Wiz Research

Wiz Research is the threat research team at Wiz, a cloud security company, and it publishes findings on vulnerabilities and misconfigurations in widely used cloud and AI platforms. For enterprise AI governance teams, its disclosures often flag real exposure in tools that employees and developers adopt quickly, such as AI development platforms and model-hosting services. Tracking its reports helps risk and compliance leaders judge which vendors need urgent review and whether their own cloud environments share the same weaknesses.

1 item

ResearchGlobal2026-10-22

AI Cuts Complex PHP Exploits From Expert Work to Hours

Wiz Research, working with OpenAI and Calif, used frontier AI models to find and exploit critical memory-safety flaws in core PHP. The flaws are tracked as two CVEs with severity scores reaching 9.2. The vulnerabilities allow attackers to take over servers running WordPress, Drupal, and Joomla without any user interaction. The research shows AI has materially lowered the bar for exploiting complex, longstanding flaws that were previously considered difficult to weaponize.

Wiz Research OpenAI vulnerability management AI-assisted exploitation offensive AI patch management enterprise security PHP