Cyber News

    Dashboard / Cyber News

    Revisiting OMI: Analysis of CVE-2022-29149, a privilege escalation vulnerability in Azure OMI
    Ro
    Rotem Zarin-2022-08-05

    Revisiting OMI: Analysis of CVE-2022-29149, a privilege escalation vulnerability in Azure OMI

    Affected organizations are required to update installed agents that use the OMI cloud middleware software
    See the best of Wiz at AWS re:Inforce
    Jo
    Jordan Fylonenko

    See the best of Wiz at AWS re:Inforce

    2022-07-27

    Wiz CDR and Amazon GuardDuty: Contextualize and prioritize threat detection
    Ge
    George Pisha

    Wiz CDR and Amazon GuardDuty: Contextualize and prioritize threat detection

    2022-07-27

    Meet the Wiz Research team at fwd:cloudsec
    Jo
    Jordan Fylonenko

    Meet the Wiz Research team at fwd:cloudsec

    2022-07-26

    Wiz extends CNAPP leadership with protection for Alibaba Cloud
    Or
    Oron Noah-2022-06-30

    Wiz extends CNAPP leadership with protection for Alibaba Cloud

    Support for Alibaba Cloud follows just weeks after launch of Oracle Cloud Infrastructure (OCI) integration, providing organizations the broadest coverage of any cloud native application protection platform (CNAPP)
    The cloud gray zone—secret agents installed by cloud service providers
    Sh
    Shir Tamari

    The cloud gray zone—secret agents installed by cloud service providers

    2022-06-09

    A new vision for cloud security unites builders and defenders
    Yi
    Yinon Costica

    A new vision for cloud security unites builders and defenders

    2022-06-07

    Wiz launches cloud detection and response to help organizations quickly identify threats and limit breach exposure
    Wi
    Wiz Team

    Wiz launches cloud detection and response to help organizations quickly identify threats and limit breach exposure

    2022-06-07

    Wiz now integrates with Oracle Cloud Infrastructure, bringing a graph-based cloud security approach to all major providers
    Yi
    Yinon Costica-2022-06-02

    Wiz now integrates with Oracle Cloud Infrastructure, bringing a graph-based cloud security approach to all major providers

    Fortune 500’s Avery Dennison among enterprises that operate securely on OCI and other cloud infrastructure with Wiz
    Connect with Wiz at our first-ever RSA Conference
    Jo
    Jordan Fylonenko

    Connect with Wiz at our first-ever RSA Conference

    2022-05-24

    Securing AWS Lambda function URLs
    Am
    Amitai Cohen

    Securing AWS Lambda function URLs

    2022-05-10

    Wiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL
    Sh
    Shir Tamari

    Wiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL

    2022-04-29

    Addressing the Spring4Shell and CVE-2022-22963 RCE vulnerabilities in cloud environments
    Am
    Amitai Cohen-2022-04-01

    Addressing the Spring4Shell and CVE-2022-22963 RCE vulnerabilities in cloud environments

    Learn how to address Spring4Shell and CVE-2022-22963 RCE vulnerabilities in cloud environments.
    Hardening your cloud environment against LAPSUS$-like threat actors
    Am
    Amitai Cohen

    Hardening your cloud environment against LAPSUS$-like threat actors

    2022-03-26

    Wiz and ServiceNow VR: Prioritize and respond to cloud vulnerabilities faster
    It
    Itay Arbel

    Wiz and ServiceNow VR: Prioritize and respond to cloud vulnerabilities faster

    2022-03-01

    Detect and prioritize CISA Known Exploited Vulnerabilities in the cloud with Wiz
    Al
    Alon Schindel

    Detect and prioritize CISA Known Exploited Vulnerabilities in the cloud with Wiz

    2022-02-10

    Wiz and RegScale: Cloud security compliance management at scale
    It
    Itay Arbel-2022-02-08

    Wiz and RegScale: Cloud security compliance management at scale

    Learn how to achieve compliance security at scale with Wiz and RegScale, supporting a variety of compliance framework controls.
    5 reasons endpoint security agents are not enough
    Ro
    Rotem Zarin

