惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

SecWiki News
SecWiki News
D
Darknet – Hacking Tools, Hacker News & Cyber Security
I
Intezer
月光博客
月光博客
Cyberwarzone
Cyberwarzone
雷峰网
雷峰网
Security Latest
Security Latest
量子位
博客园 - 聂微东
小众软件
小众软件
NISL@THU
NISL@THU
C
Cisco Blogs
The GitHub Blog
The GitHub Blog
C
Cybersecurity and Infrastructure Security Agency CISA
T
Tor Project blog
Y
Y Combinator Blog
V
V2EX
博客园 - 三生石上(FineUI控件)
P
Privacy & Cybersecurity Law Blog
F
Full Disclosure
Cisco Talos Blog
Cisco Talos Blog
Microsoft Security Blog
Microsoft Security Blog
S
Security @ Cisco Blogs
The Register - Security
The Register - Security
Google DeepMind News
Google DeepMind News
J
Java Code Geeks
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
IT之家
IT之家
Webroot Blog
Webroot Blog
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
aimingoo的专栏
aimingoo的专栏
腾讯CDC
S
Schneier on Security
L
LINUX DO - 最新话题
Latest news
Latest news
Simon Willison's Weblog
Simon Willison's Weblog
罗磊的独立博客
A
Arctic Wolf
MyScale Blog
MyScale Blog
云风的 BLOG
云风的 BLOG
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
S
Secure Thoughts
S
Securelist
Stack Overflow Blog
Stack Overflow Blog
T
Troy Hunt's Blog
Recorded Future
Recorded Future
I
InfoQ
The Cloudflare Blog
H
Heimdal Security Blog
Hugging Face - Blog
Hugging Face - Blog

