Wiz interviews
Prioritising by exposure
“Any exposed application, service, or technology should be prioritized based on reachability, exploitability, and business impact, with a clear and fast process to route the issue to the right owner and drive remediation.”
Alon Schindel and Raaz HerzbergWiz blog
“Sensitive assets should not be reachable from the internet or exposed to untrusted paths, regardless of patch status.”
Alon Schindel and Raaz HerzbergWiz blog
“Without environmental context, security teams spend valuable engineering cycles remediating theoretical risks rather than actionable exposures.”
Wiz Threat ResearchWiz blog
Containing access
“The true severity of an intrusion is not defined by the initial foothold, but by privilege and reachability: what an adversary can inherit, access, or pivot to next.”
Wiz Threat ResearchWiz blog
Privilege and reachability set severity
Has the stolen access been stopped? Practise proving it.
ExampleWhat AI changes
“Published research, including our own AI cyber model arena, has shown that frontier models can now autonomously discover zero-day vulnerabilities, generate working exploits, and chain multiple weaknesses together – changing the scale and speed at which risk emerges.”
Alon Schindel and Raaz HerzbergWiz blog
Last reviewed
