Feb 01, 2024 • Wiz Security Research
Secure non-human identities with Wiz’s newest CIEM dashboard
This article announces the release of Wiz's new Cloud Infrastructure Entitlement Management (CIEM) dashboard focused on securing non-human identities. The...
Executive Summary
This article announces the release of Wiz's new Cloud Infrastructure Entitlement Management (CIEM) dashboard focused on securing non-human identities. The primary function of this tool is to provide enhanced visibility into service accounts and other non-human identities within cloud environments. While no specific threat actors or malware families are identified in this text, the mitigation strategy addresses the risk of compromised or overly privileged service accounts. Organizations are encouraged to utilize such dashboards to monitor identity permissions and reduce the attack surface associated with automated processes. The severity of the underlying issue regarding non-human identities is generally considered high in cloud security contexts, though this specific announcement does not detail an active campaign. Security teams should integrate this visibility tool to strengthen identity governance and prevent potential lateral movement or privilege escalation attempts by adversaries targeting weak service account configurations in their infrastructure.
Summary
Gain visibility into non-human identities in your environment and protect against risky service accounts with the new Non-Human Identities Dashboard.
Published Analysis
This article announces the release of Wiz's new Cloud Infrastructure Entitlement Management (CIEM) dashboard focused on securing non-human identities. The primary function of this tool is to provide enhanced visibility into service accounts and other non-human identities within cloud environments. While no specific threat actors or malware families are identified in this text, the mitigation strategy addresses the risk of compromised or overly privileged service accounts. Organizations are encouraged to utilize such dashboards to monitor identity permissions and reduce the attack surface associated with automated processes. The severity of the underlying issue regarding non-human identities is generally considered high in cloud security contexts, though this specific announcement does not detail an active campaign. Security teams should integrate this visibility tool to strengthen identity governance and prevent potential lateral movement or privilege escalation attempts by adversaries targeting weak service account configurations in their infrastructure. Gain visibility into non-human identities in your environment and protect against risky service accounts with the new Non-Human Identities Dashboard. Gain visibility into non-human identities in your environment and protect against risky service accounts with the new Non-Human Identities Dashboard.