惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

SecWiki News
SecWiki News
D
Darknet – Hacking Tools, Hacker News & Cyber Security
I
Intezer
月光博客
月光博客
Cyberwarzone
Cyberwarzone
雷峰网
雷峰网
Security Latest
Security Latest
量子位
博客园 - 聂微东
小众软件
小众软件
NISL@THU
NISL@THU
C
Cisco Blogs
The GitHub Blog
The GitHub Blog
C
Cybersecurity and Infrastructure Security Agency CISA
T
Tor Project blog
Y
Y Combinator Blog
V
V2EX
博客园 - 三生石上(FineUI控件)
P
Privacy & Cybersecurity Law Blog
F
Full Disclosure
Cisco Talos Blog
Cisco Talos Blog
Microsoft Security Blog
Microsoft Security Blog
S
Security @ Cisco Blogs
The Register - Security
The Register - Security
Google DeepMind News
Google DeepMind News
J
Java Code Geeks
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
IT之家
IT之家
Webroot Blog
Webroot Blog
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
aimingoo的专栏
aimingoo的专栏
腾讯CDC
S
Schneier on Security
L
LINUX DO - 最新话题
Latest news
Latest news
Simon Willison's Weblog
Simon Willison's Weblog
罗磊的独立博客
A
Arctic Wolf
MyScale Blog
MyScale Blog
云风的 BLOG
云风的 BLOG
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
S
Secure Thoughts
S
Securelist
Stack Overflow Blog
Stack Overflow Blog
T
Troy Hunt's Blog
Recorded Future
Recorded Future
I
InfoQ
The Cloudflare Blog
H
Heimdal Security Blog
Hugging Face - Blog
Hugging Face - Blog

