@wiz_io

Secure everything you build and run

 Global 🌎
wiz.io
Joined June 2020
  • Tweets1.9K
  • Following468
  • Followers26K
822Media
Pinned Tweet
Wiz
@wiz_io21h
🚨 BREAKING: @Wiz_io Research uncovers #PHP2SHELL, a decade-old PHP Core vulnerability reaching CVSS 9.2 severity impacting 70% of the Internet.
28
118
25
408
65,882
php2shell.com

PHP2Shell — AI uncovers critical vulnerabilities in the backbone of the web

PHP2Shell is a family of critical vulnerabilities in core PHP that can allow unauthenticated attackers to execute code or disclose sensitive process memory.

php2shell.com
2
7
25
1,903
Wiz retweeted
Google
@Google20h
Researchers at @wiz_io put Gemini 4 Argon to the test against complex cyber threats. In real-world testing, it found more than two times more vulnerabilities than baseline models — catching a critical risk that previous frontier models missed. See how they did it ↓
72
65
17
605
187,994
AI tools helped find one of the most severe online bugs ever #php2shell In our latest episode of Crying Out Cloud, Amitai Cohen sits down with @sagitz_ (Wiz Research) and Thai Duong (@calif_io) to unpack the massive PHP2Shell vulnerability wiz.io/crying-out-cloud/brea…

Breaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz

AI agents weaponized a 20-year-old PHP bug into a critical RCE

wiz.io
6
12
46
7,294
Wiz retweeted
sagitz
@sagitz_21h
Today we disclose PHP2Shell - remotely exploitable memory corruptions in PHP WordPress pre-auth RCE: ✅ Drupal pre-auth RCE: ✅ Joomla pre-auth RCE: ✅ Remote memory disclosure of any PHP application: ✅ Read more ⬇️🧵
61
534
87
2,896
429,713
Most severe vulnerability found using AI ever. Amazing work by @sagitz_ and the @wiz_io research team Patch today #php2shell
sagitz
@sagitz_21h
Today we disclose PHP2Shell - remotely exploitable memory corruptions in PHP WordPress pre-auth RCE: ✅ Drupal pre-auth RCE: ✅ Joomla pre-auth RCE: ✅ Remote memory disclosure of any PHP application: ✅ Read more ⬇️🧵
1
1
28
6,060
PHP2Shell marks an inflection point: AI changes the practical exploitability of longstanding vulnerabilities. Frontier models (Wiz Atlas, GPT-5.6-Sol, and Gemini 4 Argon) were used to hunt down and chain these 10-year-old flaws in under a week, with Gemini 4 making a particularly significant contribution.
1
3
3
14
5,952
Kudos to @GeminiApp, @php_net Core, @OpenAI, @calif_io, & partners for coordinated disclosure. 👇 Full breakdown & PoC: wiz.io/blog/php2shell-php-rc…

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog

Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

wiz.io
34
3
70
14,773
Hackers are using AI to find bugs and write exploits faster than you can patch them. My friends at @wiz_io made a free playbook for keeping up. Grab it here ntck.co/WizAIPlaybook #ad
1
9
83
9,167
Gemini 4 Argon is transforming security research! 🌎 We've upgraded Scan for Good with @GoogleDeepMind by adding Argon’s reasoning to spot complex bugs & fix risks faster. Dozens of orgs have strengthened security for free. Watch @galnagli explain ⤵ wiz.io/scan-for-good
3
27
3,974
In our latest CIRT investigations, there wasn't even a human at the keyboard.

Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack

Article · @wiz_io
9
15
5
66
9,487
"They don't want another alert; they want context and remediation." See how @googlecloud and @wiz_io connect the dots across code, cloud, and runtime to fix risks before attackers find them 👇 📺 goo.gle/4yygdjq
3
4
699
Check out our NEW CTF wizhauntedhouse.com

PumpkinShell - The Rogue Agent House

A rogue AI agent took over a smart home. Follow the trail, find the clues, and unlock the door before it's too late. A Wiz Research Halloween CTF.

wizhauntedhouse.com
Vincent Grimm@V1ncentGr1mmOct 15
Was working on PumpkinShell and suddenly something went terribly wrong. I think the agent took over my smart house. I'm locked inside the house. 1% battery. Help!
2
5
1,836
🎃 A rogue AI agent locked @V1ncentGr1mm inside his smart home. 𝗬𝗼𝘂𝗿 𝗺𝗶𝘀𝘀𝗶𝗼𝗻? HELP HIM ESCAPE! Introducing The @Wiz_io Rogue Agent CTF 👻🏚️ Trace a supply-chain attack & crack the smart lock to hack your way out of the haunted house! wizhauntedhouse.com/
10
2
25
84,917
🚨 Wiz AI Cyber Arena upgraded! • Leader: Gemini 4 Argon (77.2% success) • Best budget: GPT-6 Luna (64.5% @ $0.05) • Added Codex & Antigravity harnesses Check out our Agentic Offensive AI insights: wiz.io/cyber-model-arena
18
8
52
4,065
Wiz retweeted
Nagli
@galnagliOct 13
Gemini 4 Argon has arrived! The era of super intelligence in cyber security has begun, excited to share more on how we use it to secure the world - and we are just getting started 🌎 youtu.be/ftkic7Tdpcg?si=3QxA… deepmind.google/blog/introdu…

Using Gemini 4 Argon to protect against Cyber attackers

In shadow A/B testing on real-world systems, Wiz security researche...

youtube.com
15
17
1
196
18,648
$300,000 for the hacker who can crack NGINX on stage 💸💸💸 Can you uncover what others missed in one of the web's most critical open-source projects 🧠? 🔗 Explore official targets, scope, & rules ↴ zeroday.cloud/2026-competiti… SEE YOU THERE!
1
3
1
23
2,555
Load more