Wiz becomes the first CNAPP to provide end-to-end cloud forensics experience
In today’s fast-paced digital landscape, as businesses of all sizes are moving to the cloud, cloud security becomes a top priority for organizations worldwide. With…
Category: CloudSecurity
Deploy with Void | Cloudflare Blog
VoidZero’s tools such as Vite, Vitest, Oxc, and Rolldown — bundled in one toolchain as Vite+ — have made frontend development faster, but building full-stack applications…
How to get rid of AWS access keys – Part 2: Reducing Privileges
Reducing privileges and tightening IAM policies are best practices for all identity principals, be it an application’s IAM role or an IAM user with an…
ASPM in the AI Era Pt 1: Centralize AppSec Scanners
Frontier AI models and agentic development have fundamentally changed the demands on application security. On one hand, AI models can autonomously discover vulnerabilities and generate…
Penetration testing every deployment with AWS Continuum
Most security tooling that fits into a CI/CD pipeline—static analysis (SAST), software composition analysis (SCA), and dynamic scanners (DAST)—flags potential issues from patterns and signatures.…
Yandex outage: data shows that instead of going dark, malicious bots went on the move
Following reported strikes on Yandex data centers, claims circulated on the Internet that Russian bot farms and influence operations had been knocked offline. HTTP traffic…
Inside Hyperdrive: How we solved a rare Hyperdrive MySQL caching bug
Hyperdrive support for MySQL is now generally available (GA). Hyperdrive, Cloudflare’s database connection pooler for Workers, initially only supported Postgres. Since we announced the beta…
Wiz AI Agents for FedRAMP High: Accelerate Public Sector AI
Today’s mission environments are operating under a rapidly increasing operational tempo. Security teams face a shrinking mean-time-to-exploit (MTTE) as threat actors leverage artificial intelligence to…
Part 2 – Cybersecurity journeys: What even is this job?
If you’ve ever looked at a list of cybersecurity jobs and felt like none of them fit you, you might just be looking at a…
Linux rootkits explained – Part 1: Dynamic linker hijacking
Rootkits are a type of malware used by threat actors to gain complete control over a compromised resource and hide malicious activity. They are often…
PyLoose: Python-based fileless malware targets cloud workloads to deliver cryptominer
Using the Wiz Runtime Sensor, we have recently detected a new fileless attack targeting cloud workloads. The attack consists of Python code that loads an…
How to get rid of AWS access keys – Part 3: Replacing the authentication
Read the earlier posts in this series at Part 1: The easy wins and Part 2: Reducing Privileges. When a compute resource in another cloud…