Intelligence Feed

1mo ago · wiz

The article discusses the growing threat of AI-driven exploitation, where frontier AI models can autonomously discover vulnerabilities and generate exploits, drastically reducing the window for response. It emphasizes the importance of minimizing attack surface and improving response times, particularly through the use of hardened container base images. WizOS is introduced as a solution to reduce CVE exposure, mitigate supply chain risks, and accelerate mean time to remediate (MTTR) through automation and integration with AI coding agents.

1mo ago · wiz

The White House has issued Executive Order 14409 and the OMB released memorandum M-26-15 to accelerate federal agency migration to post-quantum cryptography (PQC) due to emerging threats from quantum computing. The initiative mandates strict timelines for transitioning High Value Assets and High Impact Systems to NIST-approved PQC standards by 2030–2035, with a focus on risk-based prioritization, automation, and cryptographic inventory management. The effort extends to government contractors and critical infrastructure, requiring compliance with PQC standards and integration into cloud modernization efforts to mitigate 'Harvest Now, Decrypt Later' risks.

1mo ago · wiz

The article introduces Wiz MCP, a platform enabling AI-driven security workflows by connecting AI assistants and custom agents to the Wiz Security Graph. It allows security teams to automate tasks such as vulnerability triage, threat investigation, and compliance monitoring using trusted context and predefined security skills. The focus is on enhancing AI-powered security operations rather than reporting active cyber threats or adversary activity.