惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

爱范儿
爱范儿
P
Palo Alto Networks Blog
月光博客
月光博客
H
Hackread – Cybersecurity News, Data Breaches, AI and More
I
InfoQ
aimingoo的专栏
aimingoo的专栏
腾讯CDC
T
Threatpost
D
DataBreaches.Net
Vercel News
Vercel News
F
Fortinet All Blogs
Engineering at Meta
Engineering at Meta
C
Cybersecurity and Infrastructure Security Agency CISA
Forbes - Security
Forbes - Security
U
Unit 42
C
Check Point Blog
Blog — PlanetScale
Blog — PlanetScale
O
OpenAI News
量子位
TaoSecurity Blog
TaoSecurity Blog
Microsoft Azure Blog
Microsoft Azure Blog
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
V
Visual Studio Blog
Recorded Future
Recorded Future
云风的 BLOG
云风的 BLOG
Security Archives - TechRepublic
Security Archives - TechRepublic
The Last Watchdog
The Last Watchdog
S
Security Affairs
Attack and Defense Labs
Attack and Defense Labs
罗磊的独立博客
Stack Overflow Blog
Stack Overflow Blog
Microsoft Security Blog
Microsoft Security Blog
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
V
V2EX
小众软件
小众软件
S
SegmentFault 最新的问题
www.infosecurity-magazine.com
www.infosecurity-magazine.com
W
WeLiveSecurity
AI
AI
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
博客园 - 聂微东
I
Intezer
Know Your Adversary
Know Your Adversary
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
P
Proofpoint News Feed
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
The Cloudflare Blog
博客园_首页
NISL@THU
NISL@THU
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO

