693 matches found
Top security talks from KubeCon Europe 2024
KubeCon Europe is the largest open source community conference in Europe with hundreds of talks, many of them about security. All the sessions are available online; in this blog, we’ll discuss our favorites...
Introducing the Cloud Threat Landscape, a new TI resource for cloud defenders
The Cloud Threat Landscape is a threat intelligence database that summarizes cloud incidents and offers insights into targeting patterns and initial access methods...
Wiz recognized as a leader in Snowflake's inaugural cybersecurity report
Powered by Snowflake, Wiz delivers a Cloud Native Application Protection Platform CNAPP to joint customers...
The top 10 AI security articles you must read in 2024
We've curated a collection of 10 AI security articles that cover novel threats to AI models as well as strategies for developers to safeguard their models...
Unveiling eBPF: Harnessing Its Power to Solve Real-World Issues
Dive in a Kubernetes attack and see how eBPF and other security best practices can prevent these attacks...
GAO Study Reveals: Government Faces Challenges with Continuous Monitoring
Learn how government agencies can meet the GAO’s recommended cloud security best practices by establishing continuous risk and compliance monitoring in the cloud...
Wiz helps organizations innovate with AI securely and responsibly, launching support for Google Cloud Vertex AI
Wiz protects AI infrastructure against cloud attacks, allowing data scientists and engineers to focus on deploying more AI applications...
How to get rid of AWS access keys – Part 2: Reducing Privileges
In the previous post in this series, we discussed how to do some basic cleaning of AWS access keys. In this post, we’ll show how to reduce the privileges in order to mitigate their risk...
Bridging the Security Gap: Mitigating Lateral Movement Risks from On-Premises to Cloud Environments
This blog post will discuss lateral movement risks from on-prem to the cloud. We will explain attacker TTPs, and outline best practices for cloud builders and defenders to help secure their cloud environments and mitigate risk...
Deloitte and Wiz Announce a Strategic Alliance to Help their Mutual Clients Accelerate Digital Transformation with a Modern Cloud Security Strategy
New alliance to enable organizations to proactively identify, prioritize, remediate, and prevent risks in their cloud...
Securing AWS Lambda function URLs
Learn about the security risks of misconfigured Lambda function URLs and how to properly secure them...
Wiz integrates with the new Amazon Inspector for enhanced security insights, context, and accuracy
Wiz is excited to announce it is a launch partner for the new Amazon Inspector, bringing Amazon Inspector findings together with Wiz insights to give our customers actionable, prioritized and contextually rich security insights...
300 WINtegrations Strong: An Open Security Ecosystem Built for the Speed of AI
As AI accelerates how organizations build and how attackers operate, a deeply connected security ecosystem is how defenders keep up...
Introducing the Red Agent POV Series
An inside look at how the Red Agent, our AI-Powered Attacker, uncovers complex, exploitable risks in the wild...
From Cryptographic Blind Spots to Post-Quantum Agility: Introducing Wiz for PQC Readiness
Eliminate cryptographic blind spots and neutralize legacy debt with an integrated cryptographic asset inventory. Identify risks across code, cloud, and runtime, using the Wiz Security Graph to prioritize migration and protect against "Harvest Now, Decrypt Later" attacks...
Securing the AI Edge: Wiz and Cloudflare Integrate for End-to-End AI Protection
Gain a unified view of AI application endpoints and DNS exposure across your environment, including which are protected by Cloudflare and which need to be secured...
Beyond the Badge: What Achieving Microsoft’s Certified Software Designation Means for Your Cloud Security
Verified by Microsoft. Built for Azure. Secured by Wiz...
Wiz Research Discovers One in Five Organizations Exposed to Systemic Risks in Vibe-Coded Applications - Here's How to Secure Them
New research reveals four common security risks systematically affecting vibe-coded applications - with remediation strategies curated together with Lovable...
Inside Grammarly’s AI-driven automation with the MCP Server for Wiz
Meet the system that cut manual triage times by 90% and enables engineers to focus on strategic thinking...
GitHub Action tj-actions/changed-files supply chain attack: everything you need to know
A supply chain attack on popular GitHub Action tj-actions/changed-files caused many repositories to leak their secrets. Discover how it unfolded and the steps to mitigate the risk...
What does "Platform" mean in cloud security?
Enabling security outcomes for cloud builders and defenders, from code to cloud to defense...
Expanding coverage with Linux runtime
Wiz announces its Runtime Sensor for Linux, expanding coverage of threat detection and response for cloud workloads...
Finding the needle in the haystack: effortless SBOM search in your cloud with Wiz
Find out quickly where OS and open-source packages or libraries are deployed in your cloud environments and secure them before potential issues arise...
