Wiz

🎊 Introducing Custom Roles — a game-changer in cloud security permissions 🔒 With Custom Roles, you can: ✅ Tailor user permissions to perfectly match your business needs ✅ Maintain a strong security posture by granting least privilege access ✅ Stay ahead of evolving permissions and vendor changes 👉 This means no more over-permissioning risks, and more time to focus on what matters most. By aligning user access with their responsibilities, Custom Roles help democratize security across your organization. Read our full blog now >> https://lnkd.in/dPqmVbgp

🚨 BREAKING: Wiz Research has discovered #SeleniumGreed, a new cryptojacking attack exploiting exposed Selenium Grid services. 💰 Selenium is a popular testing framework. The official image has over 100 million pulls in Docker Hub. A potential attacker could leverage Selenium's WebDriver API to gain full control of the machine 🥷 Read our blog post for details on the attack and how to protect yourself >> https://lnkd.in/d3rudxFB — Kudos to our researchers Avigayil Mechtinger, Gili Tikochinski, Dor Laska 💙

🎉 Introducing PromptAirlines.com — a new AI security challenge! 🛫 Your mission: Chat with the AI customer service bot of "Prompt Airlines" and trick it into giving you a free flight. 😉 No coding needed, just creativity! Each level uncovers a real-world AI vulnerability. 🔍 Complete the challenge to earn a flight ticket-style certificate and a chance to win exclusive Wiz travel prizes 🎁 Ready to take off? ✈️ Visit promptairlines.com — Kudos to Nir Ohfeld and Shir Tamari from the Wiz Research team for creating this one-of-a-kind CTF challenge 💙

🎁 #GIVEAWAY: "Cloud Security for Kids" - our new children's book! 🍭 Ever tried explaining cloud security to a 5-year-old? 🤔 We've got you covered! Our book breaks it down into a fun & illustrated adventure. We're giving away 30 copies to the most creative answers to this question: 🦸♂️ If you were a cloud security superhero, what would your superpower be? 🦸♀️ Would you have: 👀 X-ray vision to spot vulnerabilities? 🏃♂️ Super speed to catch attackers doing lateral movement? 🧪 Time-travel abilities to prevent Log4Shell from ever existing? — Share your super skills in the comments below 👇

☀️ Sun's out, fun's out... and so is our "Summer Hacking Playlist"! 🎵 We've handpicked the hottest tracks that our favorite podcast guests like Kat Traxler, Valentina Palmiotti, and more listen to while hacking 🔥 Click here to hack-tivate the playlist → https://lnkd.in/dJ9d4eTV 🌈 Secure the cloud all summer long with the beats that inspire our favorite hackers!

So exciting! We have NEW integrations with GitLab and Microsoft Azure DevOps 🥳 Ever wanted a control tower that secures your codebase across #GitHub, #GitLab, and #Azure Repos before launch? Well... With our latest GitLab and Azure DevOps integrations, Wiz now offers a unified security solution that keeps your code safe—wherever it lives. Our Security Graph delivers a holistic view of your entire development environment, making it easy to identify risks and take action. Dive into the details in our latest blog 👇 https://lnkd.in/eKYQ-TVh

d0 y00 5p34k 1337? 📢 Tune in to our special episode with Hillai Ben Sasson with all you need to know about #SAPwned. TL;DR the Wiz Research Team uncovered serious vulnerabilities in SAP AI Core, revealing potential risks in #AI infrastructure. 🔗 Listen below: 🍏 https://lnkd.in/e-8JJQcg 🎧 https://lnkd.in/eEF7N-rA 📺 https://lnkd.in/etqaKxF9

🚨 All we had to do was change our user ID to 1337 to get unlimited admin rights... The Wiz Research Team just uncovered serious vulnerabilities in SAP AI Core, revealing potential risks in #AI infrastructure. 🔍 By exploiting simple AI developer permissions, attackers could gain access to customers' private files and cloud credentials across AWS, Azure, SAP HANA Cloud, and more. ⚠️ By changing our user ID, we were able to bypass the Istio firewall. That gave us unrestricted access to the internal network. Through the internal network, a potential attacker could: * Read and modify Docker images on SAP's internal container registry. * Gain cluster-admin privileges on SAP AI Core's Kubernetes cluster. * Access customer secrets and internal AI artifacts. Learn more in the blog by Hillai Ben Sasson: https://lnkd.in/g8DmCkPc

🎤 How do you create a flow between #Dev and #Security teams? Join our upcoming CISO Series webinar with our star speakers: Caroline Wong, Aneel S., William Burton, and Ami Luttwak as they will share strategies and insights to help cross-functional teams work TOGETHER. 📅 July 17th 🕚 11 AM ET | 8 AM PT Key highlights: • Understand what's most important to dev teams. • Ways to empower your first line of defense – Your development team. • How to foster a culture of mutual understanding. 🔗 Save your spot: https://lnkd.in/eRskc9tq? utm_source=linkedin&utm_content=promo&utm_medium=organic-social&utm_campaign=FY25Q2_EV_WBNR_What-Every-CISO-Should-Know-About-Dev-Teams_2024-07-17