cyber.hendryadrian.com
Security News · wiz.io

Wiz Adds Dynamic Scanning to Validate Cloud Resource Exposure

· Original article ↗

Summary

Wiz says its dynamic scanner tests externally reachable cloud resources, validates exposed ports and protocols, and captures screenshots to help security teams assess and prioritize exposure.

Key points

  • The scanner attempts connections from outside the cloud environment to validate potential exposure and identify reachable IP addresses and ports.
  • Wiz says the tool checks resources including virtual machines, containers, and serverless functions in the context of cloud network topology.
  • The Wiz application displays port exposure status and screenshots of exposed endpoints, with Jenkins and Kibana dashboards given as examples.
  • The feature is presented as an addition to Wiz's network analysis engine; the article says Wiz Cloud Detection and Response adds cloud-event analysis to help assess whether critical-risk resources were targeted.

Article Details

Event Type
Product feature announcement
Impact
Wiz integrated a dynamic scanner into its network analysis engine to validate externally exposed cloud resources, identify reachable ports and protocols, and show screenshots of exposed endpoints. The feature is intended to help customers assess exposure in context and prioritize remediation; the article does not report a specific breach or confirmed customer impact.

Vendors

Wizto sabotage operations and perform lateral movement to reach the crown jewels of your environment. Wiz research estimates that 55% of organizations have at least one database currently exposed to the internet

Products

ElasticsearchAnother example that you will probably have to prioritize is the evidence that an ELK (Elasticsearch, LogStash, Kibana) is publicly exposed, such as the Kibana Dashboard that contains sensitive information.JenkinsWiz calculates effective external exposure in cloud environment – in this example, a Jenkins server.Discover, analyze, and validate your externally exposed resources  KibanaAnother example that you will probably have to prioritize is the evidence that an ELK (Elasticsearch, LogStash, Kibana) is publicly exposed, such as the Kibana Dashboard that contains sensitive information.LogstashAnother example that you will probably have to prioritize is the evidence that an ELK (Elasticsearch, LogStash, Kibana) is publicly exposed, such as the Kibana Dashboard that contains sensitive information.Wiz Cloud Detection and Response (CDR)one aspect of our vision to bring the richness of context to cloud defenders as part of Wiz Cloud Detection and Response (CDR). CDR further enriches the context provided by the Wiz Security Graph by incorporatingWiz Security GraphWith the Wiz Security Graph and network analysis engine, it is very easy to discover and visualize potential resource exposure. Wiz analyzes all the layers of the cloud and Kubernetes to build a network topology.

Related Articles