective 2026: What AI Changed (and What It Didn’t)
    Wi
    Wiz Threat Research-2026-04-09

    Cloud Threats Retrospective 2026: What AI Changed (and What It Didn’t)

    Insights from public incidents, cloud telemetry, and investigations into how cloud risk evolved in 2025
    Bringing Security Visibility to Vercel with Wiz
    Gi
    Gilad Hoze

    Bringing Security Visibility to Vercel with Wiz

    2026-04-09

    Six Accounts, One Actor: Inside the prt-scan Supply Chain Campaign
    Be
    Benjamin Read

    Six Accounts, One Actor: Inside the prt-scan Supply Chain Campaign

    2026-04-04

    Axios NPM Distribution Compromised in Supply Chain Attack
    Me
    Merav Bar

    Axios NPM Distribution Compromised in Supply Chain Attack

    2026-03-31

    Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild
    Hi
    Hila Ramati-2026-03-30

    Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild

    How TeamPCP are leveraging stolen secrets from the recent supply chain attacks to compromise cloud environments
    The Wiz Blue Agent, now Generally Available
    Ta
    Tal Moriah

    The Wiz Blue Agent, now Generally Available

    2026-03-30

    Beyond the Badge: What Achieving Microsoft’s Certified Software Designation Means for Your Cloud Security
    Ch
    Chuck Enstall

    Beyond the Badge: What Achieving Microsoft’s Certified Software Designation Means for Your Cloud Security

    2026-03-27

    Introducing the Green Agent: AI-Powered Remediation for the Cloud
    Ya
    Yariv Ashkenazy

    Introducing the Green Agent: AI-Powered Remediation for the Cloud

    2026-03-26

    Introducing Wiz Workflows: Your path to building a self healing cloud
    Ba
    Bandhna Bedi-2026-03-25

    Introducing Wiz Workflows: Your path to building a self healing cloud

    Orchestrate customizable workflows with agents, enabling end-to-end discovery and response in Wiz
    Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign
    Ja
    James Haughom

    Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign

    2026-03-24

    KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack
    Be
    Benjamin Read

    KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack

    2026-03-23

    Introducing the Wiz Red Agent- AI-Powered Attacker
    Da
    Danielle Aminov

    Introducing the Wiz Red Agent- AI-Powered Attacker

    2026-03-23

    Introducing Wiz AI Application Protection Platform (AI-APP)
    Da
    Dan Segev-2026-03-23

    Introducing Wiz AI Application Protection Platform (AI-APP)

    Secure every layer of AI applications — infrastructure, data, access, models, agents, and applications — from code to runtime, across every environment you build in.
    Introducing Wiz Agents & Workflows: Security at the Speed of AI
    Na
    Nati Beeri

    Introducing Wiz Agents & Workflows: Security at the Speed of AI

    2026-03-23

    AI Runtime Threat Detection: From Input to Real-World Impact
    Gu
    Guy Weiss

    AI Runtime Threat Detection: From Input to Real-World Impact

    2026-03-20

    Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack
    Ra
    Rami McCarthy

    Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack

    2026-03-20

    Twenty Years of Cloud Security Research
    Sc
    Scott Piper-2026-03-13

    Twenty Years of Cloud Security Research

    This post will look at the past 20 years of cloud security research, separating the two decades into eras with important milestones defined that resulted in the change of one era to the next.
    It’s Official: Wiz Joins Google
    As
    Assaf Rappaport

    It’s Official: Wiz Joins Google

    2026-03-11

    Latest News

    See All
    Northflank security breach leads to abuse of customers' AI API keys
    La
    Lawrence Abrams-5 days ago

    Northflank security breach leads to abuse of customers' AI API keys

    New Android SMS of Death exploit can remotely crash unpatched phones
    La
    Lawrence Abrams-5 days ago

    New Android SMS of Death exploit can remotely crash unpatched phones

    Polymarket Users Lose $2.7 Million in Third-Party Script Hack
    De
    Deeba Ahmed-5 days ago

    Polymarket Users Lose $2.7 Million in Third-Party Script Hack