Aikido achieves AWS Security Competency for Application Security

Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.

Wiz Research analyzes NordStellar logs to map credentials harvested by infostealers like Lumma and RedLine, showing how stolen keys and tokens unlock AWS, Azure, GitHub, and AI platforms.

Wiz earned Leader status in Forrester's Q3 2026 Proactive Security Platforms Wave, scoring 5.0/5.0 on 8 of 21 criteria, including cloud visibility, exposure validation, and remediation augmentation.

Post-mortem vulnerabilities often look harmless in the diff—they only surface at runtime. ProjectDiscovery says LLM code review hits just 63% precision, so PRs need validation on a running app.

Note: This post is co-authored by JFrog and GitHub and has also been published on the GitHub blog As the volume of code continues to grow exponentially, software developers, DevOps engineers, operations teams, security specialists, and everyone else who touches code are increasingly spending their time in the weeds of securing, delivering, and scaling software.…

Recapping Wiz at AWS re:Invent 2023: EMEA Marketplace Partner of the Year, a new AWS console extension, GuardDuty ECS runtime integration and secure cloud development launches.