671 matches found
Wiz Code: Experience True ASPM With Code-to-Cloud Context
Enhance your application security posture with Wiz Code's integration of 3rd-party SAST scanners and cloud context for faster risk prioritization and remediation...
Developers Deserve Better: Why Wiz Code Is Built for You.
Wiz Code helps developers integrate security into their workflow, with real-time guidance from code to cloud. Reduce last-minute fixes. Build with confidence...
Introducing Wiz Code: transform your AppSec with Wiz
Cloud-native security starts with your code...
Uncovering Hybrid Cloud Attacks Part 2 – The Attack
in this second part of the series, we’ll share the details of a real-world sophisticated, long-term attack in the cloud...
Uncovering Hybrid Cloud Attacks Part 1 – Addressing the Speed of Cloud Attacks
In this first part of the series, we’ll explain why effective response is so challenging and provide an overview of the problem...
Uncovering Hybrid Cloud Attacks Part 3 – The Response
In the final section of this blog series on uncovering complex hybrid cloud attacks, we’ll share key elements of the response to the real-world sophisticated cloud attack outlined in Part 2...
Avoiding security incidents due to request collapsing
This feature of caching services can result in unexpected behavior. Here's how to prevent sensitive data from being accidentally exposed...
Frost & Sullivan recognizes Wiz as Cloud Security Posture Management leader
Research report benchmarks vendor innovation and growth performance in CSPM...
AWS Console Session Traceability: How Attackers Obfuscate Identity Through the AWS Console
Attackers can take advantage of a quirk of the default AWS configuration without SourceIdentity configured to potentially make detecting and attributing their actions more difficult...
Defeating Kubernetes Privilege Escalation: A Cloud Detection & Response Case Study
This case study serves to highlight the importance of rapid, heuristic, accurate, and contextualized detection and response in the cloud...
Strategies for performing security migrations
Advice for tackling and completing these major projects, including metrics, alerts, and prevention strategies...
Wiz achieves FedRAMP Moderate authorization
Wiz is now the fastest company to be listed FedRAMP Moderate Authorized on the FedRAMP Marketplace, making it easier for government agencies to effectively protect their cloud environment with Wiz’s CNAPP...
Increasing transparency in cloud security: Wiz is now a CVE Numbering Authority (CNA)
Our next steps and hope for the industry...
Emerging phishing campaign targeting AWS accounts
Wiz Threat Research recently spotted a new phishing campaign targeting AWS accounts...
Introducing Wizlympics: The First Cloud Security Olympic Games
The Wizlympic games have officially opened — do you have what it takes to become the master of cloud services?...
Celebrating a Milestone: 100 WIN Integrations and Counting!
The Wiz INtegration WIN Platform has come a long way in the year since it launched...
Introducing pattern-based agentless malware detection using YARA rules
Wiz is expanding our existing detection capabilities to include pattern-based malware detection using YARA rules written by the Wiz Research team...
Physical Security 101
Protecting your assets: the fundamentals of physical security and enterprise resilience at Wiz...
Understanding the Gartner® Market Guide for Cloud-Native Application Protection Platforms
How the market is evolving and why now, more than ever, you need a CNAPP...
Mastering cloud security with custom roles: one more step towards democratization
Discover how Wiz extends its existing RBAC with the Custom Roles feature, enabling you to tailor user permissions, maintain security, and stay aligned with business needs...
SeleniumGreed: Threat actors exploit exposed Selenium Grid services for Cryptomining
Wiz researchers discover ongoing threat to popular testing framework...
Introducing the Prompt Airlines CTF: Test Your AI Security Skills
Wiz is excited to announce "Prompt Airlines," a new cloud security Capture The Flag CTF event focused on AI vulnerabilities...
Your control tower to secure code across GitHub, GitLab, and Azure Repos
Secure your code and the entire development pipeline with the Wiz Security Graph, comprehensive configuration checks, and advanced code scanning...
SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts
Wiz Research uncovers vulnerabilities in SAP AI Core, allowing malicious actors to take over the service and access customer data...
Enhance existing security workflows with high-fidelity cloud security data from Wiz in ServiceNow
Add Wiz’s cloud and container security context to your organization's ServiceNow CMDB, vulnerability response, and IT service management solutions...
