Wiz’s Post

It is a challenge to be in top of the attack surface and defending it. This problem grows exponentially with number of assets in different environments. #IAM #EC2

I just published a new write-up on memory forensics in cloud environments! In this guide, I explain how to remotely capture and analyze memory dumps from an AWS EC2 instance using Margarita Shotgun. From compiling the LiME kernel module to conducting a forensic analysis, I break down each step to make the process easier for investigators. #CloudSecurity #MemoryForensics #AWS #DigitalForensics #Cybersecurity

AWS vs Azure: A “Secure by default” comparison by Stefan Tita Take a closer look at the Security differences between the AWS and Azure by reviewing the design choices, default settings and vulnerabilities that have been exploited over the years. Let's focus on recurring issues that present constant problems, and not one time issues or CVEs. https://lnkd.in/esidP8v5

Archiving AWS EC2 AMIs and Snapshots in an Archive Account ~~ Save money on EC2 Instance AMIs you maintain for backups, legal purposes, and rolling back to a known good state https://lnkd.in/e-KWMQes

Why AWS Dominates in IT Security - RadialSpark Radio Clip by RadialSpark In this clip from RadialSpark Radio, we discuss the importance of major cloud providers like AWS, Google Cloud, and Heroku in ensuring IT security and business continuity. It explores traditional IT challenges and highlights why using cloud services is crucial for handling mission-critical applications. Full Broadcast Available Below https://lnkd.in/geGTvaNc via YouTube https://lnkd.in/g_x7YFzf

🔥 Is your AWS team keeping up with essential security measures? It's time for serious introspection if answer to any of this is true: 1️⃣ Is your RDS left vulnerable on public networks? 🚫 2️⃣ Do EC2 instances still have port 22 wide open? 🚷 3️⃣ Are your public API endpoints lacking WAF protection? 🛡️ 4️⃣ Are Lambdas triggered via URLs without associated functions? 🚀 5️⃣ Are your database ports (3306/5432) exposed to the public? 📡 6️⃣ Are SSM agents missing on compute nodes? 🛠️ 7️⃣ Are your S3 buckets public and accessible to everyone? 🗑️ What other fundamental security measures do you believe many AWS accounts overlook? #AWS #CloudSecurity #InfrastructureUpgrade 💼🔒

🚀 𝗘𝘅𝗰𝗶𝘁𝗶𝗻𝗴 𝗡𝗲𝘄𝘀 𝗳𝗼𝗿 𝗔𝗪𝗦 𝗨𝘀𝗲𝗿𝘀! 🚀 🌐 Eclypses is helping companies optimize their costs 💲 while providing 𝘂𝗻𝗺𝗮𝘁𝗰𝗵𝗲𝗱 𝗱𝗮𝘁𝗮 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 🔐. Our latest 𝗖𝗼𝘀𝘁 𝗢𝗽𝘁𝗶𝗺𝗶𝘇𝗮𝘁𝗶𝗼𝗻 𝗨𝘀𝗲 𝗖𝗮𝘀𝗲 shows how Eclypses can 𝗿𝗲𝗱𝘂𝗰𝗲 𝗱𝗮𝘁𝗮 𝗿𝗶𝘀𝗸𝘀 📉 while keeping your operations efficient and secure! ⚙️ We’re offering a 𝗙𝗥𝗘𝗘 𝟯𝟬-𝗗𝗮𝘆 𝗧𝗿𝗶𝗮𝗹 𝗼𝗻 Amazon Web Services (AWS) to let you experience the power of Eclypses firsthand! 🎉🖥️ https://lnkd.in/gp4WUjib Don’t miss this chance to boost your security and save on costs at the same time! 💪💼 📄 𝗖𝗵𝗲𝗰𝗸 𝗼𝘂𝘁 𝘁𝗵𝗲 𝗳𝘂𝗹𝗹 𝗨𝘀𝗲 𝗖𝗮𝘀𝗲 𝗵𝗲𝗿𝗲: https://lnkd.in/gmdvFVcA #DataSecurity #AWS #CostOptimization #Cybersecurity #FreeTrial #Eclypses #Innovation #CloudSecurity #Optimize

⚠️ Microsoft Azure is removing support for #TLS 1.0 & 1.1 starting 9/17, 2024! Are you ready for the switch? Upgrade to TLS 1.2 & 1.3 for enhanced security. wolfSSL supports both—let us help you prepare for a smooth transition! Learn more:

AWS users are simplifying access and improving security with Teleport. By consolidating access to EC2, RDS, and EKS and enforcing granular identity-based permissions, Teleport reduces risks and enhances compliance—all while making life easier for developers. Learn more: https://ow.ly/qQjK30sIPof

Looking for a guided way to test and evaluate runtime monitoring? The AWS Threat Detection & Response workshop now includes a step by step guide to test GuardDuty - Runtime Monitoring for EC2. Kudos for Lawton Pittenger and Nicholas Jaeger for the updates and the dedication going into this work. I highly recommend to check it out! Link to new workshop section - https://lnkd.in/erguv-7C