惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

SecWiki News
SecWiki News
D
Darknet – Hacking Tools, Hacker News & Cyber Security
I
Intezer
月光博客
月光博客
Cyberwarzone
Cyberwarzone
雷峰网
雷峰网
Security Latest
Security Latest
量子位
博客园 - 聂微东
小众软件
小众软件
NISL@THU
NISL@THU
C
Cisco Blogs
The GitHub Blog
The GitHub Blog
C
Cybersecurity and Infrastructure Security Agency CISA
T
Tor Project blog
Y
Y Combinator Blog
V
V2EX
博客园 - 三生石上(FineUI控件)
P
Privacy & Cybersecurity Law Blog
F
Full Disclosure
Cisco Talos Blog
Cisco Talos Blog
Microsoft Security Blog
Microsoft Security Blog
S
Security @ Cisco Blogs
The Register - Security
The Register - Security
Google DeepMind News
Google DeepMind News
J
Java Code Geeks
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
IT之家
IT之家
Webroot Blog
Webroot Blog
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
aimingoo的专栏
aimingoo的专栏
腾讯CDC
S
Schneier on Security
L
LINUX DO - 最新话题
Latest news
Latest news
Simon Willison's Weblog
Simon Willison's Weblog
罗磊的独立博客
A
Arctic Wolf
MyScale Blog
MyScale Blog
云风的 BLOG
云风的 BLOG
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
S
Secure Thoughts
S
Securelist
Stack Overflow Blog
Stack Overflow Blog
T
Troy Hunt's Blog
Recorded Future
Recorded Future
I
InfoQ
The Cloudflare Blog
H
Heimdal Security Blog
Hugging Face - Blog
Hugging Face - Blog

Wiz Blog | RSS feed

Meet Wiz for M365: Bringing SaaS into the Security Graph How to Harden GitHub Actions: An Updated Guide Bringing Security Visibility to Vercel with Wiz Axios NPM Distribution Compromised in Supply Chain Attack Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild The Wiz Blue Agent, now Generally Available Beyond the Badge: What Achieving Microsoft’s Certified Software Designation Means for Your Cloud Security Introducing the Green Agent: AI-Powered Remediation for the Cloud Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack Introducing the Wiz Red Agent- AI-Powered Attacker Introducing Wiz AI Application Protection Platform (AI-APP) Introducing Wiz Agents & Workflows: Security at the Speed of AI AI Runtime Threat Detection: From Input to Real-World Impact Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack It’s Official: Wiz Joins Google Understanding and Reducing AI Risk in Modern Applications Introducing Wiz Tenant Manager: Multi-Tenant Management for Federated Organizations The Agile FedRAMP Playbook, Part 4: Reactive Risk Management through Enriched Incident Response Wiz Achieves CPSTIC Certification in Spain Seeing AI Clearly: Building Visibility Across Modern AI Applications The Agile FedRAMP Playbook, Part 3: Preventative Risk Management by building Secure by Design Wiz Leads the 2026 Latio Application Security Report with awards in 4 categories Building an Agentic Cloud Security Ecosystem: A Reference Architecture with Wiz MCP and Infosys Cyber Next The Agile FedRAMP Playbook, Part 2: Proactive Risk Management with Continuous Monitoring Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows Would You Click ‘Accept’? Automatically detecting malicious Azure OAuth applications using LLMs Wiz Named a Leader in The Forrester Wave™: Cloud Native Application Protection Solutions, Q1 2026 From Detection to Remediation: It’s Time to Rethink AppSec Around Exploitability and Root Cause Fixes The Agile FedRAMP Playbook, Part 1: Why Risk is Your Best Starting Point Introducing AI Cyber Model Arena: A Real-World Benchmark for AI Agents in Cybersecurity Wiz + Spotify Backstage: Security at the Developer’s Desk Building AI Security Together: New Ways to Partner with Wiz for AI Security in 2026 Hacking Moltbook: The AI Social Network Any Human Can Control The Year in Wiz Research: 2025 Most Read Blogs WizExtend is Here: AI and Cloud Security Insights in Your Daily Workflow From Detection to Remediation: Wiz in Your JetBrains IDE Agentic Browser Security: 2025 Year-End Review CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild A 90-Day Action Plan to Turn Resolutions into Results with Wiz Introducing the Wiz Partner Alliance: A New Chapter for Partner Success Preparing for Post-Quantum Cryptography Wiz Recognized as a 2025 Customers’ Choice in the Gartner® Peer Insights™ Voice of the Customer for CNAPP Expanding the Zero Critical Club to set a new standard for AppSec and SecOps teams Snipping the Long Tail of Shai-Hulud 2.0 Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know The Kenna Transition: Your Strategic Shift to Exposure Management From MCP to Vibe Coding: Full Endpoint Visibility in Wiz AI Security Bringing Oracle Cloud Identity to Wiz Zero‑Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025, with a Record High of CVEs in Critical Cloud Infra Gogs 0-Day Exploited in the Wild Code to Cloud Attacks: From Github PAT to Cloud Control Plane Top AWS re:Invent Announcements for Security Teams in 2025 React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182 React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability Wiz Product Announcements at re:Invent 2025: Expanding Visibility from Code to Cloud Introducing Wiz SAST: Where Code Risk Meets Cloud Context Wiz Becomes Fastest Security ISV to Reach $1 Billion in AWS Marketplace Lifetime Sales It's Here! Wiz Exposure Management is Now GA Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impact Service Catalog is Here: Expand Risk Visibility for Your Service and Its Dependencies, Simplify Issue Ownership WizOS: Powering Secured Image Adoption with AI 3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs Mastering Software Governance with Hosted Technologies Inventory Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets Get Certified on Wiz Defend for Threat Detection and Response Blueprint for Security: A Guide to Code, Governance, and Response Frameworks Google Unified Security Recommended Program Names Wiz Among First 3 Strategic Partners Introducing Posture Issues: Transform Security Findings into Actionable Outcomes Empower and Accelerate Your SOC with the Blue Agent Exposure Report: 65% of Leading AI Companies Found with Verified Secret Leaks Wizdom 2025 Product Announcements: Extending the Cloud Operating Model When AI Becomes the Heart of Security: Powering a Future You Can Trust AI-Powered Wiz: From Agents to Everyday Intelligence Defend Agentless Workload Detection: Bringing Visibility to Blind Spots in Threat Detection Securing AI Agents with Wiz AI-SPM Introducing Wiz ASM: Context-Driven Attack Surface Management Securing Critical Infrastructure in the Cloud Era: A Policy and Technology Blueprint How CISOs Should Plan Security Budgets for 2026 Beyond the Checkbox: How Wiz Transforms SOC 2 into a Security Powerhouse Bringing Visibility to Kubernetes: Unified Inventory and Network Insight The Foundation Modern AppSec Is Still Missing: Code to Cloud, Rebuilt the Right Way Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces Introducing HoneyBee: How We Automate Honeypot Deployment for Threat Research RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS score Defending against database ransomware attacks AI Security 101: Mapping the AI Attack Surface Introducing zeroday.cloud: First-of-its-kind cloud and AI hacking competition Unifying Cloud Risk and Network Defense: Wiz and Check Point The emerging use of malware invoking AI Wiz achieves FedRAMP High authorization Wiz + HCP Terraform: Close the IaC-to-Cloud Infrastructure Security Gap IMDS Abused: Hunting Rare Behaviors to Uncover Exploits Beyond CVEs: The Exploitation of Everyday Misconfigurations Wiz Research Discovers One in Five Organizations Exposed to Systemic Risks in Vibe-Coded Applications - Here's How to Secure Them Introducing Wiz Incident Response: Your Expert Partner for Cloud Security Incidents Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malware DORA Compliance in the Cloud Era: Insights from Deloitte and Wiz How Wiz Customers like Brex and FICO See AI Changing Security
Zero Critical Issues, Infinite Security Potential
Shashank Golla, Eden Naftali · 2025-06-03 · via Wiz Blog | RSS feed

