Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security
Authentication
Mobile
Privacy
Compliance
Careers and People
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management

Cloud

12/9/2020
02:50 PM
Dark Reading Staff
0 comments
Comment Now
50%
50%

Former Microsoft Cloud Security Leads Unveil New Startup

Wiz has raised $100 million since its January launch and plans to help businesses with visibility into cloud security threats.

Wiz, a new cloud security startup, today emerged from stealth with $100 million in Series A funding and a mission to help organizations achieve greater visibility into cloud-based threats.

Related Content:

Microsoft Cloud Security Exec Talks New Tech, WFH, Gamification

The Changing Face of Threat Intelligence

New on The Edge: BECs and EACs: What's the Difference?

The startup was founded in January by a team that previously led Microsoft's Cloud Security Group and created Adallom, a cloud security startup that Microsoft acquired in 2015 for $320 million. CEO Assaf Rappaport, CTO Ami Luttwak, vice president of product Yinon Costica, and vice president of research and development Roy Reznik have worked together for 15 years.

Their time spent working on cloud security has given the founders insight into the issues that businesses struggle with most. Today's cloud security tools are complicated, fragmented, and generate too many alerts for security teams to handle. To combat these problems, Wiz aims to build a platform that lets teams scan their environments across compute types and cloud services for vulnerabilities and configuration, network, and identity issues without agents. 

Wiz is based in Palo Alto, Calif., and Tel Aviv, Israel. The company is backed by Sequoia Capital, Index Ventures, Insight Partners, and Cyberstarts. 

Read more details in the full release.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio
 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Webcasts
More Webcasts
White Papers
More White Papers
Reports
More Reports
Comments
Newest First  |  Oldest First  |  Threaded View
Phishing Campaign Targets 200M Microsoft 365 Accounts
Kelly Sheridan, Staff Editor, Dark Reading,  12/7/2020
Nation-State Hackers Breached FireEye, Stole Its Red Team Tools
Kelly Jackson Higgins, Executive Editor at Dark Reading,  12/8/2020
Open Source Developers Still Not Interested in Secure Coding
Robert Lemos, Contributing Writer,  12/8/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: Don't worry, you'll know if audit doesn't like your password strength!
Current Issue
2020: The Year in Security
Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.
Flash Poll
Assessing Cybersecurity Risk in Today’s Enterprises
Assessing Cybersecurity Risk in Today’s Enterprises
COVID-19 has created a new IT paradigm in the enterprise — and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-17515
PUBLISHED: 2020-12-11
The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.
CVE-2020-7793
PUBLISHED: 2020-12-11
The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).
CVE-2020-7788
PUBLISHED: 2020-12-11
This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.
CVE-2020-7790
PUBLISHED: 2020-12-11
This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF.
CVE-2020-7792
PUBLISHED: 2020-12-11
This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn 'mixes objects into the target object, recursively mixing existing child objects as well'. In both cases, the key used to access the target object recursively ...