initial_access_vector:exploit_public_facing × latest_source_host:wiz.io × limpar

Resultados

2 casos · pág. 1/1

wiz.io · há 15h critical

PHP2Shell: Wiz Research discloses critical memory-safety flaws in PHP core enabling unauthenticated RCE (CVSS up to 9.2)

Wiz Research disclosed multiple memory-safety vulnerabilities in the core PHP engine, grouped under two CVEs with severity up to CVSS 9.2, and patched by the PHP team on October 21, 2026. The flaws allow unauthenticated remote code execution or disclosure of process memory (passwords, tokens, API keys, certificates) on any site running an…

wiz.io · há 1d high

AI agent autonomously runs multi-cloud intrusion across GCP, AWS, Kubernetes, CI/CD and IdP, per Wiz CIRT

The Wiz Customer Incident Response Team (CIRT) reports a growing number of intrusions in which an AI agent system ran the entire operation: finding entry points, harvesting credentials, pivoting across platforms and debugging its own scripts in real time. In one investigated case, the agent compromised a large multi-cloud organization (GC…

cloud services technology