    5 reasons endpoint security agents are not enough

    2022-02-03

    The top cloud security threats to be aware of in 2022
    Al
    Alon Schindel

    The top cloud security threats to be aware of in 2022

    2022-01-18

    Towards a better cloud vulnerability response model
    Yi
    Yinon Costica

    Towards a better cloud vulnerability response model

    2022-01-05

    Log4Shell: Wrap all your Log4j fixes before the holidays
    Al
    Alon Schindel-2021-12-21

    Log4Shell: Wrap all your Log4j fixes before the holidays

    The main challenge with Log4j is understanding your existing infrastructure, and identifying the location of all vulnerable Log4j libraries. Follow Wiz's recommendations to wrap it all before the Holidays!
    NotLegit: Azure App Service vulnerability exposed hundreds of source code repositories
    Sh
    Shir Tamari

    NotLegit: Azure App Service vulnerability exposed hundreds of source code repositories

    2021-12-21

    Log4Shell 10 days later: Enterprises halfway through patching
    Al
    Alon Schindel

    Log4Shell 10 days later: Enterprises halfway through patching

    2021-12-21

    Log4Shell Meltdown: How to protect your cloud from this critical RCE threat
    Am
    Ami Luttwak

    Log4Shell Meltdown: How to protect your cloud from this critical RCE threat

    2021-12-10

    Wiz magic shifts left
    Jo
    Jonathan Bregman-2021-12-09

    Wiz magic shifts left

    Fixing vulnerabilities and misconfigurations in the pipeline before deployment makes perfect sense - it reduces the overall threat footprint and saves time. Wiz offers customers a straightforward way to operationalize a Shift Left strategy.
    Assess your cloud compliance posture in minutes
    Ma
    Mattan Shalev

    Assess your cloud compliance posture in minutes

    2021-12-01

    Wiz integrates with the new Amazon Inspector for enhanced security insights, context, and accuracy
    Ad
    Adi Ravitz

    Wiz integrates with the new Amazon Inspector for enhanced security insights, context, and accuracy

    2021-11-30

    Security industry call to action: we need a cloud vulnerability database
    Sh
    Shir Tamari

    Security industry call to action: we need a cloud vulnerability database

    2021-11-12

    ChaosDB explained: Azure's Cosmos DB vulnerability walkthrough
    Sa
    Sagi Tzadik-2021-11-11

    ChaosDB explained: Azure's Cosmos DB vulnerability walkthrough

    This is the full story of the Azure ChaosDB Vulnerability that was discovered and disclosed by the Wiz Research Team, where we were able to gain complete unrestricted access to the databases of several thousand Microsoft Azure customers.
    How we broke the cloud with two lines of code: the full story of ChaosDB
    Sa
    Sagi Tzadik

    How we broke the cloud with two lines of code: the full story of ChaosDB

    2021-11-11

    Celebrating Our Series C: Zero to $6 Billion in 18 Months
    As
    Assaf Rappaport

    Celebrating Our Series C: Zero to $6 Billion in 18 Months

    2021-10-12

    Protecting cloud environments from the new critical Apache HTTP Server vulnerability
    Al
    Alon Schindel

    Protecting cloud environments from the new critical Apache HTTP Server vulnerability

    2021-10-08

    How to Protect Your Cloud Environment from Supply Chain Attacks
    Jo
    Josh Dreyfuss-2021-10-06

    How to Protect Your Cloud Environment from Supply Chain Attacks

    Learn how to protect your cloud environment from supply chain attacks.
    Agents are not enough: Why cloud security needs agentless deep scanning
    Jo
    Josh Dreyfuss

    Agents are not enough: Why cloud security needs agentless deep scanning

    2021-09-28

    OMIGOD: Critical Vulnerabilities in OMI Affecting Countless Azure Customers
    Ni
    Nir Ohfeld

