Google Cloud Adds Wiz Runtime Sensor as Managed GKE Add-On in Preview

·2 views

Google Cloud announced on 17 October 2026 that the Wiz Runtime Sensor, a kernel-level monitoring component, is now available as a managed add-on for Google Kubernetes Engine. The preview covers both Standard and Autopilot clusters, with GKE handling installation, credential injection from Secret Manager, and updates independent of the cluster version cycle. Organizations can use a custom policy to block creation of new clusters that lack the add-on, shifting enforcement to platform teams. The sensor monitors system calls, processes, network connections and file access on each node under a fixed memory limit, sending telemetry to the Wiz Security Graph. Operators are advised to first verify the preview status, the egress proxy path, and differences between a GKE-managed and a Helm-managed installation.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Beginner Team Documents First Hackathon and Open-Source Cybersecurity Project

Gurjot, a first-year student at Alta School of Technology, shares his team's first hackathon experience with the team KOS. The team is building the Reachable Vulnerability Analyzer, a cybersecurity tool that checks whether vulnerable functions in third-party dependencies can actually be reached by an application's code. The article notes that current security scanners often flag vulnerabilities that are never used, creating unnecessary alerts for developers. The team described learning new concepts such as static analysis, call graphs, and dependency analysis while setting up the Python environment and exploring the existing GitHub repository. The piece is written as a reflection on moving beyond tutorials into real-world development.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer fixes game UI that spoiled a tribulation climax before the outcome was shown

A developer working on the game Myriad Immortal Sect found that its interface revealed the result of a heavenly tribulation, the game's climax, before the storm animation played out. Toasts, achievements, the realm name, new tabs and other readouts all updated the instant the button was pressed. The fix holds all displays at their prior state until the reveal finishes, while deferring rather than discarding events such as random destiny rolls. The developer also found that many quest directions named places missing from the in-game map, and changed them to reference only labelled locations or a Wayfinding Lamp.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Refresh Token Rotation Without Disrupting Legitimate User Sessions

A refresh token's long-lived nature makes it a target, since an attacker holding a copy can keep minting access tokens until the grant expires or is revoked. OAuth 2.0 Security Best Current Practice (RFC 9700) recommends sender-constrained refresh tokens or rotation for public clients. Implementing rotation is difficult in production because retries, multiple tabs, and concurrent background refreshes can look like replay attacks and revoke real users. The guidance calls for durable server-side state tied to each token family, atomic consumption of the active token during refresh, and family-wide revocation when a consumed token reappears. A narrowly scoped idempotency allowance can handle lost responses without weakening replay detection.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Defense Contractors Keep Earning CMMC Certifications Despite Phase 2 Pause

The Cyber AB held an October town hall where it reported that Cybersecurity Maturity Model Certification (CMMC) certifications continue to grow. The news comes even though the rollout of CMMC Phase 2 may be paused. Defense contractors are still pursuing and obtaining certification under the program. The source is a brief DEV Community post that links to a cybersecurity consultancy's contact page and tags the program's NIST 800-171 framework. The item offers little detail beyond these points, so specifics such as certification counts or timelines are not provided.

0 comments Read more at DEV Community