Wiz’s Post

Join us at Wiz's AMAZING WizMart at BlackHat 2024! 🛒🎩 📍 The 'Mandalay Bay Convention Center' in Las Vegas, booth #1140 📅 August 7-8, 2024 Deep dive into our products, meet our cybersecurity Wizards & win custom Nikes! But wait, there's more... Don't miss our exclusive events: 🍹 Wiz happy hour at #BlackHat with our partners Adaptive Shield, Armis, & Checkmarx. 🎤 Wiz talk: 'Hacking AI infrastructure providers for fun and weights': Featuring Hillai Ben Sasson and Sagi Tzadik. Let's make #BlackHat2024 legendary, together. https://lnkd.in/eSS9bRfF

💙 THANK YOU, Wiz customers, for making us cloud security leaders! Over 100 Leader Badges and still counting... It's an honor to have earned this achievement for the summer 2024 G2 awards. Read more: https://lnkd.in/gyYc83Sr

🚨 Critical #OpenSSH vulnerability alert 🚨 Meet CVE-2024-6387, dubbed "regreSSHion" – a critical vulnerability in OpenSSH that could allow attackers to execute code remotely with root privileges. Here's the scoop: 🔍 What's at risk? 81% of cloud environments, according to Wiz data. 💡 Next steps? Upgrade OpenSSH and restrict access immediately. Wiz customers can find vulnerable instances using our pre-built query in the Wiz Threat Center. Discover more: https://lnkd.in/eHajuv4s

Just in time for Canada Day 🇨🇦 🛡️ How did Maple (getmaple.ca), a leading Canadian telehealth provider together with Wiz, achieve a 10x improvement in vulnerability detection and resolution? "As we focus on continuing to scale, Wiz is a critical part of how we scale our cloud security operations successfully". Patrick Lafleur, CRISC, CDPSE, Director of Information Security & Privacy, Maple (getmaple.ca). By leveraging the Wiz platform, Maple streamlined M&A integrations, gained unparalleled visibility into its cloud infrastructure and ensured top-notch security without expanding its team. 🏥 Read the full story here: https://lnkd.in/e8Yq8B99

📢 From data privacy norms in the age of #AI  to mitigating risks — tune in to the latest episode of #CryingOutCloud with all you need to know from the cloud security news. 🚨 Join Eden Naftali and Amitai Cohen as they dive into: 🔍 How a new AI processing cloud service is challenging data privacy norms. 🛡️ The implications of a potential firewall misconfiguration and how to secure your environment. 🔐 The latest ransomware attacks on GitHub repositories and how to safeguard your data. ⚠️ A new discovery by Wiz research: crypto-jacking campaign targeting Kubernetes clusters. 🐘 Critical remote code execution vulnerability in PHP and how to mitigate the risk. Listen now: 🍏 https://lnkd.in/eUeGKqr6 🎧 https://lnkd.in/ecnyHHa8 📺 https://lnkd.in/ejiMZhTc

🎉 WOO HOO! Wiz was named Microsoft's 'Marketplace Partner of the Year 2024'. 🏆 This award highlights the exceptional work of our global team and our amazing customers who rely on the 'Microsoft Commercial Marketplace' for expert guidance and business solutions. THANK YOU, Microsoft for an amazing partnership and to our amazing Wizards, who always go above and beyond to serve our customers. 🙌 Learn more below ⬇️ https://lnkd.in/ehtFrbZh

Here is your cloud defense CHEAT SHEET ⤵ Today, we're launching a new database on our Cloud Threat Landscape with cloud **defense** methods (mapped to the MITRE D3FEND Matrix) and the attack techniques they defend against. This new data joins the existing information we've compiled about incidents, threat actors, techniques, and targeted technologies, providing even more comprehensive insights into the cloud threat landscape. Check out our new "Defenses" tab here: threats.wiz.io/defenses In honor of this launch, We created a 'Cloud Security Periodic Table' that you can keep with you at all times when you need the TL;DR for cloud defenses and security measures. Download a printable version here: https://lnkd.in/gf5t8FYT 👀 P.S. You might even get a chance to take a 'Periodic Table' poster home next time you visit one of our conference booths... 🙃

🎙️ Tune in to all you need to know about CVE-2024-37032, aka #Probllama 🎙️ Join Shir Tamari, Amitai Cohen, and Eden Naftali, as they dive into the latest discovery by Wiz's research team — a critical vulnerability in Ollama, a popular #AI application. In this episode, we explore: 🦙 The technical details of CVE-2024-37032 😈 How an attacker can abuse this vulnerability 🛡️ Steps AI users can take to defend themselves This isn't just about initial access or crypto mining. This flaw could allow attackers to gain remote code execution and alter prompt answers to generate misleading information. Listen to the full 'Crying Out Cloud' podcast episode below: https://lnkd.in/dwchRjEX

💥 EXCLUSIVE: Wiz Research uncovers CVE-2024-37032, aka #Probllama — a vulnerability in Ollama that left thousands of AI models exposed 😲 This flaw could allow attackers to gain remote code execution and alter prompt answers to generate misleading information. Security teams should update their Ollama instances to the latest version to mitigate this vulnerability. Kudos to our research team, Sagi Tzadik and Shir Tamari for uncovering this and to Ollama for the collaboration with the fast fix 🚀 https://lnkd.in/eXwZpnNN