Wiz

In <15 min: Our Wiz Red Agent found its way into an airline booking database ✈️ Our Red Agent started with nothing more than an airline's homepage [Yes, no insider knowledge.] It autonomously mapped the application's architecture, minted an anonymous session, discovered a GraphQL authorization flaw, and exposed access to customer booking records. This wasn't a zero-day. It was a classic Broken Object-Level Authorization (BOLA) issue, still the #1 API security risk. The takeaway? AI agents don't just scan for signatures. They reason through applications the way an attacker would, connecting small clues into real attack paths. See how our Red Agent uncovered the issue >> https://lnkd.in/dDsx_syi

📣 COMING SOON: What happens when you ask Wiz threat researchers the internet's most burning questions? 🕵️♀️ We are sitting down with Dan Becker and Merav Bar for our spin on the autocomplete interview. They cover the toughest security questions from identifying malicious IPs to whether they actually have hobbies outside of catching hackers. Full video drops soon. Until then, comment the question you want answered most ↓

📢 Starting now: Wiz Sensor-based Workload Scanner is GA! 👏 We are bringing the same risk clarity and prioritization Wiz delivers in the cloud to on-premise environments. What's new? For the first time, hybrid teams have a single, unified view of risk across their entire infrastructure ↓ 1) On-premise is now part of the Wiz Security Graph, your hybrid cloud finally has one source of truth 2) Stop treating every vulnerability like an emergency, Wiz brings the same context-driven risk prioritization to on-prem that cloud teams have always had 3) From exposure to attack path to active threat, one platform covers the full picture, wherever your workloads run The on-premise environment is no longer a silo. It's part of Wiz. Read more about what this means for your team 👇 https://lnkd.in/eWZ6a8Qg

👀 Look closer: Wiz is bringing runtime signals into the Security Graph 👏🏻 By bringing runtime signals into the Security Graph, Wiz uncovers attack paths that configuration and inventory data alone can't reveal. In our analysis, 1 in 6 cloud environments contained a critical attack path that would have otherwise gone unnoticed. These weren't caused by misconfigurations or missing patches - they were live network connections between vulnerable workloads and sensitive data. Now, Wiz shows you: 1) Which risks have a live path to your most sensitive data 2) Which connections are happening that nobody intended 3) Which attack paths are invisible to configuration analysis alone Read more: https://lnkd.in/eKG-JS_P

🤖 AI is rewriting the SecOps playbook. AI is changing the speed and scale of modern environments, requiring security teams to understand more and respond faster. The result? Defenders have less time to understand what's happening. That's why context is becoming the most important asset in security operations. The organizations that win won't be the ones with the most alerts or automation - they'll be the ones that gather context before attacks hit, monitor the expanded threat environment, and respond at machine speed. 📊 Learn more in our blog by Arie Zilberstein: https://lnkd.in/eWz_4nsT

AI changed the rules... So we built a new playbook.📝 🧠 Over the last few weeks, we've shared the 4 pillars of our 'AI Threat Readiness Framework': 1) Eliminate critical risk & scan any exposure with AI 2) Accelerate patching and zero-day response 3) Perform deep AI code analysis 4) Detect and contain AI-powered threats in real time Because in the AI era, finding vulnerabilities isn't enough. You need to know what's actually exploitable, who should fix it, and how to get from code to cloud (and back) at machine speed. That's the future we're building at Wiz. learn more: https://lnkd.in/e_b_k5BU

🎁 We're looking for 1 SOC team to receive the ULTIMATE OFFICE GLOW-UP 🏆 INTRODUCING 🎉 Wiz's PIMP MY SOC! How to enter? 1) In the comments, tell us why your SOC team is the MVP of your company 2) Tag your teammates in the comment The team with the best story will win the ultimate SOC office upgrade. WHY? Because the people defending the business deserve a workspace that reflects the impact they make. LETS GO 👇

🍦 JUST DROPPED: CISO SCOOPS 🍦 The best way to cool down a CISO this summer? ICE CREAM 😎 >> cisotopia.com/cisoscoops Inspired by what security teams deal with every day, we've created flavors like: 🎣 PHISH FOOD SCOOP 🥵 HALF-PATCHED SCOOP 🍒 QUERY GARCIA SCOOP 🐵 CHUNKY MON-KEY SCOOP 🎁 Want to win FREE ice cream for the summer? Leave your 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝘀𝗰𝗼𝗼𝗽 in the comments ↓ The funnier the better. – 🏆 May the best scoops win. https://lnkd.in/eXqQsbrP

🧠 Your official inside look into the Red Agent reasoning >> starts now! Today we're launching the Red Agent POV Series - an inside look at how our AI-powered attacker uncovers real, exploitable risks in production. In just one month, our Red Agent completed hundreds of thousands of autonomous scans across ~1,000 environments and uncovered more than 17,000 unique findings, including 5,500+ high and critical vulnerabilities. And in this POV series, we give you a glimpse into how it did it. In our first exploit breakdown, we show exactly how the agent executed 96 iterations to uncover a hidden SSRF vulnerability🛡️ How does an autonomous AI attacker actually think? 👀 Read the first Red Agent POV breakdown below 👇 https://lnkd.in/eEcAGHcS

🚨 DROPPING THURSDAY: CISO SCOOPS 🍦 We're launching the 1st-ever ice cream flavors made for security pros - built to cool down even the hottest cloud security summer. And yes… We're giving away an epic prize 🍨 No reruns. No second chances. 😉 ⏳ Set your alarms: Thursday, 9 AM ET