Wiz Adds Built-In Controls to Monitor Suspicious Cloud Events Affecting Sensitive Data
Summary
Wiz announced built-in Wiz DSPM controls that monitor suspicious cloud events involving unprotected sensitive data. Examples include traffic from an unrecommended IP and SSH brute-force activity; suggested responses include blocking access, encryption, and stronger data
Key points
- Wiz says its new built-in controls monitor suspicious cloud events involving unprotected data in near real time and require no configuration.
- One example identifies sensitive data receiving traffic from an unrecommended IP; the article recommends blocking the IP and applying encryption and access controls.
- Another example detects a virtual machine containing sensitive data targeted by an SSH brute-force attack; suggested responses include verifying the activity, encryption, access controls, and strong passwords.
- Wiz Security Graph visualizes attack paths to sensitive data and helps teams correlate potentially risky combinations in their cloud environments.
Article Details
- Event Type
- Launch of built-in cloud data security controls for Wiz for DSPM
- Impact
- The controls provide near-real-time monitoring and detection of suspicious cloud events involving unprotected data, helping customers identify potential exposure and respond with measures such as blocking suspicious traffic, encryption, access controls, and strong passwords.
MITRE ATT&CK
Vendors
Products
Wiz DSPMEditor’s note: Wiz recently announced the general availability of Wiz for DSPM. Our second blog post talked about why data security should be integrated with CNAPP. Wiz Security Graphfrom an unrecommend IP. Diving a bit deeper into the issue, the attack path visualization on the Wiz Security Graph shows how an attacker would gain access to the critical sensitive data on this Active Directory