1
Data accidentally exposed by Microsoft AI researchers
Wiz Research found a data exposure incident on Microsoft’s AI GitHub repository, including over 30,000 internal Microsoft Teams messages – all caused by one misconfigured SAS token
Wiz Blog
Wiz connects code, cloud, and runtime into one agentic cybersecurity platform. Prevent risk, detect threats, and start secure – across every cloud and AI layer.
- Popular posts
- 18
- Total points
- 5,795
- HN comments
- 2,347
- Rank
- #186 company
Visit wiz.io → On Hacker News Sep 2021 – Oct 2026
Security & Privacy 17AI & Machine Learning 5Infrastructure & DevOps 2Web & Frontend 1Databases & Data 1Tech Industry & Business 1
2
Exposed DeepSeek database leaking sensitive information, including chat history
A publicly accessible database belonging to DeepSeek allowed full control over database operations, including the ability to access internal data. The exposure includes over a million lines of log streams with highly sensitive information.
3
PHP2Shell: AI uncovers critical RCE in PHP
Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.
4
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown
A CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.
5
AI-Generated GitHub Copilot “Autofix” Allowed Compromise of Snowflake's Jira
Wiz Red Agent finds its way into Snowflake's internal Jira through a flaw in a GitHub Copilot–Assisted PR.
6
Hacking Moltbook
Learn how a misconfigured Supabase database at Moltbook exposed 1.5M API keys, private messages, and user emails, enabling full AI agent takeover.
7
AAD misconfiguration led to Bing.com results manipulation, account takeover
How Wiz Research found a common misconfiguration in Azure Active Directory that compromised multiple Microsoft applications, including a Bing management portal
8
Google closes deal to acquire Wiz
Today, as we officially begin our journey as a Google company, that belief feels real in a much deeper way.
9
"Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
Wiz Research recently discovered a series of alarming vulnerabilities that highlight the supply chain risk of open source code, particularly for customers of cloud computing services.
10
Compromised Microsoft key: More impactful than we thought
Our investigation of the security incident disclosed by Microsoft and CISA and attributed to Chinese threat actor Storm-0558, found that this incident seems to have a broader scope than originally assumed. Organizations using Microsoft and Azure services should take steps to assess potential impact.
11
SAPwned: SAP AI vulnerabilities expose customers' cloud environments and privat
Wiz Research uncovers vulnerabilities in SAP AI Core, allowing malicious actors to take over the service and access customer data.
12
How to harden GitHub Actions
Build resilient GitHub Actions workflows with insights from real attacks, missteps to avoid, and security tips GitHub’s docs don’t fully cover.
13
PHP2Shell: Exploitation attempts and remediation trends
Wiz research has been monitoring PHP2Shell exploitation attempts, but none have succeeded so far. We examine the techniques used, what prevented the attacks from completing and how observed exposure has changed since disclosure.
14
Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console
Wiz Research discovered CodeBreach, a critical vulnerability that risked the AWS Console supply chain. Learn how to secure your AWS CodeBuild pipelines.
15
RediShell: Critical remote code execution vulnerability in Redis
A 13‑year Redis flaw (CVE‑2025‑49844) allows attackers to escape Lua sandbox and run code on hosts. See Wiz Research’s analysis and mitigations.
16
Critical RCE Vulnerabilities in React and Next.js
React2Shell (CVE-2025-55182) is a critical RCE vulnerability in React Server Components. Learn which versions are impacted and how to mitigate.
17
Critical vulnerability in AI coding platform Base44 allowing unauthorized access
New discovery underscores security implications of AI-powered development and the rise of Vibe Coding Platforms.
18
ChaosDB Explained: Azure's Cosmos DB Vulnerability Walkthrough
This is the full story of the Azure ChaosDB Vulnerability that was discovered and disclosed by the Wiz Research Team, where we were able to gain complete unrestricted access to the databases of several thousand Microsoft Azure customers.