Wiz Research
38 briefings written from Wiz Research's reporting, newest first. Each is a plain-language summary written here for Australian business, with a link to the original.
- Why Fixing Vulnerabilities Is Slower Than Finding Them, and How Automation Aims to Help
- AI Is Speeding Up Attackers, and Wiz Says Security Teams Must Move From Reacting to Hunting
- Nine AI Developer Platforms Hit in a Single Month, With Stolen AI Access Keys the Common Target
- AI Is Everywhere in Business, But Most Companies Cannot Say Where
- AI Agents Are Now Running Hands-On Cyber Attacks, and They Leave a Noisy Trail
- AI Agents Are Now Running Cyber Attacks at Machine Speed, Wiz Research Warns
- PHP2Shell: Exposure Falls Sharply, but Exploitation Attempts Have Begun
- GitHub Actions Gets Safer Defaults, but Pwn Request Risks Have Shifted Rather Than Disappeared
- Gheist Campaign Abuses Stolen GitHub Tokens to Pull Secrets From Private Code Repositories
- Broccoli2Shell: Critical Brotli Flaw Puts Node.js and Other Web Tools at Risk
- Too Many Security Alerts? Why Context Matters More Than Volume in the AI Coding Era
- AI Pentest Tool ARTEX Turned on IT and Software Vendors in Supply Chain Campaign
- Critical PHP Flaws Put Millions of Websites at Risk, and Patching Is Urgent
- Poisoned LiteLLM Package Hunts for Cloud and AI Credentials
- Google Cloud and Wiz Launch Built-In Runtime Protection for Kubernetes Clusters
- LLMjacking: Attackers Hijack Cloud Billing to Run Up Huge AI Bills
- Supply Chain Attacks Now Account for 1 in 4 Major Incidents, and Trusted Software Is the Way In
- AI Agents Are Now Running Entire Cloud Attacks, and They Move at Machine Speed
- AI Is Speeding Up Both Attacks and Software Development: Why Context Matters More Than Alerts
- Wiz Brings AI Agents to Its US Government Cloud Security Platform as Attackers Speed Up
- Exposed Web Page Leaked Sensitive Data at a Fortune 500 Firm, and Only One Tool Noticed
- Wiz Launches AI Code Scanner to Find Flaws Traditional Tools Miss
- Wiz Service Catalog Update Aims to Link Cloud Risk to the Teams Who Own It
- Why Popular Helm Charts Could Be a Hidden Supply Chain Risk
- How an AI-Powered SOC Investigator Uncovered a Multi-Platform Data Theft Campaign
- Wiz Launches New Program to Help MSPs Deliver Cloud Security at Scale
- Stolen Credentials: How Infostealer Malware Opens the Door to Your Cloud and Code Systems
- Wiz Recognised as a Leader in Forrester's Proactive Security Platforms Report
- AI-Powered 'Scan for Good' Initiative Finds and Fixes Hundreds of Public Sector Security Gaps
- Wiz Expands AI Security Ecosystem with New Agent Integration Tools
- New AWS Sign-Up Sandbox Leaves Security Gaps, Research Finds
- When AI Agents Go Rogue: Inside a Real-World Intent Hijack
- Wiz and Google Join Forces to Speed Up Cloud Threat Investigations
- JFrog Artifactory Under Active Attack: Patch These Three Vulnerabilities Now
- Wiz Cloud Security Platform Earns High-Level Government Authorization
- Critical Flaws in Popular AI Gateway LiteLLM Let Attackers Hijack Servers and Steal Cloud Credentials
- Why Fixing Vulnerabilities in Code Beats Patching in Production
- Vendor Launches Real-Time Vulnerability Scanning as Attackers Exploit Flaws Within Hours