Wiz Blog | RSS feed

Meet Wiz for M365: Bringing SaaS into the Security Graph Bringing Security Visibility to Vercel with Wiz Axios NPM Distribution Compromised in Supply Chain Attack Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild The Wiz Blue Agent, now Generally Available Beyond the Badge: What Achieving Microsoft’s Certified Software Designation Means for Your Cloud Security Introducing the Green Agent: AI-Powered Remediation for the Cloud Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack Introducing the Wiz Red Agent- AI-Powered Attacker Introducing Wiz AI Application Protection Platform (AI-APP) Introducing Wiz Agents & Workflows: Security at the Speed of AI AI Runtime Threat Detection: From Input to Real-World Impact Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack It’s Official: Wiz Joins Google Understanding and Reducing AI Risk in Modern Applications Introducing Wiz Tenant Manager: Multi-Tenant Management for Federated Organizations The Agile FedRAMP Playbook, Part 4: Reactive Risk Management through Enriched Incident Response Wiz Achieves CPSTIC Certification in Spain Seeing AI Clearly: Building Visibility Across Modern AI Applications The Agile FedRAMP Playbook, Part 3: Preventative Risk Management by building Secure by Design Wiz Leads the 2026 Latio Application Security Report with awards in 4 categories Building an Agentic Cloud Security Ecosystem: A Reference Architecture with Wiz MCP and Infosys Cyber Next The Agile FedRAMP Playbook, Part 2: Proactive Risk Management with Continuous Monitoring Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows Would You Click ‘Accept’? Automatically detecting malicious Azure OAuth applications using LLMs Wiz Named a Leader in The Forrester Wave™: Cloud Native Application Protection Solutions, Q1 2026 From Detection to Remediation: It’s Time to Rethink AppSec Around Exploitability and Root Cause Fixes The Agile FedRAMP Playbook, Part 1: Why Risk is Your Best Starting Point Introducing AI Cyber Model Arena: A Real-World Benchmark for AI Agents in Cybersecurity Wiz + Spotify Backstage: Security at the Developer’s Desk Building AI Security Together: New Ways to Partner with Wiz for AI Security in 2026 Hacking Moltbook: The AI Social Network Any Human Can Control The Year in Wiz Research: 2025 Most Read Blogs WizExtend is Here: AI and Cloud Security Insights in Your Daily Workflow From Detection to Remediation: Wiz in Your JetBrains IDE Agentic Browser Security: 2025 Year-End Review CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild A 90-Day Action Plan to Turn Resolutions into Results with Wiz Introducing the Wiz Partner Alliance: A New Chapter for Partner Success Preparing for Post-Quantum Cryptography Wiz Recognized as a 2025 Customers’ Choice in the Gartner® Peer Insights™ Voice of the Customer for CNAPP Expanding the Zero Critical Club to set a new standard for AppSec and SecOps teams Snipping the Long Tail of Shai-Hulud 2.0 Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know The Kenna Transition: Your Strategic Shift to Exposure Management From MCP to Vibe Coding: Full Endpoint Visibility in Wiz AI Security Bringing Oracle Cloud Identity to Wiz Zero‑Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025, with a Record High of CVEs in Critical Cloud Infra Gogs 0-Day Exploited in the Wild Code to Cloud Attacks: From Github PAT to Cloud Control Plane Top AWS re:Invent Announcements for Security Teams in 2025 React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182 React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability Wiz Product Announcements at re:Invent 2025: Expanding Visibility from Code to Cloud Introducing Wiz SAST: Where Code Risk Meets Cloud Context Wiz Becomes Fastest Security ISV to Reach $1 Billion in AWS Marketplace Lifetime Sales It's Here! Wiz Exposure Management is Now GA Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impact Service Catalog is Here: Expand Risk Visibility for Your Service and Its Dependencies, Simplify Issue Ownership WizOS: Powering Secured Image Adoption with AI 3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs Mastering Software Governance with Hosted Technologies Inventory Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets Get Certified on Wiz Defend for Threat Detection and Response Blueprint for Security: A Guide to Code, Governance, and Response Frameworks Google Unified Security Recommended Program Names Wiz Among First 3 Strategic Partners Introducing Posture Issues: Transform Security Findings into Actionable Outcomes Empower and Accelerate Your SOC with the Blue Agent Exposure Report: 65% of Leading AI Companies Found with Verified Secret Leaks Wizdom 2025 Product Announcements: Extending the Cloud Operating Model When AI Becomes the Heart of Security: Powering a Future You Can Trust AI-Powered Wiz: From Agents to Everyday Intelligence Defend Agentless Workload Detection: Bringing Visibility to Blind Spots in Threat Detection Securing AI Agents with Wiz AI-SPM Introducing Wiz ASM: Context-Driven Attack Surface Management Securing Critical Infrastructure in the Cloud Era: A Policy and Technology Blueprint How CISOs Should Plan Security Budgets for 2026 Beyond the Checkbox: How Wiz Transforms SOC 2 into a Security Powerhouse Bringing Visibility to Kubernetes: Unified Inventory and Network Insight The Foundation Modern AppSec Is Still Missing: Code to Cloud, Rebuilt the Right Way Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces Introducing HoneyBee: How We Automate Honeypot Deployment for Threat Research RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS score Defending against database ransomware attacks AI Security 101: Mapping the AI Attack Surface Introducing zeroday.cloud: First-of-its-kind cloud and AI hacking competition Unifying Cloud Risk and Network Defense: Wiz and Check Point The emerging use of malware invoking AI Wiz achieves FedRAMP High authorization Wiz + HCP Terraform: Close the IaC-to-Cloud Infrastructure Security Gap IMDS Abused: Hunting Rare Behaviors to Uncover Exploits Beyond CVEs: The Exploitation of Everyday Misconfigurations Wiz Research Discovers One in Five Organizations Exposed to Systemic Risks in Vibe-Coded Applications - Here's How to Secure Them Introducing Wiz Incident Response: Your Expert Partner for Cloud Security Incidents Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malware DORA Compliance in the Cloud Era: Insights from Deloitte and Wiz How Wiz Customers like Brex and FICO See AI Changing Security Wiz Recognized as a Leader in the 2025 IDC MarketScape for ASPM
Introducing Shadow Data Discovery in Wiz | Wiz Blog
https://www.wiz.io/authors/snegha · 2026-04-14 · via Wiz Blog | RSS feed

AI hasn’t just changed how we build — it’s changed how much data we keep.

Across cloud environments, data is constantly created, duplicated, versioned, and retained. Storage scales easily, but ownership doesn’t. Over time, what accumulates isn’t just sensitive data that needs protection — it’s data that no longer serves a purpose.