We're thrilled to announce that over 50% of Wiz customers have joined the Wiz Zero Critical Club (ZCC)! This milestone highlights our customers' incredible dedication to eliminating critical Wiz Issues—dangerous combinations of risks that create attack paths to crown jewels like sensitive data. Fixing these critical Issues is the most impactful action teams can take to reduce their cloud attack surface. By achieving zero critical status, these organizations have significantly reduced their attack surface by prioritizing and addressing the critical Issues posing the greatest risks in their environments. 

Reaching zero critical status isn't easy. Each Zero Critical Club member sets the benchmark by operationalizing security workflows, embedding security into daily operations, and democratizing security responsibilities across their teams to achieve continuous, measurable improvements in their cloud security posture. Wiz Issues supports this process by providing cloud security teams with a centralized, actionable view of their highest-priority risks, enabling rapid and effective reduction in their attack surface. 

What Comes Next: The Wiz All-Stars Club 

Achieving zero critical status is a significant milestone—but it's just the beginning of our customers security excellence journey. We're excited to introduce the Wiz All-Stars Club, the next milestone for Zero Critical Club members focused on sustaining and enhancing their cloud security posture. 

The All-Stars Club recognizes customers who actively engage their teams to maintain consistently exceptional security outcomes. Through The Champion Center, customers can earn achievements that reward proactive security practices in different risk domains. For instance, the Vulnerability Vanquisher badge recognizes zero vulnerabilities tied to Wiz Critical Issues or the Identity Investigator badge which is achieved when you have zero roles with excessive admin privileges identified. These badges incentivize teams, foster accountability, and democratize cloud security responsibility, making it achievable for every team member to contribute directly to organizational security objectives.