Wiz Blog | RSS feed

Meet Wiz for M365: Bringing SaaS into the Security Graph How to Harden GitHub Actions: An Updated Guide Bringing Security Visibility to Vercel with Wiz Axios NPM Distribution Compromised in Supply Chain Attack Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild The Wiz Blue Agent, now Generally Available Beyond the Badge: What Achieving Microsoft’s Certified Software Designation Means for Your Cloud Security Introducing the Green Agent: AI-Powered Remediation for the Cloud Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack Introducing the Wiz Red Agent- AI-Powered Attacker Introducing Wiz AI Application Protection Platform (AI-APP) Introducing Wiz Agents & Workflows: Security at the Speed of AI AI Runtime Threat Detection: From Input to Real-World Impact Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack It’s Official: Wiz Joins Google Understanding and Reducing AI Risk in Modern Applications Introducing Wiz Tenant Manager: Multi-Tenant Management for Federated Organizations The Agile FedRAMP Playbook, Part 4: Reactive Risk Management through Enriched Incident Response Wiz Achieves CPSTIC Certification in Spain Seeing AI Clearly: Building Visibility Across Modern AI Applications The Agile FedRAMP Playbook, Part 3: Preventative Risk Management by building Secure by Design Wiz Leads the 2026 Latio Application Security Report with awards in 4 categories Building an Agentic Cloud Security Ecosystem: A Reference Architecture with Wiz MCP and Infosys Cyber Next The Agile FedRAMP Playbook, Part 2: Proactive Risk Management with Continuous Monitoring Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows Would You Click ‘Accept’? Automatically detecting malicious Azure OAuth applications using LLMs Wiz Named a Leader in The Forrester Wave™: Cloud Native Application Protection Solutions, Q1 2026 From Detection to Remediation: It’s Time to Rethink AppSec Around Exploitability and Root Cause Fixes The Agile FedRAMP Playbook, Part 1: Why Risk is Your Best Starting Point Introducing AI Cyber Model Arena: A Real-World Benchmark for AI Agents in Cybersecurity Wiz + Spotify Backstage: Security at the Developer’s Desk Building AI Security Together: New Ways to Partner with Wiz for AI Security in 2026 Hacking Moltbook: The AI Social Network Any Human Can Control The Year in Wiz Research: 2025 Most Read Blogs WizExtend is Here: AI and Cloud Security Insights in Your Daily Workflow From Detection to Remediation: Wiz in Your JetBrains IDE Agentic Browser Security: 2025 Year-End Review CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild Introducing the Wiz Partner Alliance: A New Chapter for Partner Success Preparing for Post-Quantum Cryptography Wiz Recognized as a 2025 Customers’ Choice in the Gartner® Peer Insights™ Voice of the Customer for CNAPP Expanding the Zero Critical Club to set a new standard for AppSec and SecOps teams Snipping the Long Tail of Shai-Hulud 2.0 Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know The Kenna Transition: Your Strategic Shift to Exposure Management From MCP to Vibe Coding: Full Endpoint Visibility in Wiz AI Security Bringing Oracle Cloud Identity to Wiz Zero‑Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025, with a Record High of CVEs in Critical Cloud Infra Gogs 0-Day Exploited in the Wild Code to Cloud Attacks: From Github PAT to Cloud Control Plane Top AWS re:Invent Announcements for Security Teams in 2025 React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182 React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability Wiz Product Announcements at re:Invent 2025: Expanding Visibility from Code to Cloud Introducing Wiz SAST: Where Code Risk Meets Cloud Context Wiz Becomes Fastest Security ISV to Reach $1 Billion in AWS Marketplace Lifetime Sales It's Here! Wiz Exposure Management is Now GA Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impact Service Catalog is Here: Expand Risk Visibility for Your Service and Its Dependencies, Simplify Issue Ownership WizOS: Powering Secured Image Adoption with AI 3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs Mastering Software Governance with Hosted Technologies Inventory Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets Get Certified on Wiz Defend for Threat Detection and Response Blueprint for Security: A Guide to Code, Governance, and Response Frameworks Google Unified Security Recommended Program Names Wiz Among First 3 Strategic Partners Introducing Posture Issues: Transform Security Findings into Actionable Outcomes Empower and Accelerate Your SOC with the Blue Agent Exposure Report: 65% of Leading AI Companies Found with Verified Secret Leaks Wizdom 2025 Product Announcements: Extending the Cloud Operating Model When AI Becomes the Heart of Security: Powering a Future You Can Trust AI-Powered Wiz: From Agents to Everyday Intelligence Defend Agentless Workload Detection: Bringing Visibility to Blind Spots in Threat Detection Securing AI Agents with Wiz AI-SPM Introducing Wiz ASM: Context-Driven Attack Surface Management Securing Critical Infrastructure in the Cloud Era: A Policy and Technology Blueprint How CISOs Should Plan Security Budgets for 2026 Beyond the Checkbox: How Wiz Transforms SOC 2 into a Security Powerhouse Bringing Visibility to Kubernetes: Unified Inventory and Network Insight The Foundation Modern AppSec Is Still Missing: Code to Cloud, Rebuilt the Right Way Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces Introducing HoneyBee: How We Automate Honeypot Deployment for Threat Research RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS score Defending against database ransomware attacks AI Security 101: Mapping the AI Attack Surface Introducing zeroday.cloud: First-of-its-kind cloud and AI hacking competition Unifying Cloud Risk and Network Defense: Wiz and Check Point The emerging use of malware invoking AI Wiz achieves FedRAMP High authorization Wiz + HCP Terraform: Close the IaC-to-Cloud Infrastructure Security Gap IMDS Abused: Hunting Rare Behaviors to Uncover Exploits Beyond CVEs: The Exploitation of Everyday Misconfigurations Wiz Research Discovers One in Five Organizations Exposed to Systemic Risks in Vibe-Coded Applications - Here's How to Secure Them Introducing Wiz Incident Response: Your Expert Partner for Cloud Security Incidents Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malware DORA Compliance in the Cloud Era: Insights from Deloitte and Wiz How Wiz Customers like Brex and FICO See AI Changing Security Wiz Recognized as a Leader in the 2025 IDC MarketScape for ASPM
A 90-Day Action Plan to Turn Resolutions into Results with Wiz
Eden Naftali, Kelsey Nelson, Bandhna Bedi · 2026-01-15 · via Wiz Blog | RSS feed

It’s resolution season: a time for reflection, goal-setting, and planning for the year ahead. As cloud and AI innovation accelerates, the line between building and securing is disappearing, making cloud security a must-have on this year’s resolution list. If it is, you’re not alone. Maybe this is the year you finally get full visibility into your cloud environment, reduce risk more effectively, or scale cloud security across your organization so every team can own and act on security.

With Wiz, turning those resolutions into results doesn’t have to be hard. In your first 90 days, we make it simple to see your highest-priority risks, take action, and start building lasting cloud security practices from day one.

That’s why we created a cloud security maturity framework, informed by learnings from thousands of customers. It provides a practical path to help any organization, at any stage of cloud maturity, to know what to focus on first, what to tackle next, and how to drive lasting impact. By connecting risk across the entire cloud development lifecycle, it’s a modern approach that scales security across your organization, empowers teams to act, and evolves with you - keeping pace with the speed of innovation.

Read on for the essentials and best practices to follow in your first 90 days with Wiz, so you can start the year strong and make meaningful progress on your cloud security goals.

Foundation First: Champion Center as Your Guide

Every good New Year’s resolution starts with a solid foundation, and cloud security is no different. Whether your organization is accelerating a digital transformation initiative or is cloud/AI-native, the foundation of effective cloud security begins with comprehensive visibility across your entire cloud estate – and we really mean, everything. This includes normalizing security across different cloud and SaaS providers to simplify management. It also includes mapping application owners, infrastructure owners, and business context leveraging role-based access control so teams clearly understand the risk they own and can act fast.

The Wiz Champion Center is your starting point. It serves as a guide to onboarding and deepening your use of Wiz, helping you build the right cloud security habits early so your resolutions don’t fade by February.

