cyber.hendryadrian.com
Security Insights · wiz.io

Wiz Proposes Policy and Technology Measures to Secure Cloud-Connected Critical Infrastructure

· Original article ↗

Summary

Wiz argues that cloud adoption changes critical-infrastructure risks and calls for adaptive regulations, continuous visibility, modernization funding, threat-information sharing, and coordinated government action.

Key points

  • The article says cloud-connected infrastructure can create attack paths when public-facing applications, permissive identities, and access to sensitive databases combine.
  • It cites credential theft and abuse of legitimate tools by groups including Volt Typhoon and Scattered Spider as threats to critical systems.
  • The Colonial Pipeline incident is presented as an example of how a cyber incident affecting IT can prompt physical operational shutdowns.
  • Wiz argues regulations should focus on adaptive security outcomes rather than static, perimeter-based requirements.
  • Its federal proposals include updating sector rules, funding security modernization and workforce training, and renewing authorities for threat-information sharing.
  • State and local proposals include cybersecurity commissions, cyber-physical emergency exercises, SBOM procurement requirements, and resilience support for under-resourced operators.
  • The article also calls for international norms protecting civilian infrastructure and harmonized cyber-incident reporting.

Article Details

Topic
Policy and technology recommendations for securing cloud-connected critical infrastructure

MITRE ATT&CK

T1078 · Valid AccountsThe article says Volt Typhoon and Scattered Spider steal legitimate employee credentials to gain access to critical systems.

Threat Actors

Scattered SpiderIdentified as a group that targets critical systems and uses stolen employee credentials.Volt TyphoonIdentified as a state-sponsored group that targets critical systems and uses stolen employee credentials.

Vendors

WizAt Wiz, we see these threats firsthand. We protect millions of cloud workloads across the public and private sectors, including critical industries like manufacturing, energy, and healthcare. We believe protecting

Industries

Energycloud workloads across the public and private sectors, including critical industries like manufacturing, energy, and healthcare. We believe protecting essential services requires a modern approach that combines smartFinancial Services(CI), systems ranging from those that deliver electricity, clean water, and healthcare, to financial services, is undergoing a fundamental transformation. The controls for physical equipment, like pumps at aHealthcarecritical infrastructure (CI), systems ranging from those that deliver electricity, clean water, and healthcare, to financial services, is undergoing a fundamental transformation. The controls for physicalManufacturingmillions of cloud workloads across the public and private sectors, including critical industries like manufacturing, energy, and healthcare. We believe protecting essential services requires a modern approach that

Related Articles