Increasing transparency in cloud security: Wiz is now a CVE Numbering Authority (CNA)

Wiz announces it is now an authorized CVE Numbering Authority and calls for industry-wide norms to disclose cloud service vulnerabilities through the CVE program. The post highlights recent momentum, including CSRB recommendations, CVE policy changes enabling CVEs for significant cloud issues, and Microsoft’s commitment to issue CVEs for critical cloud service flaws, citing prior research like ChaosDB to underscore the need for transparency and shared responsibility.