Wiz launches Incident Response service for cloud security crises

"Wiz introduces a new service for organizations affected by security incidents. Wiz Incident Response (IR) combines years of cloud expertise with forensic investigation capabilities to help organizations recover quickly from attacks. The service is based on research in which Wiz discovered some of the biggest cloud and AI vulnerabilities. Examples include a public DeepSeek database that leaked sensitive AI chat data and vulnerabilities in Ingress NGINX that enabled external code execution."

"Wiz also discovered a critical vulnerability in Nvidia's Triton Inference Server. These findings not only make organizations aware of risks but also form the basis for more effective response strategies. Wiz IR builds on the company's existing platform. The service integrates with Wiz Defend and Wiz Runtime Sensor to provide a complete security solution for cloud, hybrid, and on-premises environments."

"Forensic investigation and rapid response The Wiz IR team focuses on five key areas during an incident. During incident registration, the team helps organizations distinguish between false alarms and real threats. The forensic investigation uses context from cloud environments to map the scope and timeline of attacks. During containment and recovery, Wiz IR provides immediate recommendations to stop attacks and restore systems."

Wiz Incident Response (IR) offers a managed service for organizations affected by cloud or AI security incidents, combining cloud expertise with forensic investigation capabilities. The service leverages Wiz's research into major cloud and AI vulnerabilities, including data leaks from a public DeepSeek database, Ingress NGINX external code execution flaws, and a critical Nvidia Triton Inference Server vulnerability. Wiz IR integrates with Wiz Defend and Wiz Runtime Sensor and uses the Wiz Security Graph to provide full cloud context. The IR team registers incidents, separates false alarms from real threats, maps attack scope and timeline, recommends containment and recovery actions, and monitors ongoing suspicious activity.

Read at Techzine Global