New EKS Access and Identity Features: A Security Analysis
On November 26 Amazon introduced EKS Pod Identity feature — a new way for cluster workloads to interact with cloud resources. About three weeks later…
Category: CloudSecurity
Wiz AI-SPM Extends to Microsoft Azure OpenAI Service Models
At Wiz, we want to help Microsoft Azure customers further accelerate GenAI adoption and empower data scientists to securely bring their AI applications to production…
New attack vectors emerge via recent EKS updates
AWS recently enhanced its managed Kubernetes service, EKS, with the introduction of EKS Access Entries and Policies, along with EKS Pod Identity. These advancements optimize…
New FortiOS Critical Vulnerabilities Exploited In-The-Wild
CVE-2024-21762 and CVE-2024-23113 are critical vulnerabilities in Fortinet’s FortiOS and FortiProxy; they received a CVSS score of 9.6 and 9.8, respectively. Both vulnerabilities could allow…
Cupid in the Cloud: Celebrating Developer + Security Teams
Every Valentine’s Day, we celebrate the power of relationships. But it’s not only romantic relationships that make hearts race! In the world of cloud security,…
Chia and the Dangers of Proof-of-Storage Cryptojacking
A 2021 report from Google’s Cybersecurity Action Team mentioned that in 50 compromised Google Cloud instances they had investigated, 86% were used for cryptocurrency mining.…
Welcome to the Zero Critical Club: flawless cloud security
In the business of cloud computing, achieving a state of perfect security is almost like scaling a digital mountain summit. It requires not only technical…
Achieving DORA compliance with Wiz
Financial organizations must be particularly aware of the security requirements posed by moving business to the cloud (as demonstrated by the increasing number of cyber…
Wiz Extends Agentless Vulnerability Scanning to MacOS
We are excited to announce that Wiz is extending our vulnerability scanning support to MacOS instances. With this addition, customers running MacOS workloads can detect…
Run open weight models on Amazon Bedrock in AWS European Sovereign Cloud
European organizations can run AI workloads on Amazon Web Services (AWS) while keeping data within the European Union (EU) and meeting regulatory requirements. You can…
Wiz, first CNAPP to Offer Security to Akamai Linode Cloud
Many organizations adopt a multi-cloud strategy to enhance flexibility, resilience, and cost-effectiveness for their cloud environment. Security teams responsible for a multi-cloud environment must maintain…
Exploring the new AWS Sign Up experience
AWS has created a new sign up experience which they’ve described a bit in their blog post “AWS reimagines the getting started experience”, along with…