Cyber News

    Dashboard / Cyber News

    Wiz and AWS CloudTrail Lake: Cloud security and compliance posture audits made easy
    Sw
    Swaroop Sham-2023-01-31

    Wiz and AWS CloudTrail Lake: Cloud security and compliance posture audits made easy

    Simplify and centralize security and compliance management by sending audit-worthy events from Wiz into AWS CloudTrail Lake.
    Streamlining OS and Application Hardening: Revealing Misconfigurations with Wiz’s Agentless Custom Host Configuration Rules
    Ya
    Yang Liang

    Streamlining OS and Application Hardening: Revealing Misconfigurations with Wiz’s Agentless Custom Host Configuration Rules

    2023-01-26

    Enhancing Kubernetes security with user namespaces
    Ar
    Arik Nemtsov

    Enhancing Kubernetes security with user namespaces

    2023-01-23

    Unleashing the Power of No-Code Automation for Cloud Security with Wiz and Tines
    Th
    Thomas Kinsella

    Unleashing the Power of No-Code Automation for Cloud Security with Wiz and Tines

    2023-01-19

    CVE-2022-44877, critical RCE in CentOS Control Web Panel exploited in the wild: everything you need to know
    Me
    Merav Bar-2023-01-17

    CVE-2022-44877, critical RCE in CentOS Control Web Panel exploited in the wild: everything you need to know

    Detect and mitigate CVE-2022-44877, a CentOS Control Web Panel (CWP) unauthenticated RCE exploited in the wild. Security teams are advised to patch urgently.
    Hunting for signs of persistence in the cloud: an IR guide following the CircleCI incident
    Li
    Lior Sonntag

    Hunting for signs of persistence in the cloud: an IR guide following the CircleCI incident

    2023-01-12

    Wiz launches Australia cloud data center further demonstrating commitment to ANZ and multinational organizations
    Ra
    Raaz Herzberg

    Wiz launches Australia cloud data center further demonstrating commitment to ANZ and multinational organizations

    2023-01-11

    New Year’s Resolutions: Where CISOs plan to invest and scale back in 2023
    Ra
    Raaz Herzberg

    New Year’s Resolutions: Where CISOs plan to invest and scale back in 2023

    2023-01-09

    Lateral movement risks in the cloud and how to prevent them – Part 2: from compromised container to cloud takeover
    Li
    Lior Sonntag-2023-01-05

    Lateral movement risks in the cloud and how to prevent them – Part 2: from compromised container to cloud takeover

    In this second blog post, we will discuss lateral movement risks from Kubernetes to the cloud. We will explain attacker TTPs, and outline best practices for security practitioners and cloud builders to help secure their cloud environments and mitigate risk.
    Malicious PyTorch dependency 'torchtriton' on PyPI: everything you need to know
    Me
    Merav Bar

    Malicious PyTorch dependency 'torchtriton' on PyPI: everything you need to know

    2023-01-03

    CVE-2022-47939 critical vulnerability in Linux kernel `ksmbd` module: everything you need to know
    Am
    Amitai Cohen

    CVE-2022-47939 critical vulnerability in Linux kernel `ksmbd` module: everything you need to know

    2022-12-27

    OWASSRF, a new exploit for Exchange vulnerabilities, exploited in the wild: everything you need to know
    Me
    Merav Bar

    OWASSRF, a new exploit for Exchange vulnerabilities, exploited in the wild: everything you need to know

    2022-12-22

    Automatically discover and secure your APIs with Wiz Dynamic Scanner
    Ni
    Nicolas Ehrman-2022-12-21

    Automatically discover and secure your APIs with Wiz Dynamic Scanner

    Wiz enhances its Dynamic Scanner to detect publicly exposed, unauthenticated APIs
    Wiz introduces Dangling Domain Detection to help you prevent subdomain takeovers
    Ya
    Yang Liang

    Wiz introduces Dangling Domain Detection to help you prevent subdomain takeovers

    2022-12-20

    Wiz enhances dynamic scanner to analyze and validate external exposure
    Ni
    Nicolas Ehrman

    Wiz enhances dynamic scanner to analyze and validate external exposure

    2022-12-16

    Use cases for Delegated Administrator for AWS Organizations
    Sc
    Scott Piper