Stale objects, duplicated files, over-retained versions. Shadow data. And while it may not always be sensitive, it still matters — because every unnecessary object increases both cost and your exposure surface.

Today, we’re introducing Shadow Data Detection in Wiz — a new capability that helps organizations identify and eliminate inefficiently managed data across their cloud environments, reducing both storage spend and unnecessary risk.

Introducing Shadow Data Detection

Understanding sensitive data remains the foundation of any strong data security program. Organizations need to know what data matters, where it lives, and who can access it.

Shadow data builds on that foundation.

Even with strong visibility into sensitive data, a large portion of the data footprint is often inefficiently managed — duplicated, stale, or simply unnecessary. And whether or not that data is sensitive, it still contributes to both cloud cost and attack surface.

With Shadow Data Detection, Wiz extends DSPM beyond identifying what data is sensitive to also understanding what data is inefficient, unused, or over-retained — so teams can take action.

Across early environments, we’ve already identified over 1 exabyte of data in cloud storage buckets across customers, with a significant portion classified as redundant or stale — translating directly into meaningful cost savings and a reduced exposure footprint. In Wiz’s own environment, this surfaced TBs of redundant data across storage buckets, reinforcing the opportunity to reduce both spend and unnecessary exposure.

The result is clear visibility into what to keep, what to optimize, and what to remove — with measurable impact on both cost and risk.

What Shadow Data Detection Looks Like in Practice

Shadow Data Detection works as part of the Wiz platform, using the same connectivity already in place across your cloud environments.

Wiz analyzes inventory reports generated directly by cloud providers to evaluate how data is stored and managed, without impacting performance.

From there, it identifies patterns like duplicated objects, excessive versioning, and stale data, surfacing them as Data Findings with clear, actionable context — using both built-in detection logic and the ability for teams to define custom rules based on their own data management policies.

These insights are brought together in a dedicated Shadow Data dashboard, providing a centralized view of inefficient data across your environment — including storage impact, potential cost savings, and areas of unnecessary exposure.

Centralized Shadow Data dashboard showing total savings potential, top findings, and overall data breakdown across the environment

From a high-level view, teams can quickly identify where the biggest opportunities exist and which environments or resources are driving the most inefficiency.

Visualizing shadow data distribution across datastores to quickly identify high-impact areas

Findings are organized and prioritized based on impact, giving teams a clear view into the most critical inefficiencies across their environment.

Shadow Data findings and rules, including built-in and custom detections across data sources

Teams can then drill into specific findings to understand exactly what is driving inefficiency and what action should be taken.

Detailed view of a finding with evidence, affected objects, and estimated cost impact to guide remediation

This turns data sprawl into something teams can measure, prioritize, and fix — where reducing data directly reduces both cost and exposure.

Turning Insight Into Action Across Teams

Shadow data isn’t owned by a single team, which is exactly why it becomes a problem.

Security teams want to reduce unnecessary exposure. Platform teams want to optimize efficiency and cost. Data teams want stronger governance and lifecycle control.

Shadow Data Detection brings these together with a shared, consistent view, so teams can align on where inefficiencies exist, what to prioritize, and how to take action.

Because this is part of the Wiz platform, these insights connect directly to broader context — including access, configuration, and risk — so teams understand not just where data exists, but how it contributes to real exposure.

Built on the Wiz Data and AI Security Platform

Shadow Data Detection builds on Wiz’s DSPM foundation, combining inventory-based analysis with data classification and platform-wide context.

This allows organizations to understand sensitive data and unnecessary data side by side, connect findings to real risk across the environment, and take action without introducing new tools or workflows.

It’s not just about reducing what you store — it’s about reducing what you have to secure.

Looking Ahead

Data growth isn’t slowing down, especially as cloud and AI accelerate how data is created and used. The challenge isn’t just visibility. It’s knowing what should stay, what should go, and what actually matters — for both cost and security.

Shadow Data Detection helps teams take that next step, turning excess data into an opportunity to reduce spend, minimize exposure, and operate with greater clarity.

And as Wiz continues to expand its data security capabilities, this is just the beginning.