Wiz Adds CISA KEV Catalog Support to Cloud Vulnerability Prioritization
Summary
Wiz says its cloud security platform now incorporates CISA KEV data, letting users find vulnerable cloud resources and prioritize remediation using exposure and privilege context.
Key points
- Wiz added CISA Known Exploited Vulnerabilities (KEV) Catalog data to its vulnerability findings.
- A dedicated dashboard lists cloud resources vulnerable to one or more KEV-listed vulnerabilities; a search shortcut can locate affected VMs, containers, and serverless functions by CVE.
- Wiz says less than 1% of the vulnerabilities it detects in cloud environments appear in the KEV Catalog.
- The article recommends prioritizing KEV-listed vulnerabilities in context, including whether a vulnerable resource is internet-exposed or has access to highly privileged credentials or roles.
- CISA’s directive requires U.S. federal agencies to remediate catalog vulnerabilities within specified timeframes; the article presents the catalog as a useful prioritization source for other organizations too.
Article Details
- Event Type
- Wiz announced support for the CISA Known Exploited Vulnerabilities (KEV) Catalog, adding KEV intelligence to its vulnerability findings and cloud risk prioritization capabilities.
- Impact
- The integration lets organizations identify cloud resources affected by KEV-listed vulnerabilities and prioritize remediation using contextual risk factors such as internet exposure and privileged access. The article says KEV-listed vulnerabilities account for less than 1% of the vulnerability findings Wiz detects in the cloud. It identifies CVE-2022-21882 as a KEV entry added on February 4, 2022, with remediation required within 14 days for affected federal agencies.