PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Wiz launches support for Google Cloud excessive access findings based on audit logs

wiz.io | blog | #cloud | #cloud-security | #least-privilege | #iam | #gcp | #ciem | #audit-logs
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Wiz adds excessive-access findings for Google Cloud based on audit logs, letting all GCP customers—even without IAM Recommender—identify over-provisioned identities and right-size permissions.
Published
Collected

Related coverage

blog · wiz.io
CIEM and Secure Cloud Access: Best Practices from Wiz and CyberArk
Cloud identity security best practices from Wiz and CyberArk: mapping effective permissions, removing excessive access, enforcing least privilege, and operationalizing Zero Standing Privileges.
blog · wiz.io
Protect your Okta identities with Wiz
Wiz adds support for Okta, modeling users and API tokens on the Security Graph to surface excessive permissions, misconfigurations, and real-time threats across federated cloud environments.
blog · wiz.io
Secure non-human identities with Wiz’s newest CIEM dashboard
Wiz's new Non-Human Identities Dashboard finds risky service accounts and machine identities—42% of organizations have one that is high-privilege, internet-exposed and vulnerable.
blog · bugbunny.ai
Identity and Access Management Security: The Control Plane Attackers Target
IAM is the control plane attackers target: inventory privileged human and machine identities, map their reach, and close the gap—broad, durable permissions that outlive the job that granted them.
blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · netspi.com
Escalating Privileges in Google Cloud via Open Groups
Google Groups with open join settings that hold IAM roles in GCP let any organization member self-join and inherit those permissions. Google classified the issue as Won't Fix, intended behavior.
Back