Guardians of Compliance: Unleashing the Magic of Wiz4Wiz
Wiz enables our GRC team to maximize efficiency and impact. Here's how...
Wiz Ranked #1 CNAPP and CSPM by G2
Wiz was named the leader in two Summer 2024 Grid Reports, based on independent customer reviews...
How Wiz customers are flippin' vulnerabilities this July 4th weekend
Did you know that 40% of all Wiz customers are now in the Zero Critical Club? Here’s how three companies joined their ranks by eliminating critical issues in their cloud environments...
RCE vulnerability in OpenSSH: everything you need to know
Detect and mitigate CVE-2024-6387, a remote code execution vulnerability in OpenSSH. Organizations are advised to patch urgently...
It’s Magic! Wiz named Microsoft Commercial Marketplace Partner of the Year
Microsoft has honored Wiz as Commercial Marketplace 2024 Partner of the Year for excellence in go-to-market and joint-selling opportunities...
Probllama: Ollama Remote Code Execution Vulnerability (CVE-2024-37032) – Overview and Mitigations
Wiz Research discovered CVE-2024-37032, an easy-to-exploit Remote Code Execution vulnerability in the open-source AI Infrastructure project Ollama...
GenAI risks to be aware of — and prepare for — according to Gartner®
The deployment of GenAI, LLMs, and chat interfaces expands potential attack surfaces and poses increased security threats...
Wiz for Gov is in process for DoD IL4 Authorization
We are excited to be ‘in-process’ for DoD IL4, continuing our commitment to helping public sector secure everything they build and run in the cloud...
Wiz at Re:Inforce 2024
See what’s new with Wiz at Re:Inforce 2024 with this year’s recap...
Custom runtime rules and runtime response policies: new layers of defense
Wiz's custom runtime rules and runtime response policies add new layers to your defense-in-depth strategy...
Wiz remediation and response: enforcing security best practices and responding to incidents made easy
Powerful new remediation and response capabilities enable the real-time enforcement of organizational security policies and streamline incident management...
Critical RCE vulnerability in PHP CGI: everything you need to know
Detect and mitigate CVE-2024-4577, a critical remote code execution vulnerability in PHP CGI. Organizations are advised to patch urgently...
Pause off my cluster: DERO cryptojacking takes a new shape
Learn how the threat actors behind the 2023 DERO cryptojacking campaign have adapted their techniques to evade detection, and the best practices for mitigation...
Sail Further with Wiz Cost Optimization for Amazon EKS
Learn how Wiz's latest feature identifies outdated EKS clusters, helping organizations save millions on cloud spend. Find out how to optimize costs and reinvest savings in strategic initiatives...
Wiz achieves StateRAMP authorization
Great news for State and Local Governments! Wiz for Gov is now StateRAMP authorized...
Wiz AI-SPM model scanning: Securely innovate with AI community models
Detect malicious hosted AI models with Wiz AI-SPM and gain confidence in the models your data scientists use...
Wiz launches new data center in UAE, supercharging global operations in the region
Organizations in the region can now benefit from Wiz's cloud security platform...
Empowering SecOps in the cloud: enhancing threat detection with Wiz and Google Security Operations
Wiz announces integration with Google Security Operations to help SecOps teams identify critical cloud security issues...
The risk in malicious AI models: Wiz Research discovers critical vulnerability in AI-as-a-Service provider, Replicate
The Wiz Research team's investigations into AI-as-a-service providers reveals a major risk to AI systems...
Shifting from CWPP to CNAPP: new standards for cloud security
Learn where CNAPP and CWPP overlap, where they differ, and how the market is shifting to the more comprehensive and integrated CNAPP...
Wiz achieves Red Hat Vulnerability Scanner Certification
Wiz’s vulnerability scanning is now certified by Red Hat, providing customers with refined assessment of vulnerabilities for Red Hat Products...
The magic of inclusion: Wiz’s journey to democratize cloud security
Empowering every cloud security stakeholder by eliminating barriers...
The wait is over: Wiz releases real-time CSPM
Prevent misconfigurations in your environment from being exploited with Wiz’s real-time CSPM...
Unveiling the power of Wiz's Security Graph with automated blast radius and root cause analysis for cloud incident response
Wiz assists Incident Response IR and SOC teams with containment through automated assessment of security incidents by identifying possible root causes and calculating the potential blast radius of compromised resources...