惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

SecWiki News
SecWiki News
D
Darknet – Hacking Tools, Hacker News & Cyber Security
I
Intezer
月光博客
月光博客
Cyberwarzone
Cyberwarzone
雷峰网
雷峰网
Security Latest
Security Latest
量子位
博客园 - 聂微东
小众软件
小众软件
NISL@THU
NISL@THU
C
Cisco Blogs
The GitHub Blog
The GitHub Blog
C
Cybersecurity and Infrastructure Security Agency CISA
T
Tor Project blog
Y
Y Combinator Blog
V
V2EX
博客园 - 三生石上(FineUI控件)
P
Privacy & Cybersecurity Law Blog
F
Full Disclosure
Cisco Talos Blog
Cisco Talos Blog
Microsoft Security Blog
Microsoft Security Blog
S
Security @ Cisco Blogs
The Register - Security
The Register - Security
Google DeepMind News
Google DeepMind News
J
Java Code Geeks
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
IT之家
IT之家
Webroot Blog
Webroot Blog
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
aimingoo的专栏
aimingoo的专栏
腾讯CDC
S
Schneier on Security
L
LINUX DO - 最新话题
Latest news
Latest news
Simon Willison's Weblog
Simon Willison's Weblog
罗磊的独立博客
A
Arctic Wolf
MyScale Blog
MyScale Blog
云风的 BLOG
云风的 BLOG
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
S
Secure Thoughts
S
Securelist
Stack Overflow Blog
Stack Overflow Blog
T
Troy Hunt's Blog
Recorded Future
Recorded Future
I
InfoQ
The Cloudflare Blog
H
Heimdal Security Blog
Hugging Face - Blog
Hugging Face - Blog

