688 matches found
The essential steps for cloud vulnerability management
Prioritizing vulnerabilities in the cloud can be overwhelming - Learn how teams adopt a workflow structured for speed and accuracy...
Wiz Expands Runtime Protection to Serverless Containers
Wiz extends its cloud-native runtime sensor to secure serverless containers, providing deep visibility, blocking, and hunting capabilities for AWS Fargate and Azure Container Apps...
Expanding Wiz Runtime Sensor Coverage - Now Blocking Threats and Protecting Serverless Containers at Runtime
Wiz extends its cloud-native runtime sensor to secure serverless containers, providing deep visibility, blocking, and hunting capabilities for AWS Fargate and Azure Container Apps...
AskAI – Text to Security Graph Query
AskAI – Text to Security Graph Query...
Protect your Okta identities with Wiz
Wiz extends support to Okta with identity modeling on the Wiz Security Graph, visibility, risk assessment, and real-time threat detection for your Okta environment...
Ta Da! The Wiz Runtime Sensor is now available in Wiz for Gov (FedRAMP)
We are excited to announce the addition of the Wiz Sensor to Wiz for Gov’s ATO. The lightweight eBPF based sensor improves risk prioritization, deepens threat detection, and adds runtime protection for container hosts and VMs...
Critical vulnerabilities in Palo Alto Expedition: everything you need to know
Detect and mitigate critical vulnerabilities CVE-2024-9463, CVE-2024-9464, CVE-2024-9465, CVE-2024-9466, CVE-2024-9467 in Palo Alto Networks’ Expedition tool. Organizations should patch urgently...
AWS Account Vending
How an AWS account vending strategy differs from a landing zone...
Cloud Logging Tip & Tricks: Getting the most value out of your cloud logs
In the cloud, logs are often the only way to get real-time visibility into what's happening, making them critical to any cloud detection and response program...
How Wiz Meets CISA “Secure by Design” Objectives
An update on our commitments to customer security...
CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Everything you need to know
Detect and mitigate CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, and CVE-2024-47177 vulnerabilities impacting CUPS and IPP packages...
Wiz Research Finds Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs, Including Over 35% of Cloud Environments
Critical severity vulnerability CVE-2024-0132 affecting NVIDIA Container Toolkit and GPU Operator presents high risk to AI workloads and environments...
Introducing Hybrid File Integrity Monitoring
Enhance your security with Wiz’s new hybrid File Integrity Monitoring FIM solution, combining agentless and runtime capabilities for comprehensive file monitoring...
Secure your Data Cloud with Wiz CNAPP for Snowflake
Gain unified visibility into Snowflake security posture and threats with the same workflows as the rest of your cloud...
Tracking cloud-fluent threat actors - Part one: Atomic cloud IOCs
Strategies for tracking and defending against malicious activity and threats in the cloud using atomic indicators of compromise IOCs...
Cloud Logging Tips and Tricks
Getting the most value out of your cloud logs...
Wiz joins the Microsoft Intelligent Security Association
Wiz collaborates with Microsoft on the quest to make the cloud more secure for everyone...
Wiz Code: Experience True ASPM With Code-to-Cloud Context
Enhance your application security posture with Wiz Code's integration of 3rd-party SAST scanners and cloud context for faster risk prioritization and remediation...
Developers Deserve Better: Why Wiz Code Is Built for You.
Wiz Code helps developers integrate security into their workflow, with real-time guidance from code to cloud. Reduce last-minute fixes. Build with confidence...
Introducing Wiz Code: transform your AppSec with Wiz
Cloud-native security starts with your code...
Uncovering Hybrid Cloud Attacks Part 2 – The Attack
in this second part of the series, we’ll share the details of a real-world sophisticated, long-term attack in the cloud...
Uncovering Hybrid Cloud Attacks Part 1 – Addressing the Speed of Cloud Attacks
In this first part of the series, we’ll explain why effective response is so challenging and provide an overview of the problem...
Uncovering Hybrid Cloud Attacks Part 3 – The Response
In the final section of this blog series on uncovering complex hybrid cloud attacks, we’ll share key elements of the response to the real-world sophisticated cloud attack outlined in Part 2...
Avoiding security incidents due to request collapsing
This feature of caching services can result in unexpected behavior. Here's how to prevent sensitive data from being accidentally exposed...
