Wiz + Hashicorp: Integration with Terraform Run Tasks
Today, we’re excited to announce Wiz’s integration with Hashicorp Terraform Cloud and Enterprise Run Tasks. Mutual customers can seamlessly add checks to their Terraform pipelines…
Category: CloudSecurity
Python Workers are now generally available
We introduced Python Workers two years ago, providing a way to run Python applications in the Cloudflare Workers runtime. Our goal was to make it…
Cloud Threat Landscape: a new resource for cloud defenders
At Wiz Research, a core part of our job is studying threat activity targeting public cloud environments, to understand how adversaries do what they do.…
“Kubernetes Security for Dummies” by Wiz
We’re excited to announce the release of a comprehensive guide to mastering Kubernetes security: “Kubernetes Security for Dummies.” Wiz collaborated with Wiley publications to create…
NASCIO’s top 10 priorities: what you need to know
Every year, the National Association of State CIOs (NASCIO) surveys its membership to identify state IT leaders’ top policy and technology priorities for the year…
5 Key Facts from the Cloud Security Compensation Report
In today’s technology landscape, the demand for cloud security professionals has reached unprecedented levels. As organizations strive to safeguard their sensitive information from evolving threats,…
Wiz: top score in Forrester Wave:Cloud Workload Security ’24
Forrester has published The Forrester Wave: Cloud Workload Security (CWS), Q1 2024, which includes Wiz as a first-time entrant. In this blog post, I’ll talk…
Secure non-human identities with the new Wiz dashboard
Many organizations think of their IAM users when implementing their cloud identity and entitlement strategy. However, to effectively use the cloud you need to trust…
Wiz Enhances AI-SPM Support for Amazon Bedrock
In September 2023, Amazon Web Services (AWS) announced the general availability of Amazon Bedrock, a fully managed AWS service that helps customers easily build generative…
Leaky Vessels: Deep Dive on Container Escape Vulnerabilities
New vulnerabilities have been revealed in the runC command line tool (CVE-2024-21626) and in BuildKit (CVE-2024-23651, CVE-2024-23652, and CVE-2024-23653). These flaws pose a risk of…
Critical Vulnerabilities in Ivanti Exploited In-The-Wild
February 9, 2024 updateOn February 8, 2024, Ivanti released an advisory for a new authentication bypass high severity vulnerability, CVE-2024-22024 impacting Ivanti Connect Secure (9.x,…
New EKS Access and Identity Features: A Security Analysis
On November 26 Amazon introduced EKS Pod Identity feature — a new way for cluster workloads to interact with cloud resources. About three weeks later…