cyber.hendryadrian.com
Security News · wiz.io

Wiz Announces AI Security Posture Management Capabilities

· Original article ↗

Summary

Wiz announced AI security posture management features for its CNAPP, including AI service inventory, configuration checks, sensitive training-data controls, attack-path analysis and a dashboard for prioritizing risks.

Key points

  • Wiz says its agentless AI-BOM identifies AI services, technologies, libraries and SDKs in an environment.
  • Built-in checks flag example misconfigurations such as an unencrypted SageMaker endpoint or a Vertex AI Workbench notebook with a public IP.
  • AI-focused DSPM controls aim to identify sensitive training data and attack paths that could lead to data leakage or poisoning.
  • Attack Path Analysis correlates AI pipeline risks involving vulnerabilities, identities, internet exposure, data, misconfigurations, exposed secrets and malware.
  • The new dashboard presents prioritized AI security issues, inventory, AI SDK vulnerabilities and storage used for AI training.

Article Details

Event Type
Product launch
Impact
Wiz announced Wiz for AI Security, an AI security posture management capability integrated into its platform. It provides AI-service inventory, configuration checks, AI training-data security controls, attack-path analysis, and a dashboard for prioritizing risks. The announcement describes these capabilities as helping organizations identify risks such as misconfigurations, exposed sensitive data, vulnerabilities, and malware in AI environments; it does not report a new incident.

People

Ashley DunnIdentified as Head of Security Engineering at OVO and quoted describing OVO’s use of Vertex AI and Wiz.

Vendors

Wizthe past few years, with AI becoming an integral component of many industries. Based on analysis from the Wiz research team, over 62% of organizations are already using at least one AI cloud service. This surge of

Products

Amazon Bedrockdetect new AI services introduced into the environment such as AWS SageMaker, GCP Vertex AI, Amazon Bedrock, and Azure Cognitive Research and flag the different technologies as approved, unwanted, andAmazon SageMakerthe security team to immediately detect new AI services introduced into the environment such as AWS SageMaker, GCP Vertex AI, Amazon Bedrock, and Azure Cognitive Research and flag the different technologies asAzure Cognitive Researchintroduced into the environment such as AWS SageMaker, GCP Vertex AI, Amazon Bedrock, and Azure Cognitive Research and flag the different technologies as approved, unwanted, and unreviewed. Hugging Faceones. The dashboard also includes an AI inventory, listing vulnerabilities found in AI SDKs such as Hugging Face and OpenAI, and storage used for AI training. This easy-to-understand UI helps AI engineers join theOpenAIalso includes an AI inventory, listing vulnerabilities found in AI SDKs such as Hugging Face and OpenAI, and storage used for AI training. This easy-to-understand UI helps AI engineers join the cloud securityVertex AIteam to immediately detect new AI services introduced into the environment such as AWS SageMaker, GCP Vertex AI, Amazon Bedrock, and Azure Cognitive Research and flag the different technologies as approved, unwanted,Wiz for AI SecurityIntroducing Wiz for AI Security (AI-SPM) Wiz platformmaking Wiz the first CNAPP to provide native AI security capabilities fully integrated across the Wiz platform. With this launch, Wiz provides unmatched security to empower organizations to safely build with AI,

Related Articles