Head of Vulnerability Research @wiz_io | @Microsoft MVR (2021-2025) | Pwn2Own 2025 | @Forbes 30 Under 30 | Ask me anything about https://nitter.cf/t.co/QfzcO03PpS
Joined March 2010
- Tweets278
- Following981
- Followers5.1K
- Likes3.6K
Pinned Tweet
Last year, we saw 11 critical zero-days in just 2 days at our cloud hacking competition.
This year, AI is raising the bar.
ZeroDay.cloud/2026 is back with harder targets and bigger bounties.
I have a feeling this one’s going to be wild 👀
Think you (& your AI) got what it takes to find critical vulns?
We @wiz_io + @AWScloud + @MSFTsecurity + @GoogleCloud are coming back with ZeroDay.cloud 2026 🚀
Find critical vulns, get paid from our $6.5M prize pool 👉 zeroday.cloud/2026
Nir Ohfeld retweeted
AI tools helped find one of the most severe online bugs ever #php2shell
In our latest episode of Crying Out Cloud, Amitai Cohen sits down with @sagitz_ (Wiz Research) and Thai Duong (@calif_io) to unpack the massive PHP2Shell vulnerability
wiz.io/crying-out-cloud/brea…
Top-tier researcher (@sagitz_) + SOTA AI vuln research harness (ATLAS) = Breaking the internet 🤯
Nir Ohfeld retweeted
🚨 BREAKING: @Wiz_io Research uncovers #PHP2SHELL, a decade-old PHP Core vulnerability reaching CVSS 9.2 severity impacting 70% of the Internet.
Nir Ohfeld retweeted
$300,000 for the hacker who can crack NGINX on stage 💸💸💸
Can you uncover what others missed in one of the web's most critical open-source projects 🧠?
🔗 Explore official targets, scope, & rules ↴
zeroday.cloud/2026-competiti…
SEE YOU THERE!
Nir Ohfeld retweeted
Sandboxing is now more important than ever.
Here's a guest to host sandbox escape for gVisor release-20260928
This was our planned submission for Wiz zeroday-cloud-2026. Releasing it today because it's now patched in release-20261005
enjoy :)
Nir Ohfeld retweeted
Haven't touched Android research in 5 years, but Android and I just became friends again 🤝. Reported a cool 3-vulnerability chain going from untrusted -> root.
AI had a major impact on this chain, more info about that soon.
Nir Ohfeld retweeted
Sandboxing is more important than ever. Exactly why we put a $200k bounty on a Firecracker/gVisor escape on ZeroDay.Cloud/2026
Nir Ohfeld retweeted
zeroday.cloud/2026-competiti…
Come out and play!
Nir Ohfeld retweeted
🚨 The stakes just got higher. ZERODAY.CLOUD 2026 is coming soon! 🚨
We are back, and this time we are bringing a jaw-dropping $6.5 MILLION prize pool to the table. 💰
Join forces with the brightest minds in infosec to hunt down vulnerabilities in the critical open-source software powering the modern cloud.
This isn't just a competition; it's a mission to secure the future of cloud computing.
Are you ready to claim your bounty?
Submit your exploit ➡️ zeroday.cloud
Nir Ohfeld retweeted
@Wiz Research presents ZERODAY.CLOUD 2026! 🕵️♀️
Our open-source cloud hacking competition is back at @BlackHatEvents Europe with @awscloud, @MsftSecIntel & @googlecloud .
Hunt vulns for a $6.5M prize pool! 💰🏆
Register now:
zeroday.cloud/2026-competiti…
The most severe cloud vulnerability I’ve ever seen.
This research was assisted by an early version of Atlas, our AI vulnerability researcher. Expect more from Atlas soon 😉
We (+@liormama) gained full access to EVERY database on Azure's flagship DB service 🤯
And all we needed was a single key 🔑
This is the story of #CosmosEscape 🧵👇
Atlas, our AI vulnerability research system, is now ranked #1 on CyberGym. We've used it to discover and responsibly disclose more than 200 confirmed vulnerabilities across gVisor, Linux kernel, containerd and many other projects.
Here’s how Atlas works behind the scenes 🧵
If you maintain an open-source project and would like our help finding and validating security issues, reach out to us at [email protected]
For a deeper look at Atlas and how it works, read our blog post👇
wiz.io/blog/atlas-ai-vulnera…