    Use cases for Delegated Administrator for AWS Organizations

    2022-12-15

    Introducing PEACH, a tenant isolation framework for cloud applications
    Am
    Amitai Cohen-2022-12-14

    Introducing PEACH, a tenant isolation framework for cloud applications

    A step-by-step framework for modeling and improving SaaS and PaaS tenant isolation by reducing your cloud applications’ attack surface
    CVE-2022-27518 exploited in the wild by APT5: everything you need to know
    Al
    Alon Schindel

    CVE-2022-27518 exploited in the wild by APT5: everything you need to know

    2022-12-13

    Secret-based cloud supply-chain attacks: Case study and lessons for security teams
    Sh
    Shir Tamari

    Secret-based cloud supply-chain attacks: Case study and lessons for security teams

    2022-12-13

    Introducing Azure Least Privilege: Enforce least privilege access for Azure environments
    Sw
    Swaroop Sham

    Introducing Azure Least Privilege: Enforce least privilege access for Azure environments

    2022-12-12

    Top Security Talks from AWS re:Invent 2022
    Sc
    Scott Piper-2022-12-09

    Top Security Talks from AWS re:Invent 2022

    AWS re:Invent is the largest conference of the year for Amazon Web Services (AWS) with hundreds of talks. We picked our favorite cloud security talks that are available online.
    Uncover what is really deployed in your environment with the enhanced Wiz inventory
    Ji
    Jiong Liu

    Uncover what is really deployed in your environment with the enhanced Wiz inventory

    2022-12-08

    Navigating the road ahead for CISOs following the Uber verdict
    Ra
    Raaz Herzberg

    Navigating the road ahead for CISOs following the Uber verdict

    2022-12-08

    Wiz introduces agentless solution for detecting host and application misconfigurations
    Ya
    Yang Liang

    Wiz introduces agentless solution for detecting host and application misconfigurations

    2022-12-07

    Giving thanks for a more secure cloud
    Wi
    Wiz Team-2022-12-06

    Giving thanks for a more secure cloud

    We'd like to take a moment this holiday season to recognize our greatest asset—our customers.
    Wiz at re:Invent 2022 (event recap)
    Ra
    Raaz Herzberg

    Wiz at re:Invent 2022 (event recap)

    2022-12-05

    Hell’s Keychain: Supply-chain vulnerability in IBM Cloud Databases for PostgreSQL allows potential unauthorized database access
    Sh
    Shir Tamari

    Hell’s Keychain: Supply-chain vulnerability in IBM Cloud Databases for PostgreSQL allows potential unauthorized database access

    2022-12-01

    Wiz integrates with AWS Security Hub to help you better manage your AWS security posture
    Or
    Oron Noah

    Wiz integrates with AWS Security Hub to help you better manage your AWS security posture

    2022-11-30

    Wiz integrates with Amazon Security Lake to improve cloud security through cloud security data sharing
    Or
    Oron Noah-2022-11-29

    Wiz integrates with Amazon Security Lake to improve cloud security through cloud security data sharing

    New integration enables customers to consolidate security logs, run investigations and analyze security metrics in their customer-owned data lake.
    Wiz and BigID expand partnership to extend visibility and control for enterprise data to prevent breaches
    Or
    Oron Noah

    Wiz and BigID expand partnership to extend visibility and control for enterprise data to prevent breaches

    2022-11-29

    Wiz becomes the first CNAPP to deliver integrated Data Security Posture Management
    Ge
    George Pisha

    Wiz becomes the first CNAPP to deliver integrated Data Security Posture Management

    2022-11-21

    Wiz and Google Cloud’s Security Command Center: Modern threat detection and response rooted in risk prioritization
    Ge
    George Pisha

    Wiz and Google Cloud’s Security Command Center: Modern threat detection and response rooted in risk prioritization

    2022-11-14

    Wiz introduces VMware vSphere support to provide a unified hybrid cloud security platform
    Ma
    Mattan Shalev-2022-11-07

    Wiz introduces VMware vSphere support to provide a unified hybrid cloud security platform

    vSphere integration makes Wiz the first cloud security platform to protect both on-premises and cloud environments without an agent.
    OpenSSL vulnerabilities: Everything you need to know
    Am
    Amitai Cohen

