Apparently the cybersec bigwigs at our company love it, but for me I have to write a detailed explaination why another 'incident report' the clueless cybersecurity guys keep bothering me with is actually nonsense.
There are a lot of cybersecurity people that really know nothing about actual security and just rely on what their tools tell them. And products like Wiz love to "prove" their value by raising tons of red flags.
This is especially true for vulnerability management, which is basically Boy-Who-Cried-Wolf as a Service. The entire CVE ecosystem used to be great, but now it's turned into resume-driven-development where people exaggerate the severity of a vulnerability in order to have a CVSS 9.8 on their resume.
I wonder if there are antitrust lawyers watching this closely. Would be really interesting to get their perspective on this.
https://www.reuters.com/world/google-secures-eu-antitrust-ap...
I'm curious how much of that information is going to pass between Wiz and Google Cloud product/sales. It's effectively x-ray vision into some huge workloads running on their competitors.