CloudSec Academy

Welcome to CloudSec Academy, your guide to navigating the alphabet soup of cloud security acronyms and industry jargon. Cut through the noise with clear, concise, and expertly crafted content covering fundamentals to best practices.

Best code analysis tools in 2025

Wiz Experts Team

This post will explore the top 10 code security platforms to see just how well they secure modern cloud-native applications.

What is a vulnerability scanning report?

Wiz Experts Team

A vulnerability scanning report is a document from a vulnerability scanner that lists discovered weaknesses, shows how severe they are, and explains how to fix them.

See Wiz in action

Wiz connects the dots across your cloud, from code to runtime.

For information about how Wiz handles your personal data, please see our Privacy Policy.

Wiz wand

What is business email compromise (BEC)?

Wiz Experts Team

Business email compromise is a targeted cyberattack where criminals impersonate someone you trust—like your CEO, a vendor, or a business partner—to trick you into sending money or revealing confidential information.

What is arbitrary code execution? ACE attacks explained

Wiz Experts Team

Arbitrary code execution is when an attacker tricks your system into running their malicious code without permission. Think of it like someone breaking into your house and using your computer to do whatever they want.

What are backdoor attacks in cloud environments?

Wiz Experts Team

A backdoor attack creates a hidden method for bypassing standard authentication or security controls in a computer system, application, or network. Think of it as a secret entrance that allows attackers to return to a compromised system whenever they want, without going through the front door.

What is runtime cloud security?

Wiz Experts Team

Successful security programs utilize runtime signal analysis with cloud context to eliminate unnecessary alerts and focus on exploitable threats—active malicious behaviors, suspicious identity patterns, and attack paths—not just static vulnerabilities.