Wiz

Wiz says vulnerability remediation could be 10 times faster
Wiz says its Green Agent tool automates three key steps in vulnerability remediation: identifying the owner of the affected asset, finding the root cause and preparing a…

Wiz pairs Red and Blue Agents to bring AI offense and defense to the SOC
Wiz is pitching two AI agents as a way for security operations centers to act before a breach and to investigate faster once one starts. According to the company, the…

Nine AI developer platforms report breaches in October, Wiz links stolen keys to LLM resale
At least nine AI developer platforms disclosed security incidents in October, according to security firm Wiz, which says stolen credentials from these breaches are…

Wiz Survey: 55% of Firms Run AI Agents, Only 17% Track All AI Assets
Autonomous AI agents are now deployed at 55% of surveyed enterprises, but only 17% maintain a comprehensive, up-to-date inventory of their AI assets, according to a new…

Wiz: AI agents now run much of the hands-on work in real cyber intrusions
Cloud security firm Wiz says it increasingly sees intrusions in which AI agents handle much of the hands-on work and potentially orchestrate the attack, while a human…

Wiz: Actor Uses ARTEX AI Pen-Testing Agent Against IT and Software Vendors
Wiz says it identified an actor using tooling associated with ARTEX, an autonomous AI penetration-testing agent, to target multiple IT and software vendors throughout…

Malicious LiteLLM 1.107.0 on PyPI steals credentials, Wiz warns
Security firm Wiz reports that a malicious version of the LiteLLM Python package, 1.107.0, was uploaded to PyPI on October 21 and designed to steal credentials from…
Top storyPHP2Shell: Wiz says AI helped find critical remote code flaws in PHP
Wiz Research says it found multiple critical vulnerabilities in core PHP that allow unauthenticated remote code execution and memory disclosure, and that frontier AI…
Safety and ethicsOpenAI leads coalition to fix critical PHP flaws found with GPT-5.6 Sol
OpenAI says it led a coalition of maintainers, researchers and security providers over the past two months to address critical vulnerabilities in PHP, the open-source…

Wiz: Hackers hijack cloud billing accounts to fund mass Gemini API use
Threat actors are compromising Google Cloud accounts solely to make victims pay for large-scale LLM usage, according to the Wiz Customer Incident Response Team (CIRT).…

Wiz: AI Agents Are Now Running Entire Cloud Attacks at Machine Speed
The Wiz Customer Incident Response Team (CIRT) says AI agents are now running entire cloud intrusions on their own, from finding entry points to harvesting credentials…

Wiz brings its AI Agents to FedRAMP High environment, Wiz for Gov
Wiz has made its Wiz AI Agents available inside Wiz for U.S. Government (Wiz for Gov), its FedRAMP High authorized environment. According to Wiz, this makes Wiz for Gov…
Top storyGoogle DeepMind details safety layers behind Gemini 4 Argon rollout
Google DeepMind has begun rolling out Gemini 4 Argon broadly and published an account of the safeguards built around it. The company says the model has frontier-level…

Wiz launches AI SAST in public preview for Wiz Code customers
Wiz has released Wiz AI SAST as a Public Preview capability for all Wiz Code customers. According to the company, the tool uses AI models to find complex application…

Wiz expands Service Catalog with auto-discovery, posture policies and a Services Board
Wiz has added a set of discovery, governance and context features to its Service Catalog, aiming to tie cloud resources and risks to the services, teams and owners…

Wiz: Infostealers Turn Stolen Developer Credentials Into Cloud and AI Breaches
Infostealer malware has become a leading way into enterprise cloud, code and AI environments, according to a new Wiz analysis. The security firm says attackers harvest…