https://cybertoolchain.io/tools/wiz-cloud New releases and features in Wiz Cloud, tracked by The Cyber Toolchain. en Wed, 19 Aug 2026 15:36:58 GMT https://www.wiz.io/blog/wiz-pen-test-findings-is-now-ga https://www.wiz.io/blog/wiz-pen-test-findings-is-now-ga Wed, 19 Aug 2026 15:36:58 GMT Wiz GA's Pen Test Findings with Security Graph correlation, adds Google Threat Intelligence enrichment and hybrid/SaaS coverage expansions. • Adds Graph Controls that surface attack paths tied to pen-test findings, enabling blast-radius visualization correlated against external network exposure, identity privileges, secrets, data, and lateral movement paths in the Wiz Security Graph. • Integrates Google Threat Intelligence — enriching Wiz risk and threat findings with Mandiant frontline intelligence, VirusTotal crowdsourced intelligence, and Google threat insights, available out of the box to all Wiz customers. • Extends Google Threat Intelligence enrichment to malware findings, providing rich context beyond a simple verdict to accelerate investigation prioritization. • Adds Google Threat Intelligence malicious AI Skill intelligence to identify potentially risky open-source skills that AI agents can import, addressing agentic AI attack surfaces. • Extends the Security Graph into on-premises and hybrid environments via the Sensor Workload Scanner for unified hybrid security posture. • Connects third-party inventory and risk findings into the Security Graph, enabling unified vulnerability prioritization across all finding types using Wiz context and attack paths. • Extends Security Graph risk assessment coverage to SaaS applications including M365, closing visibility gaps across enterprise SaaS. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz-cloud https://www.wiz.io/blog/wiz-brings-automated-disa-stig-assessment-to-amazon-linux-and-windows-server https://www.wiz.io/blog/wiz-brings-automated-disa-stig-assessment-to-amazon-linux-and-windows-server Thu, 06 Aug 2026 12:00:00 GMT Wiz adds automated DISA STIG assessment for Amazon Linux 2023 and Windows Server 2025 via agentless Host Configuration Rules. • Adds DISA STIG Amazon Linux 2023 benchmark support via Host Configuration Rules (HCR), providing continuous agentless assessment across all connected cloud instances without SCAP content or scan credentials. • Adds DISA STIG Microsoft Windows Server 2025 benchmark support via Host Configuration Rules (HCR), with an initial automated rule set and expanding coverage in upcoming releases. • STIG findings for both frameworks surface in the Compliance Posture dashboard alongside existing frameworks, with per-rule pass/fail status per instance and rollup into category and subcategory scores. • Supports filtering findings by STIG severity category (CAT I, CAT II, CAT III) to prioritize high-impact failures. • Enables Compliance Posture Trend tracking, auditor report generation, and automation rules to create tickets or trigger remediation workflows for failed STIG checks. • Available to all Wiz for Government customers under existing Wiz licenses with no additional license required. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz-cloud https://www.wiz.io/blog/agentic-code-security https://www.wiz.io/blog/agentic-code-security Thu, 30 Jul 2026 16:47:57 GMT Wiz launches ASM and Red Agent in GA: continuous attack-surface monitoring plus AI-driven autonomous penetration testing. • New Wiz ASM (GA): continuously identifies exposed assets, weak credentials, and misconfigurations, linking risks to application and code ownership so teams know where risk is introduced and where it becomes exposed. • New Wiz Red Agent (GA): autonomously tests live environments and applications using AI to determine which exposures lead to real, exploitable attack paths. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz-cloud https://www.wiz.io/blog/agentless-threat-hunting-fortigate https://www.wiz.io/blog/agentless-threat-hunting-fortigate Wed, 22 Jul 2026 14:24:50 GMT Wiz adds a Threat Actors page listing historical threat actors that have targeted Fortinet products. • New Threat Actors page surfaces a comprehensive list of threat actors that have historically targeted Fortinet products. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz-cloud https://www.wiz.io/blog/iac-coverage-security-dashboard https://www.wiz.io/blog/iac-coverage-security-dashboard Mon, 13 Jul 2026 12:34:03 GMT Wiz IaC Inventory reaches GA, linking every IaC module to its live cloud deployments and managed resources. • IaC Inventory is now Generally Available, connecting every IaC module to the deployments it created and the live cloud resources it manages. • Reconciles Wiz Code IaC scan results with Wiz Cloud runtime visibility, bridging infrastructure-as-code definitions to what is actually running. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz-cloud https://www.wiz.io/blog/wiz-asm-auto-recon https://www.wiz.io/blog/wiz-asm-auto-recon Wed, 08 Jul 2026 12:19:24 GMT Wiz ASM adds automated subdomain recon, API endpoint discovery, runtime sensor telemetry, and custom target input to map attack surface. • Adds automated subdomain reconnaissance seeded from owned root domains to surface shadow exposures. • Discovers REST API endpoints via cloud-native API gateways, Wiz Runtime Sensor telemetry, and Attack Surface Scanner-detected API specifications. • Leverages Wiz Runtime Sensor inbound network traffic telemetry to identify and assess active endpoint exposure. • Supports manual input of IP addresses, domains, and IP ranges as Custom Targets to cover legacy or isolated systems outside automated discovery. • Maps cloud network configurations to calculate effective exposure for every cloud object. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/wiz-cloud