December 3, 2024 at 09:06AM
At AWS re:Invent 2024, new cloud security products were announced including AWS’s incident response service and enhanced threat detection for Amazon GuardDuty using AI. Wiz launched Wiz Defend for real-time threat detection, while Sweet Security introduced a unified platform. Skyhawk Security announced interactive detection capabilities for suspicious activities.
### Meeting Takeaways:
1. **AWS Announcements at re:Invent 2024:**
– **Incident Response Service:** AWS launched a new service aimed at enhancing security incident management for organizations.
– **Amazon GuardDuty Enhancements:** Extended threat detection capabilities were introduced, utilizing AI and machine learning to better correlate security signals and detect various attack sequences.
– **Amazon OpenSearch Service Integration:** The service’s zero-ETL capability is now integrated with Amazon Security Lake to facilitate easier querying and analysis of security data.
– **Verified Access Update:** Now supports secure access to resources using both HTTP(S) and non-HTTP(S) protocols, promoting VPN-less secure access under AWS zero trust principles.
2. **Wiz Product Launch:**
– **Wiz Defend:** A new product aimed at protecting AI and cloud environments, enabling real-time threat detection and response through enhanced capabilities derived from the Gem Security acquisition. It features:
– AI-generated remediation.
– Integration with various vendors for broader support.
– Wiz AskAI copilot for faster investigations.
3. **Sweet Security Launch:**
– Introduced a unified cloud-native detection and response platform, including application detection and response (ADR), cloud detection and response (CDR), and cloud workload protection platform (CWPP).
– Claims improvements over Wiz Defend, emphasizing session-based anomaly detection using proprietary models.
4. **Skyhawk Security Announcement:**
– Introduced interactive detection and response capabilities to their platform, allowing real-time user interaction for verifying alerts from both human and non-human identities.
### Related News:
– Google Cloud’s plans to assign CVEs to critical vulnerabilities.
– Wiz’s acquisition of Dazz for $450 million.
– Google Cloud implementing mandatory multi-factor authentication (MFA) for all users.