Setting secure defaults on AWS and avoiding misconfigurations
Wiz cloud security researcher, Scott Piper, suggests measures organizations can adopt to ensure secure defaults on AWS and improve their security posture...
Wiz launches support for Google Cloud excessive access findings based on audit logs
Google Cloud customers can now detect excessive access in their GCP environment based on Google audit logs to effectively right-size permissions...
Unleashing the power of cloud security: drive business impact with Wiz
Wiz has helped hundreds of organizations, including 40% of the Fortune 100, improve their security posture and gain operational efficiency...
Linux rootkits explained – Part 2: Loadable kernel modules
Part 2 dives into the world of LKMs Loadable Kernel Modules and kernel-space rootkits to explore what LKMs are, how attackers abuse them, and how to detect them...
Clint Gibler on AI and cybersecurity: the current state of the art and where we’re headed
Wiz recently talked with security expert Clint Gibler about the many uses of AI in the cybersecurity space...
How to get rid of AWS access keys – Part 3: Replacing the authentication
In the earlier posts in this series, we showed not only how to get rid of unused access keys, but also how to minimize risk by applying a least-privilege strategy. In this final post, we’ll at last get into the discussion of alternative solutions to using access keys...
Breaking new ground in the cloud
In just two years, Wiz helps hundreds of customers protect their cloud infrastructure and innovate more quickly. As a result, Wiz has become the fastest-growing software company ever, scaling from $1M ARR to $100M ARR in just 18 months...
Wiz now integrates with Oracle Cloud Infrastructure, bringing a graph-based cloud security approach to all major providers
Fortune 500’s Avery Dennison among enterprises that operate securely on OCI and other cloud infrastructure with Wiz...
NotLegit: Azure App Service vulnerability exposed hundreds of source code repositories
Read about the NotLegit vulnerability discovered by the Wiz Research Team, where the Azure App Service exposed hundreds of source code repositories...
OMIGOD: Critical Vulnerabilities in OMI Affecting Countless Azure Customers
Wiz Research recently found 4 critical vulnerabilities in OMI, which is one of Azure's most ubiquitous yet least known software agents and is deployed on a large portion of Linux VMs in Azure...
keyv and cacheable npm Package Hijacked in Supply Chain Attack
Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages...
The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System
Part 3: How the Red Agent bypassed a credit and paywall system by changing a single client-side value from false to true...
Breaking Down the White House’s Actions on Post-Quantum Cryptography Readiness
The U.S. Federal Migration to PQC Just Got Real...
The Borderless Attack Surface: Securing Public Sector Hybrid Environments
Aligning Modern CNAPP Telemetry with realistic risk assessments to drive agency efficiency through cross-team collaboration...
AI Threat Readiness Pillar 3: Perform AI Code Analysis Natively in Wiz
Your guide to operationalizing AI-powered code analysis with Wiz to stay ahead of AI driven development and adversaries...
Eliminate Critical API Attack Paths with Wiz API SPM
Wiz API SPM is now GA, enabling customers to discover APIs, assess APIs for exploitability, and prioritize remediation to mitigate the risk of an API-related breach...
durabletask: TeamPCP's Latest PyPi Compromise
Discover the latest on malicious versions of the pypi package durabletask, matching TeamPCP tactics...
Meet Wiz for M365: Bringing SaaS into the Security Graph
Secure Microsoft 365 and the cloud it powers — one platform, one graph, complete context...
Wiz and Databricks: Adding Databricks to the Wiz Security Graph
Extending Wiz Visibility with the Databricks Data & AI Platform...
Lean and Mean: How We Fine-Tuned a Small Language Model for Secret Detection in Code
Building an efficient small language model for cybersecurity, from data prep to deployment...
Introducing pattern-based agentless malware detection using YARA rules
Wiz is expanding our existing detection capabilities to include pattern-based malware detection using YARA rules written by the Wiz Research team...
The magic of inclusion: Wiz’s journey to democratize cloud security
Empowering every cloud security stakeholder by eliminating barriers...
Stay safe with Wiz's winning hand for securing Kubernetes
Ensure that your Kubernetes environments are secure and follow OWASP's Kubernetes Top 10 framework. Generate reports quickly and easily and remediate any issues with actionable insights...
Midnight Blizzard attack on Microsoft corporate environment: a detailed analysis, detections and recommendations
Get a detailed analysis of the entire attack chain of Microsoft's breach by Midnight Blizzard APT29, as well as detection and mitigation recommendations...
New EKS Access Management and Pod Identity features: a security analysis
The Wiz research team unpacks the security implications of the new EKS access and identity management features and recommends best practices when using them...