Latest news with #AWSInspector
Tom's Guide
18-06-2025
- Tom's Guide
Wyze security cameras are (finally) getting a lot more secure - here's how
Wyze's devices have long been on our lists of the best home security cameras and best video doorbells, as they deliver a pretty good experience for a very low price. However, one area where they've generally been lacking in comparison to the competitors has been, ironically, security. As recently as last year, the company suffered a security breach that allowed 13,000 users to see footage from other people's cameras. Three years ago, Bitdefender discovered another breach that proved unfixable for first-generation Wyze Cams. Those screwups could hopefully be a thing of the past, as the company today announced a significant overhaul of its security procedures and protocols aimed at preventing these issues from arising ever again. Here's a rundown of what the company is doing. Mandatory 2FA: By default, all Wyze accounts will now be required to use two-factor authentication to prevent hackers from accessing a user's account without their knowledge. VerifiedView: Now, when you set up a Wyze camera, VerifiedView will embed your user ID (scrambled, of course) onto the camera itself. From then on, any video, photo, or livestream from that camera will contain your scrambled userID in the metadata. Before you (or anyone) can then access those recordings, VerifiedView will cross-check the userID on the video with that of your account. This should prevent others from seeing your videos, even if there's a failure like the one that occurred last year. Stronger logins: Wyze implemented OAuth, so you can now use trusted identity providers like Google, Apple, Facebook, or Amazon to log into your account. It also has enabled reCaptcha on Login Endpoints, Mobile Trust Device Security, Device Fingerprint Blocking, and Login Abuse Detection (User/Device/Location/IP). Behind the scenes, Wyze said it's also instituting a bug bounty program, investing more with AWS security tools (including Lacework, AWS Security Hub, AWS Inspector, AWS GuardDuty, and Amazon Q CLI), and working with NCC Group, Bitdefender, Google MASA, ioXT and ReFirm Labs to conduct penetration testing. Get instant access to breaking news, the hottest reviews, great deals and helpful tips. Outlook As someone who likes Wyze's devices but is leery of their privacy issues, these are all welcome changes indeed. Considering companies like Ring instituted mandatory 2FA five years ago, it's surprising that it's taken Wyze so long to follow suit. Whenever you're in the market for a security camera or video doorbell, it's important to take a good look at the company that makes the device. Otherwise, you might never know who's watching you.
Business Wire
21-05-2025
- Business
- Business Wire
Orca Integrates with AWS Security Hub to Deliver Unmatched Cloud Risk Visibility
PORTLAND, Ore.--(BUSINESS WIRE)-- Orca Security, the pioneer in agentless cloud security, today announced a new integration with AWS Security Hub, delivering advanced cloud security telemetry and context-rich risk insights directly into AWS's centralized security posture management solution. With this integration, security teams can now access Orca's comprehensive cloud risk intelligence within AWS Security Hub, gaining a complete view of risks across all AWS accounts, workloads, APIs, storage buckets, and databases. Organizations are empowered to improve risk prioritization, accelerate investigations, and streamline remediation by understanding which threats in their cloud estate matter most. 'Cloud security teams are challenged to identify risks and prioritize alerts, while requiring the context to act fast to remediate issues,' said Raf Chiodo, Chief Revenue Officer at Orca Security. 'With Orca's rich telemetry now flowing into AWS Security Hub, our customers gain instant clarity to pinpoint the threats that truly endanger their business and take decisive action—without the noise. We are proud to work closely with AWS to make cloud security easy and drive more efficiencies for our mutual customers.' AWS Security Hub serves as the central system for monitoring the security and compliance posture of AWS environments. It aggregates findings from AWS services such as Amazon GuardDuty, AWS Inspector, and AWS Config—as well as integrated third-party solutions like Orca—into a single, unified dashboard to provide continuous monitoring and centralized visibility. Powered by Orca's patented agentless SideScanning technology, the integration prioritizes risks including vulnerabilities, malware, misconfigurations, and lateral movement—across cloud infrastructure, workloads, applications, data, APIs, identities, and more. AWS users benefit from automated actions and rules pushed directly from the Orca Platform to Security Hub, ensuring security teams have immediate, actionable insights in one place. The integration is the latest in a series of collaborations between Orca and AWS, including support for Amazon Bedrock, Amazon GuardDuty and Amazon Security Lake. Named winner of the 2022 Global AWS Security Partner Award, Orca continues to expand its capabilities to help organizations secure their AWS cloud estates end-to-end. Orca supports over 100 AWS services and is available in AWS Marketplace. About Orca Security Orca enables organizations to make cloud security a strategic advantage. With the most comprehensive coverage and visibility across multi-cloud environments, the agentless-first Orca Platform unites teams to eliminate complexities, vulnerabilities and risks. Backed by Temasek, CapitalG, ICONIQ Capital, Redpoint Ventures and others, Orca is trusted by hundreds of organizations, including SAP, Gannett, Autodesk, Unity, Lemonade and Digital Turbine. Connect your first account in minutes: or book a personalized demo.
