Techzine TV podcast

Wiz sees big impact of AI on runtime security, but also stresses old threats

Coen or Sander Season 3 Episode 4

Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.

0:00 | 18:15

In this episode of Techzine TV, recorded at Wiz's London Wizdom event, we explore the evolving landscape of cloud security with Amitai Cohen, responsible for threat research at Wiz. The discussion reveals why cloud security has become synonymous with all security practices and examines the most common misconfigurations organizations face.

Cohen explains how the responsibility for security is shared between vendors and customers, and why default configurations hold immense power in determining security postures. The conversation delves into supply chain security across package registries like npm and PyPI, open source maintainer responsibilities, and the emerging challenges of AI-powered attacks.

Key takeaways:
• Why IMDSv1 vs v2 in AWS represents typical cloud misconfiguration patterns
• How AI tooling built for labs is being deployed in production environments
• The rise of vibe coding and its security implications
• How attackers are using AI CLIs on developer machines
• Why runtime detection is becoming more critical than static malware analysis
• The importance of opinionated security defaults from vendors
• Supply chain security differences between major package registries

Chapters:
0:12 - Introduction to Wiz and cloud security
1:32 - Why cloud security is so fundamental
2:09 - Customer misconfigurations explained
6:18 - The power of secure defaults
6:44 - Open source security challenges
15:54 - AI creating new attack surfaces
17:39 - The importance of runtime detection