    OMIGOD: Critical Vulnerabilities in OMI Affecting Countless Azure Customers

    2021-09-14

    “Secret” Agent Exposes Azure Customers To Unauthorized Code Execution
    Al
    Alon Schindel

    “Secret” Agent Exposes Azure Customers To Unauthorized Code Execution

    2021-09-14

    Wiz goes (even more) global
    As
    Assaf Rappaport-2021-09-14

    Wiz goes (even more) global

    The first half of 2021 has been incredible for Wiz. Fueled by an additional $250M in funding ($350M total) from Sequoia, Index Ventures, Insight, Salesforce, Blackstone, Advent, Greenoaks, and Aglaé Wiz has grown at a blistering pace, going from 25 employees at the start of the year to 120 today.
    ChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them
    Al
    Alon Schindel

    ChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them

    2021-08-29

    ChaosDB: How we hacked thousands of Azure customers’ databases
    Sa
    Sagi Tzadik

    ChaosDB: How we hacked thousands of Azure customers’ databases

    2021-08-26

    Is your organization leaking sensitive Dynamic DNS data? Here’s how to find out
    Am
    Ami Luttwak

    Is your organization leaking sensitive Dynamic DNS data? Here’s how to find out

    2021-08-06

    Black Hat 2021: How isolated is your AWS cloud environment?
    Am
    Ami Luttwak-2021-08-04

    Black Hat 2021: How isolated is your AWS cloud environment?

    Last November, Wiz Research mapped all the services in AWS that allow access from other accounts to see if any of them might inadvertently expose customers and discovered 3 vulnerabilities in different AWS services that allowed anyone to read or write into the accounts of other AWS customers.
    Black Hat 2021: DNS loophole makes nation-state level spying as easy as registering a domain
    Sh
    Shir Tamari

    Black Hat 2021: DNS loophole makes nation-state level spying as easy as registering a domain

    2021-08-04

    The 10 must-attend sessions at Black Hat 2021
    Be
    Benjamin Miller

    The 10 must-attend sessions at Black Hat 2021

    2021-06-24

    Salesforce Ventures, Blackstone, and Aglaé Join Team Wiz!
    As
    Assaf Rappaport

    Salesforce Ventures, Blackstone, and Aglaé Join Team Wiz!

    2021-06-10

    New 451 Research report analyzes Wiz and the cloud security market
    Ad
    Adi Ravitz-2021-05-24

    New 451 Research report analyzes Wiz and the cloud security market

    The report breaks down the current state of the cloud security market and provides an analysis of Wiz’s product strategy, technology, competitors, and more. It’s essential reading for anyone looking for an objective third-party perspective on Wiz and the rapidly developing cloud security market.
    Wiz becomes fastest growing security startup ever with new $1.7B valuation
    As
    Assaf Rappaport

    Wiz becomes fastest growing security startup ever with new $1.7B valuation

    2021-03-22

    82% of companies unknowingly give 3rd parties access to all their cloud data
    Sh
    Shir Tamari

    82% of companies unknowingly give 3rd parties access to all their cloud data

    2021-02-02

    Recent Linux sudo vulnerability affects a major percent of cloud workloads
    Am
    Ami Luttwak

    Recent Linux sudo vulnerability affects a major percent of cloud workloads

    2021-02-02

    The SolarWinds Attack
    Am
    Ami Luttwak-2021-02-01

    The SolarWinds Attack

    SolarWinds attack explained by Wiz CTO Ami Luttwak
    Wiz comes out of stealth with $100M Series A funding to reinvent cloud security
    As
    Assaf Rappaport

    Wiz comes out of stealth with $100M Series A funding to reinvent cloud security

    2020-12-09

    Latest News

    See All
    Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
    in
    [email protected] (The Hacker News)-2 days ago

    Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors

    Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
    in
    [email protected] (The Hacker News)-2 days ago

    Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials

    OpenAI Launches New Security Sprint to Hunt Vulnerabilities and Strengthen Defenses
    Gu
    Guru Baran-2 days ago

    OpenAI Launches New Security Sprint to Hunt Vulnerabilities and Strengthen Defenses