PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Atlas: Wiz's autonomous AI Agent for vulnerability research, ranked #1 on CyberGym

wiz.io | blog | #ai-security | #vulnerability-research | #open-source | #exploit-validation | #cybergym | #wiz | #atlas
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Wiz Atlas, an autonomous vulnerability-research agent, ranks #1 on CyberGym (90.9%) and found 200+ unknown flaws in grpc, dnsmasq, Kubernetes, gVisor and the Linux kernel, each exploit-validated.
Published
Collected

Related coverage

research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
blog · wiz.io
“Black October” for AI Developer Platforms
A series of agentic attacks on AI Developer Platforms has been leading to LLMJacking at scale.
blog · wiz.io
Key Takeaways: AI Threat Readiness Survey Report 2026
Read the AI Threat Readiness Report 2026. Benchmark findings across 100 IT leaders on autonomous agent sprawl, identity risks, and modern cloud governance.
blog · wiz.io
The Rise of Agentic Attacks: What They Look Like, and Where They're Headed
AI agents are changing how attackers operate. Explore real-world cases of agentic attacks, learn how to identify their fingerprints, and discover what they mean for the future of cybersecurity.
blog · wiz.io
PHP2Shell: Exploitation Attempts and Remediation Trends
Wiz research has been monitoring PHP2Shell exploitation attempts, but none have succeeded so far. We examine the techniques used, what prevented the attacks from completing and how observed exposure has changed since disclosure.
blog · wiz.io
The Pwn Request Reckoning: What Still Works Against GitHub Actions
GitHub's 2026 changes close PWN Request flaws by default. Learn what’s patched, residual attack vectors, and how to audit workflows before policy enforcement.
Back