Cloud Security

Cloud identity permissions are complex. So complex, that innocent looking permissions provided to 3rd party vendors can lead to unintended exposure of all of your data. The Wiz Research team conducted extensive research of permissions provided to 3rd party vendors in cloud environments and the results should be a wake-up

As a Google Cloud Administrator planning your IAM strategy for how to best use the built-in Google Kubernetes Engine (GKE) IAM Roles, there are a few details that might be confusing and/or surprising that could have unintended consequences. Clarifying the GKE Predefined IAM Roles Here’s a listing of

If an attacker compromises a Google Cloud Platform (GCP) user’s device, he can easily steal and abuse cached credentials, even if MFA is enabled. In this blog post, we will demonstrate an attack in real Google Cloud environments, involving: * Hijacking cached OAuth tokens stored on a GCP administrator’s

For many in the world of data science, distributed training can seem a daunting task. In addition to building and thoughtfully evaluating a high-quality ML model, you have to be aware of how to optimize your model for specific hardware and manage infrastructure. The latter skills are not often included

Cloud storage enables organizations to reduce costs and operational burden, scale faster, and unlock other cloud computing benefits. At the same time, they must also ensure they meet privacy and security requirements to restrict access and protect sensitive information.  Best practices for securing your data with Cloud Storage Securing enterprise

Here are my views on the “Top Ten” AWS Security, Identity and Compliance updates from AWS re:Invent 2020. 1) AWS Nitro Enclaves – Create isolated compute environments to further protect and securely process highly sensitive data. These environments are provably secure, and are not accessible to other applications, users, or