cyber.hendryadrian.com
Security News · wiz.io

Wiz Adds Container Image Validation and Kubernetes Audit-Log Collection

· Original article ↗

Summary

Wiz announced image validation through its CLI and admission controller, plus near-real-time Kubernetes audit-log collection and correlation in Wiz CDR to help enforce image policies and detect suspicious cluster activity.

Key points

  • Wiz CLI scans container images for vulnerabilities, sensitive data, and secrets against organizational policies.
  • Wiz Admission Controller permits deployment of images validated in authorized CI/CD pipelines, without third-party signing infrastructure.
  • The Kubernetes audit-log collector ingests control-plane logs from EKS, AKS, GKE, and self-managed clusters into Wiz CDR.
  • Wiz says it correlates audit logs with container, host, and cloud-control-plane activity to detect suspicious behavior.
  • One example detection described is anonymous cluster access followed by admin-role creation and cryptomining-related activity.

Article Details

Event Type
Wiz announced two Kubernetes security capabilities: image trust validation and a Kubernetes audit log collector.
Impact
Wiz CLI and Wiz Admission Controller validate images against organizational policies and authorized CI/CD pipelines before production deployment. The audit log collector ingests Kubernetes control-plane logs into Wiz CDR for near-real-time threat detection, correlating them with container, host, and cloud activity. The article describes these as product capabilities and does not report a specific security incident or customer impact.

Vendors

Wizsoftware development lifecycle, from its code to its containerized image and execution. As stated in Wiz 2023 Kubernetes Security report, researchers showed that out of total exposed pods analyzed, 52% contain

Products

Kubernetesintroduction of continuous integration and continuous deployment (CI/CD) pipelines and platforms like Kubernetes for managing applications at scale.   Wiz Admission ControllerThis feature combines Wiz CLI and Wiz Admission Controller to enhance security across the SDLC: Wiz CLI scans images for vulnerabilities, sensitive data, and secrets, adhering to organizational policies, and the WizWiz CLIThis feature combines Wiz CLI and Wiz Admission Controller to enhance security across the SDLC: Wiz CLI scans images for vulnerabilities, sensitive data, and secrets, adhering to organizational policies, and the WizWiz Cloud Detection and Response (CDR)audit logs from any Kubernetes cluster, including EKS, AKS, GKE, or self-managed, and ingest them into Wiz CDR. This capability enables near-real-time visibility into your cluster control plane activity. It detectsWiz Sensorand malicious behavior by correlating audit logs with container and host-level activities through the Wiz Sensor and cloud control plane activities via cloud log collection. For example, Wiz will detect and alert you

Related Articles