Wiz

LIVE now! ?? Join our expert panel with Emily Heath, Jeremy Smith, and our very own Ryan Kazanciyan to elevate your boardroom strategy. If you have any questions for our panelists — comment below!

??? CLOUD THREAT MONTHLY ROUNDUP ??? ?? Storm-0501 targeting U.S. hybrid environments, exploiting on-prem vulnerabilities to attack the cloud with ransomware. Beware of compromised Microsoft Entra IDs. ?? REF6138 is exploiting Apache2 on Linux, deploying DDoS attacks, crypto-miners, and custom malware. Persistence via cron jobs and Telegram bots makes it a tough one to beat. ?? perfctl malware is hijacking Linux servers, using rootkits, crypto-miners, and TOR for stealth. Access the full threat landscape >> https://threats.wiz.io

?? Critical Vulnerabilities in Palo Alto Networks' Expedition tool ?? Critical vulnerabilities (CVE-2024-9463 to CVE-2024-9467) found in Palo Alto Networks' Expedition tool, including OS command injection, SQL injection, and cross-site scripting (XSS). These flaws pose significant risks like unauthorized access and administrative takeover, with minimal effort needed for exploitation. ?? Affected Versions: All versions below 1.2.96 ?? Action Required? Upgrade to Expedition 1.2.96 or later to mitigate these risks. Read more: https://lnkd.in/gDF3Famq

Did you know that #Amazon's retail business manages over 10,000 #AWS accounts? This highlights a critical aspect of cloud security: how we create and manage our accounts matters! Why do organizations end up with so many accounts? ?? Security isolation ?? Easy ownership attribution for cost and security fixes Implementing a Landing Zone is a great first step for what exists *inside* accounts. However, scaling beyond dozens of accounts requires an account vending strategy that focuses on what exists *outside* the Amazon Web Services (AWS) account. Learn more in our new blog by Scott Piper --> https://lnkd.in/gdUkUkWx

NICE! Wiz proudly joined #CISA's Secure by Design initiative as an inaugural member! ?? In honor of 'Cybersecurity Awareness Month', we're sharing our latest updates on how we're living up to our 'Secure by Design' commitment and providing our customers with the tools to be more secure by default: ?? We enforce the least privilege access and integrate SAML 2.0 compliant SSO platforms at no extra cost. ??? Eliminating Vulnerabilities: Using memory-safe languages like Go and Rust ensures secure design and eliminates software defects. ?? All customers receive detailed audit logs to track security events without requiring premium licenses. ?? Automated scanning and SBOM features help ensure the security of third-party software and components. ?? Our Trust Center provides vulnerability notifications, policies, and an external bug bounty program for responsible disclosure. Want to learn more? Check out our full blog: https://lnkd.in/dYRE_dCZ Cybersecurity and Infrastructure Security Agency

??? Catch the latest episode of 'Crying Out Cloud', where Amitai Cohen and Eden Naftali tackle key cloud security challenges from 'AI Toolkit Risks' to 'CUPS Vulnerabilities'! Tune in to hear about: ?? Wiz Research discovered a vulnerability affecting the NVIDIA container toolkit ?? Google's novel Info Stealers Mitigations ?? All the talk around the CUPS vulnerabilities ?? How to leverage Atomic Cloud IOCs [And so much more...] ?? Listen now: ?? https://lnkd.in/eG7EN9sV ?? https://lnkd.in/e6wF5-ZR ?? https://lnkd.in/ePTNi5Ev

?? How to crush your next board meeting? It's not enough to understand security—you need to know how to communicate it. Join us for the next CISO Playbook webinar, where panelists: Emily Heath, General Partner at Cyberstarts, Jeremy Smith VP, ISO at Avery Dennison, and our CISO at Wiz Ryan Kazanciyan will reveal how to confidently present security at the board level. ?? October 16, 2024 ? 11:00 AM ET / 8:00 AM PST ?? Secure your spot below: https://lnkd.in/ecXwYcpU

?? Tune in for a special episode of the "Crying Out Cloud" podcast with GitLab's VP of Product Security — Julie Davila! ?? Join Julie and our co-host Eden Naftali as they dive into: ?? Balancing transparency in open-source tooling with security risks. ?? Democratizing security: How GitLab empowers engineers to take ownership of security without disrupting their workflow. ?? Plus, insights into empowering women in cloud security and why diverse representation is crucial for the industry's future. Listen below: ?? https://lnkd.in/ecvcVmbn ?? https://lnkd.in/eTqE4Ts2 ?? https://lnkd.in/ewzmuM2d

?? Wiz Code continues to earn praise from industry thought leaders! ?? James Berthoty's unfiltered review is out, and here's the bottom line: Wiz Code is simple, powerful, and changing the CNAPP game. Read his no-holds-barred analysis here >> https://lnkd.in/dMsVwvvj

What an honor! ?? We're thrilled to see our own Assaf Rappaport among the visionary leaders on this year's #Time100NEXT list! ?? Thank you, TIME magazine, for this humbling recognition, and to Howard Schultz for his kind words about Assaf. Nothing is more important than the love of our customers — but this is pretty darn cool. ? https://lnkd.in/dfcPEzRV