The Champion Center gives you a range of modules for advancing your cloud security maturity and putting those cloud security resolutions into action. For example, the onboarding module includes guides for key steps such as how to: 

  • Gain Complete Visibility: Shift from fragmented views to a contextualized inventory. Learn about Wiz Connectors and Integrations, view your current deployments, and see every asset from the moment code is written to its behavior in live runtime.

  • Define Ownership with Projects and Service Catalog:  Your cloud estate isn't a monolith. Use Projects to implement role-based access control at the business unit level, giving teams ownership over their part of the environment. Use the Service Catalog to model developer-owned microservices, allowing you to map Wiz to your organization’s unique structure so each team can manage risk within their scope.

  • Operationalize Security: Security findings shouldn't live in a siloed dashboard. Explore how to push Wiz insights directly into your existing workflow tools (Jira, ServiceNow, Slack) with Wiz Actions for automated, rapid remediation.

Expand Wiz Across Your Organization

Organizations that are most successful and achieve Zero Criticals the fastest are those that pull in teams across their organization and establish a  cross-functional ‘Wizard Council.’ Today, more than 50% of Wiz users sit outside security, in development roles, proving that everyone actually wants in on the cloud security New Year’s party.

Because Wiz has visibility across the code to cloud to runtime lifecycle, we can help organizations not only answer key questions like, “Who is the right person to go to if there’s a risk discovered in a particular technology? How do we prevent similar risks in the future?” We also help customers build a stronger culture of security by empowering individual teams with the insights, context, and evidence they need to take ownership of their domain and remediate issues quickly and confidently.

To support this, capabilities like the Service Catalog, which we released into GA in December, as well as Lens offer teams more specific views of the Wiz Platform into the areas that are most important to them. This could mean helping a development team manage the security posture of the microservices they own or providing your data security teams with an overview of sensitive data detected across your environment.

Wiz Lens providing a specific Data Security view of the Wiz Platform

Your Path to the Zero Criticals Club: Quantifying and Tracking Success

One of the hardest things in security is tracking progress - but with Wiz, it doesn’t have to be. Out of the box, the Champion Center gives you visibility into the KPIs that matter for your Security, Engineering, and Executive teams. From day one, you can track your progress, see when you’ve achieved wins, and celebrate milestones as you work toward operationalizing your cloud security - because nothing says “new year, new habits” like aiming for the Zero Criticals Club (and maybe the Zero Code Criticals Club and Zero Time to Respond Club if you’re extra fast).

Use both out-of-the-box and custom metrics to track critical security and compliance indicators for your business. Monitor these at the project level - by team, environment, or other dimensions - and use Boards to give teams visibility into the metrics that matter to them. Your identity team can track how many users and accounts have highly privileged access, while SecOps teams can measure progress toward resolving triggered threats over the past month. With 20+ boards available out of the box, Wiz gives every team the insights they need to track, act, and succeed, no confetti cannon required (but highly encouraged).

Stay Ahead: Explore and Do More 

Wiz is constantly evolving, giving you the tools to stay ahead and be more self-sufficient. Our platform makes it easy to explore new capabilities, track upcoming features, and take action, all without needing to contact support. Think of it like your very own cloud security New Year’s buffet: pick what matters most, try it out, and celebrate each release as it lands.

  • The Preview & Migration Hub lets teams discover our latest product features and upcoming migrations at their own pace. From this page, you can learn about features currently in preview, activate public preview features, share your feedback, or enable upcoming migrations. 

  • The Roadmap Tracker lets you explore the magic ahead in Wiz. Browse Wiz Highlights to see what’s coming, search our detailed roadmap to track planned and in-development features, and tell us what you want Wiz to build next via the Wizdom Community or your technical account manager. Save the features you care about most to your own view, so you’re the first to know when they land, and ready to put them to work.

  • Finally, Product Updates now live directly in Wiz, putting you in the driver’s seat. Easily filter and sort updates by product, integration, module, release date, and more, so you can focus on the releases that matter most to you, from major platform launches to changes impacting a specific deployment. When action is required, like an upcoming migration, you’ll have clear context, timing, and next steps right where you need them.

Turns Out, Your Cloud Security Resolution Is Sticking

Ninety days in, you’re not scrambling - you’re building. You have clear visibility into risk, defined ownership across teams, and real momentum. Most importantly, you’re set up with a cloud security operating model that keeps pace with how your teams actually build in the cloud.

By this point, teams are acting on insights, reducing high-priority risks, and tracking measurable progress, turning early wins into a foundation for lasting impact.

And day 90? That’s just the beginning. Be on the lookout for more details on how to continue maturing your cloud security program, operationalize more advanced workflows, and keep ahead as your environment evolves.

So if you were worried about keeping at least one resolution this year, don’t be. With Wiz, cloud security is one you’ll keep, and build on.