Maintain Zero Critical with MTTR Streaks 

Sustaining zero critical status requires ongoing vigilance, which is why we're introducing MTTR (Mean Time to Resolution) streaks. MTTR measures how quickly teams remediate new critical Issues that emerge. Shorter MTTR translates directly into reduced risk exposure and stronger organizational resilience. 

Wiz automatically calculates MTTR streaks, gamifying consistent performance and motivating teams to proactively address critical issues—ensuring new critical Issues never disrupt your zero critical status.

Spotlight on Success: Customer Stories  

From Security Excellence to Unparalleled Protection: Sitecore’s Zero Critical Journey with Wiz  

At the start of 2024, Sitecore—a leading digital experience platform trusted by global brands to manage content, commerce, and personalization—kicked off its journey to strengthen cloud security with Wiz. Upon deployment, Wiz provided insights across their multi-cloud, multi-tenant environment, empowering the team to swiftly tackle their security initiatives. 

Wiz has elevated our security posture to exceptional standards, providing comprehensive visibility that enables us to maintain the highest level of protection across our cloud environment

Stavros Mitrogiannopoulos, Senior Manager, Security Services at Sitecore

Wiz Issues brought clarity with pre-analyzed attack paths, making it easier to communicate the risk behind each issue and prioritize effectively. “The visualization helped our leadership and teams quickly understand why something was critical and what needed to be done,”  said Stravos.

Sitecore took a systematic approach to remediation—starting with production environments and prioritizing the protection of customer data. With a multi-org structure in place, they empowered each team to take ownership of their infrastructure, while the central security team orchestrated the process by providing context, access, and guidance to ensure efficient remediation. 

By December 2024—just 11 months later—Sitecore had reached zero criticals. “It was a great way to close out the year. The achievement was made possible by collaboration across the organization and a shared commitment to security,” said Stavros. 

To maintain their Zero Critical status, Sitecore now focuses on shifting security earlier in the development lifecycle and automating controls to prevent risk from being introduced in the first place. This shift-left approach ensures that security remains embedded across teams—enabling Sitecore to stay secure at scale. 

Wiz helps us maintain real-time visibility and prioritize with context, so we can proactively address critical issues without slowing the business down.”

Stavros Mitrogiannopoulos, Senior Manager, Security Services at Sitecore

Democratizing Security: How R1 Reached Zero Criticals by Empowering non-Security teams 

When R1 evaluated cloud security platforms, Wiz stood out immediately—“a one-day love story,” as Justin Vlahacos, Sr. Director of Security Architecture & Engineering, put it. “Even before we saw the risks in our environment, the visibility into the technologies running in our cloud was amazing.” 

After onboarding Wiz across their cloud environments, R1 rallied infrastructure, platform ops, and engineering into a unified push toward Zero Critical Issues. With Projects, RBAC, and the breadth of the Wiz Integration Network (WIN), they scoped each team’s view to only the risks that mattered to them and delivered Issues directly into their existing ticketing and messaging workflows. In less than a month, they reached Zero Criticals—laying the foundation for how the organization collaborates to secure the cloud. 

Our team looks at Wiz’s Critical Issues daily—it’s how we measure security success. Wiz enables us to translate complex cloud risks into layman’s terms, helping non-security teams understand and act on risks in their own environments. By democratizing access to context-rich issues, R1 turned cloud security into a self-serve practice embedded across engineering, ops, and infrastructure teams.

Justin Vlahacos, Sr. Director of Security Architecture & Engineering, R1 RCM

From Unknown Risks to Zero Criticals: Gaining Confidence Through Full Visibility  

DuPont, a global leader operating over 1,500 virtual machines, dramatically improved their cloud security visibility by adopting Wiz. Initially, Wiz uncovered critical risks DuPont was previously unaware of—including sensitive data exposures and malware vulnerabilities in dormant websites. "Wiz pointed out risks we didn’t even know were there before," said Michael Bolig, a Risk Analyst at DuPont. Achieving zero critical status not only bolstered their security posture but also fostered greater collaboration and confidence across teams.

"Wiz gives me that extra level of comfort—I know I'll be informed immediately if a critical security risk emerges in our environment."

Azhar Hussain, Cloud Architect, Dupont

These stories showcase the tangible impact of proactive security practices, innovative technology, and collaboration-driven security cultures.  

Join the Club: Tools to Conquer the Cloud Security Challenge  

Maintaining zero critical status presents challenges: limited resources, competing priorities, and rapidly evolving threats. Wiz equips organizations of all sizes to tackle these head-on. By providing clear pathways in the Champion Center, Wiz helps operationalize security, define achievable goals, and empower team-wide participation.  

With the Wiz All-Stars Club and MTTR streaks, we offer the tools, motivation, and recognition to continually advance your cloud security journey. Congratulations again to our Zero Critical Club members—your dedication inspires the entire Wiz community. Here’s to infinite potential ahead!  

Inspired by these success stories on tackling cloud security and already using Wiz? Head to the Champion Center today in Wiz. If you're looking to operationalize cloud security and achieve zero Critical Isues with Wiz, reach out to us today.