Wiz Blog | RSS feed

Meet Wiz for M365: Bringing SaaS into the Security Graph How to Harden GitHub Actions: An Updated Guide Bringing Security Visibility to Vercel with Wiz Axios NPM Distribution Compromised in Supply Chain Attack Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild The Wiz Blue Agent, now Generally Available Beyond the Badge: What Achieving Microsoft’s Certified Software Designation Means for Your Cloud Security Introducing the Green Agent: AI-Powered Remediation for the Cloud Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack Introducing the Wiz Red Agent- AI-Powered Attacker Introducing Wiz AI Application Protection Platform (AI-APP) Introducing Wiz Agents & Workflows: Security at the Speed of AI AI Runtime Threat Detection: From Input to Real-World Impact Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack It’s Official: Wiz Joins Google Understanding and Reducing AI Risk in Modern Applications Introducing Wiz Tenant Manager: Multi-Tenant Management for Federated Organizations The Agile FedRAMP Playbook, Part 4: Reactive Risk Management through Enriched Incident Response Wiz Achieves CPSTIC Certification in Spain Seeing AI Clearly: Building Visibility Across Modern AI Applications The Agile FedRAMP Playbook, Part 3: Preventative Risk Management by building Secure by Design Wiz Leads the 2026 Latio Application Security Report with awards in 4 categories Building an Agentic Cloud Security Ecosystem: A Reference Architecture with Wiz MCP and Infosys Cyber Next The Agile FedRAMP Playbook, Part 2: Proactive Risk Management with Continuous Monitoring Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows Would You Click ‘Accept’? Automatically detecting malicious Azure OAuth applications using LLMs Wiz Named a Leader in The Forrester Wave™: Cloud Native Application Protection Solutions, Q1 2026 From Detection to Remediation: It’s Time to Rethink AppSec Around Exploitability and Root Cause Fixes The Agile FedRAMP Playbook, Part 1: Why Risk is Your Best Starting Point Introducing AI Cyber Model Arena: A Real-World Benchmark for AI Agents in Cybersecurity Wiz + Spotify Backstage: Security at the Developer’s Desk Building AI Security Together: New Ways to Partner with Wiz for AI Security in 2026 Hacking Moltbook: The AI Social Network Any Human Can Control The Year in Wiz Research: 2025 Most Read Blogs WizExtend is Here: AI and Cloud Security Insights in Your Daily Workflow From Detection to Remediation: Wiz in Your JetBrains IDE Agentic Browser Security: 2025 Year-End Review CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild A 90-Day Action Plan to Turn Resolutions into Results with Wiz Introducing the Wiz Partner Alliance: A New Chapter for Partner Success Preparing for Post-Quantum Cryptography Wiz Recognized as a 2025 Customers’ Choice in the Gartner® Peer Insights™ Voice of the Customer for CNAPP Expanding the Zero Critical Club to set a new standard for AppSec and SecOps teams Snipping the Long Tail of Shai-Hulud 2.0 Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know The Kenna Transition: Your Strategic Shift to Exposure Management From MCP to Vibe Coding: Full Endpoint Visibility in Wiz AI Security Bringing Oracle Cloud Identity to Wiz Zero‑Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025, with a Record High of CVEs in Critical Cloud Infra Gogs 0-Day Exploited in the Wild Code to Cloud Attacks: From Github PAT to Cloud Control Plane Top AWS re:Invent Announcements for Security Teams in 2025 React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182 React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability Wiz Product Announcements at re:Invent 2025: Expanding Visibility from Code to Cloud Introducing Wiz SAST: Where Code Risk Meets Cloud Context Wiz Becomes Fastest Security ISV to Reach $1 Billion in AWS Marketplace Lifetime Sales It's Here! Wiz Exposure Management is Now GA Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impact Service Catalog is Here: Expand Risk Visibility for Your Service and Its Dependencies, Simplify Issue Ownership WizOS: Powering Secured Image Adoption with AI 3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs Mastering Software Governance with Hosted Technologies Inventory Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets Get Certified on Wiz Defend for Threat Detection and Response Blueprint for Security: A Guide to Code, Governance, and Response Frameworks Google Unified Security Recommended Program Names Wiz Among First 3 Strategic Partners Introducing Posture Issues: Transform Security Findings into Actionable Outcomes Empower and Accelerate Your SOC with the Blue Agent Exposure Report: 65% of Leading AI Companies Found with Verified Secret Leaks Wizdom 2025 Product Announcements: Extending the Cloud Operating Model AI-Powered Wiz: From Agents to Everyday Intelligence Defend Agentless Workload Detection: Bringing Visibility to Blind Spots in Threat Detection Securing AI Agents with Wiz AI-SPM Introducing Wiz ASM: Context-Driven Attack Surface Management Securing Critical Infrastructure in the Cloud Era: A Policy and Technology Blueprint How CISOs Should Plan Security Budgets for 2026 Beyond the Checkbox: How Wiz Transforms SOC 2 into a Security Powerhouse Bringing Visibility to Kubernetes: Unified Inventory and Network Insight The Foundation Modern AppSec Is Still Missing: Code to Cloud, Rebuilt the Right Way Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces Introducing HoneyBee: How We Automate Honeypot Deployment for Threat Research RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS score Defending against database ransomware attacks AI Security 101: Mapping the AI Attack Surface Introducing zeroday.cloud: First-of-its-kind cloud and AI hacking competition Unifying Cloud Risk and Network Defense: Wiz and Check Point The emerging use of malware invoking AI Wiz achieves FedRAMP High authorization Wiz + HCP Terraform: Close the IaC-to-Cloud Infrastructure Security Gap IMDS Abused: Hunting Rare Behaviors to Uncover Exploits Beyond CVEs: The Exploitation of Everyday Misconfigurations Wiz Research Discovers One in Five Organizations Exposed to Systemic Risks in Vibe-Coded Applications - Here's How to Secure Them Introducing Wiz Incident Response: Your Expert Partner for Cloud Security Incidents Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malware DORA Compliance in the Cloud Era: Insights from Deloitte and Wiz How Wiz Customers like Brex and FICO See AI Changing Security Wiz Recognized as a Leader in the 2025 IDC MarketScape for ASPM
When AI Becomes the Heart of Security: Powering a Future You Can Trust
Wiz Team · 2025-11-05 · via Wiz Blog | RSS feed

Security is at an inflection point. Development cycles have accelerated from months to minutes. Cloud environments evolve continuously. And now, AI is accelerating everything—from how we build, to how we operate, to how we defend.

Across every organization, three forces are reshaping security in real time:

  1. AI is changing how we build. Teams are embedding AI into products and workflows, introducing new technologies that reshape how code, data, and infrastructure must be secured.

  2. AI is changing how we’re attacked. Threat actors are using it to find and exploit weaknesses faster than ever before.

  3. AI must also change how we defend. Security teams are under pressure to match that speed, to do more with less, and to respond with intelligence—not just automation.

At Wiz, we believe the only way to stay ahead is to make security as dynamic and intelligent as the environments it protects. When applied with intent, AI amplifies human expertise—turning complexity into clarity and enabling teams to stay ahead of every risk, not chase it.

AI in Wiz adds a dynamic layer of knowledge to the Security Graph— continuously interpreting the relationships between data, identities, and workloads to surface what matters most. It builds on the Graph’s deep understanding of your environment to reason, explain, and recommend with precision. 

Winning AI with AI

Data First: The Graph is the Foundation for Trusted AI

Every great AI system starts with one thing — great data. Without it, even the most advanced models produce noise instead of insight.

That’s why the Wiz Security Graph has always been our foundation. It unifies and normalizes signals across every layer of the cloud — identities, workloads, configurations, and data — while incorporating runtime signals and code-to-cloud lineage to map how they all connect. This model isn’t just data collection; it’s context creation. It captures how resources interact, who owns them, and what each relationship means for development and security teams.

