Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console(wiz.io)

123 points by uvuv 9 months ago | 27 comments

RediShell: Critical remote code execution vulnerability in Redis(wiz.io)

111 points by mihau 1 year ago | 45 comments

Exposed DeepSeek database leaking sensitive information, including chat history(wiz.io)

608 points by talhof8 1 year ago | 423 comments

Wiz Research blog post reporting a publicly accessible DeepSeek database exposing over a million log lines, including chat history and other sensitive data.

PHP2Shell: AI uncovers critical RCE in PHP(wiz.io)

398 points by danlark1 5 days ago | 184 comments

Wiz Research blog post detailing PHP2Shell, critical memory-safety and pre-auth RCE vulnerabilities in the core PHP engine found with help of frontier AI models.

Critical vulnerability in AI coding platform Base44 allowing unauthorized access(wiz.io)

106 points by waldopat 1 year ago | 68 comments

AAD misconfiguration led to Bing.com results manipulation, account takeover(wiz.io)

358 points by alosch7 3 years ago | 96 comments

Wiz Research blog post explaining how a common Azure Active Directory misconfiguration exposed Microsoft apps, enabling Bing.com result manipulation and account takeover.