PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Service Catalog is Here: Expand Risk Visibility for Your Service and Its Dependencies, Simplify Issue Ownership

wiz.io | blog | #cloud-security | #remediation | #ownership | #ga | #wiz | #service-catalog
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Wiz Service Catalog is GA: resources are auto-grouped into services via discovery rules and Helm/ArgoCD conventions, giving one shared view of dependencies, ownership and findings per service.
Published
Collected

Related coverage

blog · wiz.io
What’s New in Wiz Service Catalog: Smarter Discovery, Governance, and Service-Level Context
Discover services via Backstage, ServiceNow, and dynamic rules. Wiz Service Catalog adds service-level identity, compliance, and automated posture enforcement.
blog · wiz.io
Wiz at Wiz: Reducing Risk through Service Ownership
How Wiz's own security team uses Service Catalog to organize cloud and AI risk around services, automate ownership mapping, and route remediation to the right engineering teams at scale.
blog · wiz.io
Introducing Wiz Service Catalog: Democratize Cloud Security with Application Service Visibility
Wiz introduces the Service Catalog, which groups cloud resources into the services teams own — with environment, ownership and linked findings — so developers can see and fix their own risks.
blog · wiz.io
PHP2Shell: Exploitation Attempts and Remediation Trends
Wiz research has been monitoring PHP2Shell exploitation attempts, but none have succeeded so far. We examine the techniques used, what prevented the attacks from completing and how observed exposure has changed since disclosure.
blog · wiz.io
The Pwn Request Reckoning: What Still Works Against GitHub Actions
GitHub's 2026 changes close PWN Request flaws by default. Learn what’s patched, residual attack vectors, and how to audit workflows before policy enforcement.
blog · wiz.io
Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles
# Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles An automated campaign is planting secret-dumping workflows in every repository that stolen GitHub tokens can reach. It uses no C2...
Back