Frost & Sullivan recognizes Wiz as Cloud Security Posture Management leader
Research report benchmarks vendor innovation and growth performance in CSPM...
AWS Console Session Traceability: How Attackers Obfuscate Identity Through the AWS Console
Attackers can take advantage of a quirk of the default AWS configuration without SourceIdentity configured to potentially make detecting and attributing their actions more difficult...
Defeating Kubernetes Privilege Escalation: A Cloud Detection & Response Case Study
This case study serves to highlight the importance of rapid, heuristic, accurate, and contextualized detection and response in the cloud...
Strategies for performing security migrations
Advice for tackling and completing these major projects, including metrics, alerts, and prevention strategies...
Wiz achieves FedRAMP Moderate authorization
Wiz is now the fastest company to be listed FedRAMP Moderate Authorized on the FedRAMP Marketplace, making it easier for government agencies to effectively protect their cloud environment with Wiz’s CNAPP...
Increasing transparency in cloud security: Wiz is now a CVE Numbering Authority (CNA)
Our next steps and hope for the industry...
Emerging phishing campaign targeting AWS accounts
Wiz Threat Research recently spotted a new phishing campaign targeting AWS accounts...
Introducing Wizlympics: The First Cloud Security Olympic Games
The Wizlympic games have officially opened — do you have what it takes to become the master of cloud services?...
Celebrating a Milestone: 100 WIN Integrations and Counting!
The Wiz INtegration WIN Platform has come a long way in the year since it launched...
Introducing pattern-based agentless malware detection using YARA rules
Wiz is expanding our existing detection capabilities to include pattern-based malware detection using YARA rules written by the Wiz Research team...
Physical Security 101
Protecting your assets: the fundamentals of physical security and enterprise resilience at Wiz...
Understanding the Gartner® Market Guide for Cloud-Native Application Protection Platforms
How the market is evolving and why now, more than ever, you need a CNAPP...
Mastering cloud security with custom roles: one more step towards democratization
Discover how Wiz extends its existing RBAC with the Custom Roles feature, enabling you to tailor user permissions, maintain security, and stay aligned with business needs...
SeleniumGreed: Threat actors exploit exposed Selenium Grid services for Cryptomining
Wiz researchers discover ongoing threat to popular testing framework...
Introducing the Prompt Airlines CTF: Test Your AI Security Skills
Wiz is excited to announce "Prompt Airlines," a new cloud security Capture The Flag CTF event focused on AI vulnerabilities...
Your control tower to secure code across GitHub, GitLab, and Azure Repos
Secure your code and the entire development pipeline with the Wiz Security Graph, comprehensive configuration checks, and advanced code scanning...
SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts
Wiz Research uncovers vulnerabilities in SAP AI Core, allowing malicious actors to take over the service and access customer data...
Enhance existing security workflows with high-fidelity cloud security data from Wiz in ServiceNow
Add Wiz’s cloud and container security context to your organization's ServiceNow CMDB, vulnerability response, and IT service management solutions...
Guardians of Compliance: Unleashing the Magic of Wiz4Wiz
Wiz enables our GRC team to maximize efficiency and impact. Here's how...
Wiz Ranked #1 CNAPP and CSPM by G2
Wiz was named the leader in two Summer 2024 Grid Reports, based on independent customer reviews...
How Wiz customers are flippin' vulnerabilities this July 4th weekend
Did you know that 40% of all Wiz customers are now in the Zero Critical Club? Here’s how three companies joined their ranks by eliminating critical issues in their cloud environments...
RCE vulnerability in OpenSSH: everything you need to know
Detect and mitigate CVE-2024-6387, a remote code execution vulnerability in OpenSSH. Organizations are advised to patch urgently...
It’s Magic! Wiz named Microsoft Commercial Marketplace Partner of the Year
Microsoft has honored Wiz as Commercial Marketplace 2024 Partner of the Year for excellence in go-to-market and joint-selling opportunities...
Probllama: Ollama Remote Code Execution Vulnerability (CVE-2024-37032) – Overview and Mitigations
Wiz Research discovered CVE-2024-37032, an easy-to-exploit Remote Code Execution vulnerability in the open-source AI Infrastructure project Ollama...