Wiz Blog | RSS feed

Meet Wiz for M365: Bringing SaaS into the Security Graph How to Harden GitHub Actions: An Updated Guide Bringing Security Visibility to Vercel with Wiz Axios NPM Distribution Compromised in Supply Chain Attack Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild The Wiz Blue Agent, now Generally Available Beyond the Badge: What Achieving Microsoft’s Certified Software Designation Means for Your Cloud Security Introducing the Green Agent: AI-Powered Remediation for the Cloud Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack Introducing the Wiz Red Agent- AI-Powered Attacker Introducing Wiz AI Application Protection Platform (AI-APP) Introducing Wiz Agents & Workflows: Security at the Speed of AI AI Runtime Threat Detection: From Input to Real-World Impact Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack It’s Official: Wiz Joins Google Understanding and Reducing AI Risk in Modern Applications Introducing Wiz Tenant Manager: Multi-Tenant Management for Federated Organizations The Agile FedRAMP Playbook, Part 4: Reactive Risk Management through Enriched Incident Response Wiz Achieves CPSTIC Certification in Spain Seeing AI Clearly: Building Visibility Across Modern AI Applications The Agile FedRAMP Playbook, Part 3: Preventative Risk Management by building Secure by Design Wiz Leads the 2026 Latio Application Security Report with awards in 4 categories Building an Agentic Cloud Security Ecosystem: A Reference Architecture with Wiz MCP and Infosys Cyber Next The Agile FedRAMP Playbook, Part 2: Proactive Risk Management with Continuous Monitoring Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows Would You Click ‘Accept’? Automatically detecting malicious Azure OAuth applications using LLMs Wiz Named a Leader in The Forrester Wave™: Cloud Native Application Protection Solutions, Q1 2026 From Detection to Remediation: It’s Time to Rethink AppSec Around Exploitability and Root Cause Fixes The Agile FedRAMP Playbook, Part 1: Why Risk is Your Best Starting Point Introducing AI Cyber Model Arena: A Real-World Benchmark for AI Agents in Cybersecurity Wiz + Spotify Backstage: Security at the Developer’s Desk Building AI Security Together: New Ways to Partner with Wiz for AI Security in 2026 Hacking Moltbook: The AI Social Network Any Human Can Control The Year in Wiz Research: 2025 Most Read Blogs WizExtend is Here: AI and Cloud Security Insights in Your Daily Workflow From Detection to Remediation: Wiz in Your JetBrains IDE Agentic Browser Security: 2025 Year-End Review CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild A 90-Day Action Plan to Turn Resolutions into Results with Wiz Introducing the Wiz Partner Alliance: A New Chapter for Partner Success Preparing for Post-Quantum Cryptography Wiz Recognized as a 2025 Customers’ Choice in the Gartner® Peer Insights™ Voice of the Customer for CNAPP Expanding the Zero Critical Club to set a new standard for AppSec and SecOps teams Snipping the Long Tail of Shai-Hulud 2.0 Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know The Kenna Transition: Your Strategic Shift to Exposure Management From MCP to Vibe Coding: Full Endpoint Visibility in Wiz AI Security Bringing Oracle Cloud Identity to Wiz Zero‑Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025, with a Record High of CVEs in Critical Cloud Infra Gogs 0-Day Exploited in the Wild Code to Cloud Attacks: From Github PAT to Cloud Control Plane Top AWS re:Invent Announcements for Security Teams in 2025 React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182 React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability Wiz Product Announcements at re:Invent 2025: Expanding Visibility from Code to Cloud Introducing Wiz SAST: Where Code Risk Meets Cloud Context Wiz Becomes Fastest Security ISV to Reach $1 Billion in AWS Marketplace Lifetime Sales It's Here! Wiz Exposure Management is Now GA Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impact Service Catalog is Here: Expand Risk Visibility for Your Service and Its Dependencies, Simplify Issue Ownership WizOS: Powering Secured Image Adoption with AI 3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs Mastering Software Governance with Hosted Technologies Inventory Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets Get Certified on Wiz Defend for Threat Detection and Response Blueprint for Security: A Guide to Code, Governance, and Response Frameworks Google Unified Security Recommended Program Names Wiz Among First 3 Strategic Partners Introducing Posture Issues: Transform Security Findings into Actionable Outcomes Empower and Accelerate Your SOC with the Blue Agent Exposure Report: 65% of Leading AI Companies Found with Verified Secret Leaks When AI Becomes the Heart of Security: Powering a Future You Can Trust AI-Powered Wiz: From Agents to Everyday Intelligence Defend Agentless Workload Detection: Bringing Visibility to Blind Spots in Threat Detection Securing AI Agents with Wiz AI-SPM Introducing Wiz ASM: Context-Driven Attack Surface Management Securing Critical Infrastructure in the Cloud Era: A Policy and Technology Blueprint How CISOs Should Plan Security Budgets for 2026 Beyond the Checkbox: How Wiz Transforms SOC 2 into a Security Powerhouse Bringing Visibility to Kubernetes: Unified Inventory and Network Insight The Foundation Modern AppSec Is Still Missing: Code to Cloud, Rebuilt the Right Way Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces Introducing HoneyBee: How We Automate Honeypot Deployment for Threat Research RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS score Defending against database ransomware attacks AI Security 101: Mapping the AI Attack Surface Introducing zeroday.cloud: First-of-its-kind cloud and AI hacking competition Unifying Cloud Risk and Network Defense: Wiz and Check Point The emerging use of malware invoking AI Wiz achieves FedRAMP High authorization Wiz + HCP Terraform: Close the IaC-to-Cloud Infrastructure Security Gap IMDS Abused: Hunting Rare Behaviors to Uncover Exploits Beyond CVEs: The Exploitation of Everyday Misconfigurations Wiz Research Discovers One in Five Organizations Exposed to Systemic Risks in Vibe-Coded Applications - Here's How to Secure Them Introducing Wiz Incident Response: Your Expert Partner for Cloud Security Incidents Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malware DORA Compliance in the Cloud Era: Insights from Deloitte and Wiz How Wiz Customers like Brex and FICO See AI Changing Security Wiz Recognized as a Leader in the 2025 IDC MarketScape for ASPM
Wizdom 2025 Product Announcements: Extending the Cloud Operating Model
Wiz Team · 2025-11-05 · via Wiz Blog | RSS feed

What's New at Wizdom 2025

This week marks a special milestone for the Wiz community. Builders, defenders, partners, and Wizards are gathering in New York for Wizdom, our first-ever user conference. It’s a celebration of what we’ve achieved together and a look at where we’re headed next. Together, we’re shaping the future of cloud security.

From the beginning, everything at Wiz has started with the graph, our unified data model that maps every relationship across code, cloud, and runtime. The Wiz Security Graph gives teams a shared language to see risk clearly, prioritize what matters, and act fast.

At Wizdom, we’re unveiling these agents alongside new product innovations that deepen and extend the graph across SaaS, workloads, AI infrastructure, and external exposures. Together, these advances enable teams to secure everything they build and run in the cloud and beyond.

Wizdom 2025 launches: powering Wiz with AI and extending the security graph.

AI-Enabled Wiz: Agents That Help Every Team Move Faster

AI is becoming a natural part of how security teams work, helping them move faster, see more, and stay ahead of evolving threats. At Wiz, we believe AI should empower people and multiply the impact of every team. We’re excited to introduce two new agents into public preview today:

SecOps Agent: Accelerate threat investigation and response

The SecOps Agent automatically investigates threats detected in Wiz Defend and delivers transparent, AI-driven verdicts for every alert. Each decision includes the full investigation trail behind it, so analysts can validate results, stay in the loop, and respond faster with confidence.

