Pinned Tweet
🚨 BREAKING: @Wiz_io Research uncovers #PHP2SHELL, a decade-old PHP Core vulnerability reaching CVSS 9.2 severity impacting 70% of the Internet.
🚨 Wiz research: AI agents don't just find vulnerabilities they write custom exploits, debug failures, and pivot at machine speed. Highly adaptive, yet exceptionally noisy.
Full research: wiz.io/blog/the-rise-of-agen…
Wiz research has been monitoring PHP2Shell exploitation attempts, but none have succeeded so far. We examine the techniques used, what prevented the attacks from completing and how observed exposure has changed since disclosure.
Wiz retweeted
🚨 850+ compromised GitHub accounts. 13,500+ malicious branches.
Researchers uncovered 'Gheist,' an ongoing campaign using stolen tokens to plant GitHub Actions workflows that dump private repo secrets into logs.
Attackers download the logs, then delete the runs.
Details: thehackernews.com/2026/10/gh…
#GitHub now restricts pull_request_target to curb Pwn Requests, yet risks like script injection, bot triggers, and legacy SHA bypasses still persist.
wiz.io/blog/github-actions-s…
An automated campaign is planting secret-dumping workflows in every repository that stolen GitHub tokens can reach. It uses no C2 server, is actively evolving, and has been significantly disrupted by recent GitHub security improvements.
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
A CTF STORY: Something is haunting the house >> And you need to get out. 👻
A crazy developer, a rogue agent ghost, and a detective.
Think you can make it out? 🎃
Check out our online version
wizhauntedhouse.com
You're not supposed to see this. 👀
But since you're here… welcome to the Rogue Agent House. 🏚️
Our first-ever IRL Halloween CTF is happening RIGHT NOW in NYC, and we're giving you an exclusive sneak peek at what's happening inside. 🎃
Check it out ⤵ If you dare.
🚨Wiz Research is tracking Storm-0940, an ARTEX-using actor, as it Expands its targeting of IT and Software Vendors. Learn how the AI agent attacks Okta, Entra, and Cognito, and what it left behind in the logs.
wiz.io/blog/artex-in-the-wil…
Wiz retweeted
Researchers at @wiz_io put Gemini 4 Argon to the test against complex cyber threats.
In real-world testing, it found more than two times more vulnerabilities than baseline models — catching a critical risk that previous frontier models missed.
See how they did it ↓
AI tools helped find one of the most severe online bugs ever #php2shell
In our latest episode of Crying Out Cloud, Amitai Cohen sits down with @sagitz_ (Wiz Research) and Thai Duong (@calif_io) to unpack the massive PHP2Shell vulnerability
wiz.io/crying-out-cloud/brea…
Wiz retweeted
Most severe vulnerability found using AI ever. Amazing work by @sagitz_ and the @wiz_io research team
Patch today
#php2shell
PHP2Shell marks an inflection point: AI changes the practical exploitability of longstanding vulnerabilities. Frontier models (Wiz Atlas, GPT-5.6-Sol, and Gemini 4 Argon) were used to hunt down and chain these 10-year-old flaws in under a week, with Gemini 4 making a particularly significant contribution.
Kudos to @GeminiApp, @php_net Core, @OpenAI, @calif_io, & partners for coordinated disclosure.
👇 Full breakdown & PoC: wiz.io/blog/php2shell-php-rc…
