Guy Podjarny

How did Wiz help Stanford University empower its departments to self-manage cloud security? "Because Wiz is agentless, we don't have to worry about anyone forgetting to install software—we have visibility into everything we need." Noah Abrahamson, Director of Cloud Security, Stanford University Here's how: 🔍 Real-time visibility across AWS, Azure, and GCP ⚡ Simplified security for 20k+ faculty and staff 🛡️ Enhanced risk management by a 13-person security team By federating security management, Stanford's teams can focus on innovation, from reducing fossil fuels to advancing healthcare. Discover more below 💡 https://lnkd.in/gHxgMYRd

252

1 Comment

Simplify infrastructure management, deploy faster, and give your team more control. In this whiteboarding session, HashiCorp Co-Founder Armon Dadgar, breaks down the features and capabilities of HCP Waypoint. Watch now: https://hashi.co/3XccGYJ

54

New Episode Alert: Exploring Open Source Security with Ilkka Turunen 🎙️ In our latest episode of Secured, Cole Cornford sits down with Ilkka Turunen, CTO of Sonatype, to dive deep into the world of open-source software and the security risks that come with it. If you're using open source or managing software supply chains, this episode is a must-listen! Key highlights: 🔧 The pros and cons of using open-source software in today’s landscape 📦 How Maven revolutionised software development processes 🌍 A look at AppSec regulations across Australia and Europe 👉 Listen now and stay ahead in securing your software supply chain: https://lnkd.in/gttniGDm   #SecuredPodcast #OpenSourceSecurity #CyberSecurity #SoftwareSupplyChain #GalahCyber

7

The buzz around containerization and microservices architectures is well-deserved. As highlighted in my recent interview with John Verry of The Virtual CISO Podcast: https://lnkd.in/eRjq-mtc, these approaches are fundamentally changing how we build and deploy applications. By breaking down monolithic applications into smaller, independent services, containerization ushers in an era of unprecedented scalability, agility, and resilience. But what does this mean for the future of application development? Here's my take: ➡ Rise of the Microservices Architect: The ability to design and manage these distributed systems will become a critical skill for developers. We'll see a surge in demand for microservices architects who can orchestrate these intricate service interactions. ➡ DevOps Transformation: The siloed approach of development and operations will continue to crumble. DevOps engineers who understand both sides of the coin will be highly sought-after to ensure seamless development, deployment, and management of containerized applications. ➡ Focus on Automation: Automation will be key to managing the complexities of containerized deployments. Proficiency in tools like Kubernetes and container orchestration platforms will become a must-have for DevOps teams. By embracing these trends and fostering the right skillsets within our teams, we can unlock the true potential of this transformative technology. #Kubernetes #KubernetesSecurity #DevSecOps #Containers

51

1 Comment

🤯 Say goodbye to context switching — one-click pull requests are HERE! 🚀 Now you can open pull requests directly from the Wiz platform - no more jumping between tools and disrupting your flow! 🛠️ Fix vulnerabilities, strengthen your security posture, and ship code faster than ever before. 💨 Learn more >> https://lnkd.in/dn-dHEg7

182

3 Comments

MetaDefender Software Supply Chain v2.2.0 now integrates with JFrog Artifactory, empowering businesses to secure their CI/CD pipelines as software development stacks become more complex. Learn more: https://lnkd.in/eTcVVuMQ

18

I’m excited to join an upcoming webinar with OpenNebula Systems, alongside Francisco Picolini, their Open Source Community Manager, and Bruno Rodriguez, their Senior Cloud Engineer. Details: April 24, 2024 @ 5pm CEST Moving Away From CentOS: Leveraging AlmaLinux on OpenNebula * Discover new features and learn tips and tricks from AlmaLinux * Learn how to install and use AlmaLinux on OpenNebula * How is AlmaLinux an alternative to CentOS Description: With RedHat deciding to sunset the historic CentOS Linux, many users have to face the struggle of looking for a replacement. AlmaLinux has emerged as a strong contender, offering full compatibility with RHEL and proving itself as a dependable choice for server management. In this webinar, benny Vazquez will discuss the necessity of another Linux Distribution, the markets AlmaLinux serves, the project’s commitment to its users, and how you can contribute to the open source community. In the second part of this webinar, Bruno Rodriguez, OpenNebula’s Senior Cloud Engineer, will demonstrate the ease of installing and utilizing AlmaLinux on OpenNebula. You’ll learn how AlmaLinux can effectively serve your needs and how seamlessly it integrates with OpenNebula for an efficient cloud infrastructure. Register now: https://lnkd.in/gpSekXJs

29

2 Comments

What should be the agenda for the upcoming CSA IL event during Cyber Week? You decide by completing the survey in the first comment

13

1 Comment

Get a taste of the benefits of Dazz + GCP in this brief explainer video 👇🏻

8

Accelerating AI adoption? Don't let security fall behind by joining JFrog & NVIDIA for our upcoming webinar, “Accelerating AI in the Enterprise: Staying Ahead While Staying Secure,” We’ll explore how to scale AI without compromising on security. Learn key strategies for securing #AI / #ML pipelines, managing risk, & ensuring compliance. Register now to secure your spot: https://jfrog.co/4fz8gBt #DevOps #DevSecOps

39

Want to learn more about Wiz Code, and how it can aid your Developers to deliver code more securely and with greater efficiency? Use the link below to register for our upcoming webinar: https://lnkd.in/eu7PMT-m

12

Big news today, as we launch Wiz Code, bringing Wiz to AppSec and DevSecOps, weaving cloud security throughout the development lifecycle! 💫 Wiz Code is the natural progression in the evolution of Wiz and the CNAPP market. With deep integrations into cloud environments and CI/CD pipelines, Wiz now extends to code repositories such as GitHub, GitLab and AzureDevOps, and even to the IDEs. The result is smarter risk prevention and faster remediation through the introduction of context into the world of code scanning in both directions: First, by adding cloud and runtime context to code scanners, we enable smarter prevention of risky code and suggest the right fix early in the development lifecycle — directly within the tools developers already use. Second, now Wiz can trace critical cloud issues back to their code, so we can open a PR for the relevant developer to fix it directly at the source. Customers have long asked to consolidate their code security stack with their cloud security stack - Wiz Code is a huge step in that direction. I couldn't be more excited about the transformation and impact it will have on how we do cloud security across the industry! ✨ https://lnkd.in/d6SKG4rX

1,105

23 Comments

Your cloud budget is leaking! In our latest podcast episode, Kirill Shirinkin sheds light on a startling fact: "Cloud waste is still huge, and many companies don't even realize it." Despite the low-hanging fruits available for cost optimization, organizations continue to overspend on unused resources, forgotten storage, and misaligned services. This isn't just small change - it's a significant chunk of your IT budget that could be reinvested into innovation and growth. As CTOs committed to efficiency and ROI, it's crucial to address this hidden drain on resources. 👉 Listen to the full episode to discover what else we uncovered from the recent Flexera report and our hands-on experience: https://lnkd.in/dGkzA3Ka And if you're ready to see how much you could save, apply for our free cloud cost audit: https://lnkd.in/dU9NjJ_p #CloudOptimization #CTO #CostSavings #CloudComputing

7

This is a very useful feature but I am surprised it is not already well adopted in industry. We introduced this 8 years ago at SourceClear with safe versions - https://lnkd.in/gqH4MTJY

5

Great writeup of the Ollama vulnerability: https://lnkd.in/ekSd2yD4. But what lands for me is the Sagi Tzadik's comment on twitter: "This behavior is a common pattern we see in AI tooling: an immature codebase with simple vulnerabilities, no common security mechanism out-of-the-box. Infrastructure security is one of the most challenging aspects of AI security." Last year, my Cybersecurity and Infrastructure Security Agency colleagues Christine Lai and Jonathan (Jono) Spring wrote that "Software Must Be Secure by Design, and Artificial Intelligence Is No Exception" and we have to keep pushing for that. https://lnkd.in/e3mvRX_T #SBOM and I suppose #AIBOM

72

4 Comments

** Thank you all for your insights on our latest research. We're currently revising the blog post and adding further clarification and any missing information based on feedback from the community and our latest review*** 🚨 Dear Security Engineers / AppSec people Uri Aronovici discovered a new attack where threat actors can exploit widely-used external Terraform providers to gain full control of a cloud production environment. Why you should care about it ? 📍 Most SAST / SDLC processes are not catching it 📍 There are many ways to exploit it 📍 There are few ways to detect it while it happens #terraform #cloudsecurity #appsec #riskmanagement

86

22 Comments

Had a great time sitting down with James J A. on the CyberHub Podcast, sharing my candid thoughts on what it’s REALLY like to be a CISO at a startup. It’s not often I get the chance to dive into my personal journey—from the Israeli Air Force to the fast-paced world of startups—and talk openly about the challenges and the lessons I've learned along the way. We covered a lot (!!!) - Building a security-first culture without losing focus on business goals. - Navigating the balance between security priorities and rapid product growth. - The importance of trust, communication, and solid relationships in a startup. - How resilience plays a role, not just in cybersecurity but in life. It was refreshing to have such a genuine conversation 😃 Big thanks to James and his team for making it happen. I’d love to hear your thoughts, so feel free to reach out! https://lnkd.in/dehR8xCY #cybersecurity #leadership #CISO #startuplife #businessstrategy #cyberresilience #cyberhubpodcast

68

4 Comments