Issues Agent: Drive proactive remediation and progress toward zero criticals

The Issues Agent investigates each finding to uncover root causes and the most efficient path to remediation — helping teams take clear, confident steps toward zero critical issues. By connecting the dots across findings, context, and ownership, it turns remediation into proactive, measurable progress.

These agents are designed for transparency, trust, and actionability. Each insight is explainable within Wiz, enriched by the full context of the Security Graph, and delivered directly into the tools teams already use — from the Wiz UI to Ask AI, IDE extensions, the Wiz Browser Extension, and MCP servers. And this is just the beginning: more Agents across code, compliance, and cloud use cases will follow, keeping our focus on trusted automation that enables teams to move faster and more effectively.

Extending and Deepening the Wiz Security Graph

AI agents are only as powerful as the data they’re built on. That’s why we’re continuing to invest in extending and deepening the Wiz Security Graph. These latest innovations connect more of your environment, simplify visibility, and strengthen the context that powers both humans and AI to make better security decisions.

Connect Everything: From Cloud to SaaS with Microsoft 365

Wiz is bringing its agentless cloud security approach to productivity SaaS, starting with Microsoft 365. As cloud and collaboration platforms converge, Wiz unifies security context across infrastructure and SaaS, giving teams a single view of risk.

The new integration surfaces misconfigurations, excessive access, identifies sensitive data and secrets in OneDrive and SharePoint, correlates Purview labels, and flags risky sharing links and permissions. All of these insights connect through the Wiz Security Graph, providing cloud-to-SaaS visibility and posture management in one place.

Simplify with Agentless: Defend Agentless Workload Detection

Some workloads simply can’t run traditional security agents, like vendor-managed systems, virtual appliances, or performance-sensitive workloads. Those blind spots leave critical gaps that attackers can exploit.

Defend Agentless Workload Detection closes those gaps by extending Wiz’s agentless approach to threat detection. It gives teams deep workload visibility and malware detection without any agent deployments.

By correlating local logs, runtime signals, and control-plane data in the Wiz Security Graph, teams can investigate faster and respond with full context. Defend Agentless Workload Detection simplifies threat visibility across every workload — no agents, no overhead, no blind spots.

Build Context: Securing AI Agents with Wiz AI-SPM

AI introduces new risks that span models, data, code, and now agents. Wiz continues to advance AI Security Posture Management (AI-SPM), expanding coverage to include AI agents and model context protocol (MCP) usage. This next phase of AI-SPM strengthens Wiz’s end-to-end approach to AI security—spanning visibility, risk management, and governance.

Wiz AI-SPM uncovers risky misconfigurations and data access paths in deployed AI agents, and surfaces model context protocol (MCP) technology use across the environment. It helps teams discover AI agents with an AI Bill of Materials (AI-BOM), MCP discovery, and endpoint scanning across code and cloud.

By connecting agent posture, data, and runtime risks in a unified view on the Security Graph, Wiz helps security teams detect guardrail gaps, model vulnerabilities, and attack paths faster. It also strengthens governance by correlating agent and model threats, flagging OWASP LLM Top 10 issues, and establishing a strong baseline for secure AI operations.

Zero In on What’s Truly Critical: Detect Exploitable Risk and Prioritize with Context with Wiz ASM

Prioritization has always been central to how Wiz helps teams focus on what matters most. Wiz Attack Surface Management (ASM), now in public preview, takes that focus to the next level by helping teams zero in on their most critical exposures.

Wiz ASM provides a clear, validated, and prioritized view of every external exposure across your cloud, AI, on-prem, and SaaS environments. It uniquely combines an outside-in attacker's perspective with deep cloud context to help you focus on the exploitable risks that truly matter before attackers can find them.

The journey continues

Every announcement at Wizdom builds on the same foundation: the Wiz Security Graph. It’s what connects builders and defenders, visibility and action, humans and AI.

From SaaS to workloads, from AI agents to external exposures, these innovations deepen and extend the graph, helping every team see more, understand more, and act faster.

Wiz customers can join the public previews for the SecOps Agent, Issues Agent, M365 Connector, Defend Agentless Workload Detection, and Attack Surface Management (ASM) via the Preview & Migration Hub. Posture management for AI agents and MCP discovery is generally available in the Wiz platform today.

To everyone joining us at Wizdom, thank you. Your partnership and feedback make this progress possible. Together, we’re protecting everything you build and run in the cloud — and everywhere.

Check out our other posts and announcements from Wizdom 2025: