Cloud security firms Wiz and AWS highlight identity and credential risks

Wiz has announced new support for Okta, allowing customers to secure cloud identities managed through the platform. The integration provides visibility into Okta users, API tokens, cloud permissions, and misconfigurations to mitigate risks such as account takeovers and lateral movement within cloud environments.

Separately, Amazon Web Services (AWS) has released guidance detailing how attackers exploit stolen cloud credentials to execute full-scale breaches. AWS outlines a five-phase attack path: initial access, discovery, privilege escalation, lateral movement, and exfiltration. The report emphasizes that while individual actions may appear legitimate, correlating signals from services like CloudTrail, VPC Flow Logs, and Resolver logs can help defenders identify coordinated intrusions and unauthorized data transfers.