Because AI is only as powerful as the data and knowledge bases available to it, the Graph gives security a unique advantage: clean, connected, and explainable data that fuels accurate modeling and intelligent reasoning. For security teams, that translates into faster time to insight, less manual correlation, and higher confidence in every decision. You don’t just get more information—you get better information, ready to act on.

If we rebuilt Wiz today in an AI-first world, we’d build it exactly the same way. The Graph has always been the heart of our platform — now it’s the engine powering a new generation of trusted, intelligent security.

Transparency: Act with confidence

AI earns trust when it can be explained. In security, explainability isn’t optional—it’s essential for building workflows with developers and the business. Teams need to understand why a decision was made before they can act on it confidently.

That’s why transparency is at the core of Wiz AI. Every recommendation, correlation, or prioritization is backed by clear reasoning: what data points were connected, why they matter, and how they influence the outcome. Wiz reinforces this through documentation like our Generative AI Principles and How Ask AI Works, which outlines the purpose and logic behind each AI feature. Within the platform, users can explore contextual insights, review supporting evidence, ask Mika AI to explain findings, and receive AI-driven remediation guidance that clearly communicates the “why” and “how” behind every fix.

This focus on visibility and validation ensures AI doesn’t just automate—it informs. It builds confidence, creates accountability, and transforms AI from a black box into a trusted teammate. Because in security, speed only matters when you trust where it’s taking you.

Actionability: AI That Strengthens Every Stage of Security

At Wiz, we’re building AI that acts as a force multiplier—turning understanding into action. It connects every risk to its owner, impact, and resolution path, enabling teams to respond with clarity and speed.

Our specialized AI Agents span the full security lifecycle—from code and build pipelines to cloud and runtime—bringing intelligence that fits naturally into how teams already work.

Each Agent draws from the Wiz Security Graph, combining deep context with explainable reasoning and trustworthy oversight to deliver outcomes that matter—not just automation for automation’s sake.

Risk Agents — Proactive Security: Anticipate and Act

Eliminate risk before it materializes. Risk Agents continuously connect insights across code, cloud, and runtime to reveal where vulnerabilities truly matter. They go beyond detection to drive resolution — completing investigations, evaluating remediation paths, and selecting the most efficient fix for your environment. They can initiate actions when appropriate,  perform root cause analysis, eliminate exposure, and identify or suggest the right owners to act.

They enable what we call the “Zero Critical Club” — helping teams focus only on issues that impact the business, cutting noise and accelerating remediation through intelligent, explainable action.

Threat Agents — Reactive Security: Respond Rapidly

Wiz streamlines investigation, reducing analyst load and ensuring only critical incidents rise to the top.
Threat Agents automatically triage alerts at scale — validating severity, correlating attack paths, and providing an explainable report your SOC can trust. The result: rapid, transparent investigation that empowers humans to act with confidence.

Together, these Agents form a continuous security loop — preventive, proactive, and reactive — all powered by one unified understanding of your environment.
Because in a world of infinite tools, the smartest AI is the one that shapes itself around you.

Today, that vision comes to life with the first set of Wiz AI Agents — the Issues Agent and SecOps Agent.

  • The Issues Agent accelerates proactive remediation by automatically connecting findings, ownership, and context to chart the most efficient path toward zero criticals.

  • The SecOps Agent transforms investigation speed and clarity, correlating alerts, workloads, and data into transparent, explainable incident reports your team can act on instantly.


Code Agents — Preventive Security: Build Securely

Your code is where innovation begins—and where security should too. Wiz Code’s AI helps teams catch and fix risks early in development. Coming soon , Code Agents will automatically triage findings, filter false positives, and provide confidence scores AppSec teams can trust. They also suggest secure fixes directly in pull requests so developers can take action fast. Powered by the Wiz Security Graph’s deep code-to-cloud context, Code Agents continuously turn findings into fixes, helping developers stay in the flow and build securely by design.

Quality Is What Endures

As AI becomes the heart of security, every organization will use it — but not every AI will be worth trusting. Speed, scale, and sophistication matter far less than the quality of the intelligence guiding them.

That’s why Wiz is built on data from the start. The trusted data, transparency, and actionability are the principles behind everything we create — and the reason our AI helps teams move faster with confidence. When intelligence is built on quality, it doesn’t just automate, it amplifies humans. It brings accuracy in every insight and flexibility in how it adapts, turning complexity into progress and helping teams scale their impact with trust at every step.

If you’re ready to experience it firsthand, explore our first AI Agent releases in the Wiz Preview Hub or try any of our AI-powered flows, including Mika — and start shaping what trusted, explainable AI looks like for your team. Read more on how to get started - here

See more from Wizdom 2025Download our AI Security Readiness Report