#wiz-research on Hacker News

2 stories tagged wiz-research, newest first.

Screenshot of wiz.io: PHP2Shell: AI uncovers critical RCE in PHP

PHP2Shell: AI uncovers critical RCE in PHP (wiz.io)

398 points by danlark1 5 days ago | 184 comments

Wiz Research blog post detailing PHP2Shell, critical memory-safety and pre-auth RCE vulnerabilities in the core PHP engine found with help of frontier AI models.

php remote-code-execution php2shell wiz-research

Screenshot of wiz.io: AAD misconfiguration led to Bing.com results manipulation, account takeover

AAD misconfiguration led to Bing.com results manipulation, account takeover (wiz.io)

358 points by alosch7 3 years ago | 96 comments

Wiz Research blog post explaining how a common Azure Active Directory misconfiguration exposed Microsoft apps, enabling Bing.com result manipulation and account takeover.

azure-active-directory bing microsoft account-takeover

#wiz-research on Hacker News

PHP2Shell: AI uncovers critical RCE in PHP(wiz.io)

AAD misconfiguration led to Bing.com results manipulation, account takeover(wiz.io)

PHP2Shell: AI uncovers critical RCE in PHP (wiz.io)

AAD misconfiguration led to Bing.com results manipulation, account takeover (wiz.io)