techarda
⌕
Security

How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed)

Wiz
Linked source · Wiz Blog
From the source: Wiz Blog

Traditional DSPM and classification tools scan from the inside out. Thinking like an attacker, the Red Agent found a public page exposing sensitive data in minutes.

Read the full story on Wiz Blog
Originally published by Wiz Blog on 8 Oct 2026. Techarda links to the original rather than republishing it. Read the full article →

Ask the square

The story is what was announced. If it raises a question for your team, ask the people who run this technology day to day. Your post links back to this story, so the next reader finds it too.

Ask a question about this storyStart a discussionSee the Security space →

Recent threads in Security

Something wrong or out of date? Suggest a correction. We reply within 5 business days.

More from Wiz

Recent updates from Wiz, so you can tell whether this is a one-off or part of a pattern.

All Wiz news →
Security

Supply Chain Zero Days: Closing the Gap Between Publication and Detection

When trusted packages are compromised, malicious code can quickly spread throughout and beyond developer environments. See how Wiz’s supply chain pipeline identifies compromised packages at publication, helping teams detect zero-day supply chain compromises in Wiz Defend before a CVE is published

Wiz·via Wiz Blog
Security

Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack

Wiz CIRT responded to AI-driven attacks spanning cloud, Kubernetes, CI/CD, and identity. Learn how these attacks behave and how to detect them.

Wiz·via Wiz Blog
Security

ASPM in the AI Era Part 1: Unified Visibility Across Your Stack

Integrate your existing code scanners into Wiz for a unified view of application risk across your environment.

Wiz·via Wiz Blog

More in Security

What other companies in Security are doing. The category page shows who’s active, side by side.

Compare companies in Security →
Security

Continuous accountability for Verified bots

Identity alone doesn't guarantee a bot will behave responsibly. We are introducing a system to continuously evaluate whether Verified bots honor site preferences, like robots.txt and HTTP 429s, ensuring they remain accountable over time.

Cloudflare·via Cloudflare Blog
Security

September 2026 Cyber Threat Landscape: Global Attacks Jump 48% as Phishing and GenAI Data Exposure Rise

Key takeaways Organizations experienced 2,803 weekly cyber attacks on average in September, up 16% month over month and 48% year over year. Education remained the most targeted sector, averaging 6,656 weekly attacks per organization, a 59% year-over-year increase. Europe recorded the sharpest regional rise at 61% year over year, while Latin America faced the highest volume at 3,813 weekly attacks…

Check Point Software·via Check Point Software Blog
Security

Introducing Clairic, a new System One class of extraction models

Clairic is a new model from Cloudflare that is a System One extraction modeI, capable of extracting, computing, estimating, and forecasting data from unstructured inputs.

Cloudflare·via Cloudflare Blog
Security

Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in

Why the controls on an AI agent have to live outside of it, and what a security operations team can implement and maintain those controls. The new privileged user in your environment Security teams spent two decades learning how to work with the people they trust most. Domain admins, DBAs, finance approvers and contractors with VPN access all get a mature playbook: verified identity, scoped…

Rapid7·via Rapid7 Blog