    OpenSSL vulnerabilities: Everything you need to know

    2022-10-29

    Wiz rapidly finds and removes risks across the container development lifecycle and entire cloud environment
    Yi
    Yinon Costica

    Wiz rapidly finds and removes risks across the container development lifecycle and entire cloud environment

    2022-10-24

    KubeCon + CloudNativeCon North America 2022: Our top 10 sessions to attend
    Ni
    Nicolas Ehrman

    KubeCon + CloudNativeCon North America 2022: Our top 10 sessions to attend

    2022-10-21

    Meet Wiz at KubeCon North America
    Ni
    Nicolas Ehrman-2022-10-19

    Meet Wiz at KubeCon North America

    Wiz will be attending and sponsoring KubeCon for the first time and we have a lot to share regarding how enterprises can better secure their container and Kubernetes environments. Come say hi!
    Lateral movement risks in the cloud and how to prevent them – Part 1: the network layer (VPC)
    Li
    Lior Sonntag

    Lateral movement risks in the cloud and how to prevent them – Part 1: the network layer (VPC)

    2022-10-13

    Wiz Receives Morgan Stanley Innovation Award at 20th Innovation Summit
    Jo
    Jordan Fylonenko

    Wiz Receives Morgan Stanley Innovation Award at 20th Innovation Summit

    2022-09-22

    AttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes
    El
    Elad Gabay

    AttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes

    2022-09-20

    How Wiz and Torq Combine to Mitigate Existential Cloud Security Threats
    It
    Itay Arbel-2022-09-19

    How Wiz and Torq Combine to Mitigate Existential Cloud Security Threats

    Leonid Belkind, CTO of Torq, and Itay Arbel, PM at Wiz, explain how organizations can build a coherent Cyber Security Incident Response Plan using Wiz CDR to analyze cloud events and threat alerts in their context together with Torq's next-generation orchestration and automation capabilities.
    The cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors
    Sa
    Sagi Tzadik

    The cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors

    2022-08-11

    $100M ARR in 18 months: Wiz becomes the fastest-growing software company ever
    As
    Assaf Rappaport

    $100M ARR in 18 months: Wiz becomes the fastest-growing software company ever

    2022-08-10

    Wiz expands board and executive team with top security leaders from DocuSign, Aon, Meta and Okta
    Wi
    Wiz Team

    Wiz expands board and executive team with top security leaders from DocuSign, Aon, Meta and Okta

    2022-08-10

    Meet new Wiz board member Emily Heath
    As
    Assaf Rappaport-2022-08-10

    Meet new Wiz board member Emily Heath

    Q&A: Why Wiz caught the attention of DocuSign’s Former CTSO
    New customers, new clouds, new challenges
    Wi
    Wiz Team

    New customers, new clouds, new challenges

    2022-08-10

    Breaking new ground in the cloud
    Wi
    Wiz Team

    Breaking new ground in the cloud

    2022-08-10

    Wiz debuts on Forbes Cloud 100 list
    Wi
    Wiz Team

    Wiz debuts on Forbes Cloud 100 list

    2022-08-09

    Join Wiz at Black Hat 2022
    Jo
    Josh Dreyfuss-2022-08-08

    Join Wiz at Black Hat 2022

    Wiz is excited to be back in Las Vegas for Black Hat 2022 as a sponsor of this year's conference. At Black Hat, you'll have the opportunity to learn from our research and product experts, experience live demos in our booth, and mingle with us after the conference.
    Securing Azure middleware agents with new auto-patching capabilities
    Al
    Alon Schindel

    Securing Azure middleware agents with new auto-patching capabilities

    2022-08-05

    Latest News

    See All
    Google Dismantles 1.3 Million Device XCPE Botnet, Bans Android TV Maker Over Preinstalled Malware
    Gu
    Guru Baran-2 days ago

    Google Dismantles 1.3 Million Device XCPE Botnet, Bans Android TV Maker Over Preinstalled Malware

    Chinese hackers use ARTEX AI in automated attacks against 200 orgs
    Bi
    Bill Toulas-3 days ago

    Chinese hackers use ARTEX AI in automated attacks against 200 orgs

    StyleSmuggler Exploitation Deploys PSK Agent RAT Against Magento Stores
    Da
    Daniel Johnston-3 days ago

    StyleSmuggler Exploitation Deploys PSK Agent RAT Against Magento Stores