PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed)

wiz.io | blog | #ai-security | #attack-surface | #data-exposure | #ai-agent | #wiz | #red-agent
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A public web page was exposing a Fortune 500 firm's sensitive data. Wiz Red Agent was the only tool that caught and explained it in minutes.
Published
Collected

Related coverage

blog · wiz.io
The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API
Part 2 of the Red Agent POV series: an autonomous BOLA exploit against an airline's GraphQL booking API used sequential IDs to read two years of passenger records and even modify live bookings.
blog · wiz.io
“Black October” for AI Developer Platforms
A series of agentic attacks on AI Developer Platforms has been leading to LLMJacking at scale.
blog · wiz.io
Key Takeaways: AI Threat Readiness Survey Report 2026
Read the AI Threat Readiness Report 2026. Benchmark findings across 100 IT leaders on autonomous agent sprawl, identity risks, and modern cloud governance.
blog · wiz.io
The Rise of Agentic Attacks: What They Look Like, and Where They're Headed
AI agents are changing how attackers operate. Explore real-world cases of agentic attacks, learn how to identify their fingerprints, and discover what they mean for the future of cybersecurity.
blog · wiz.io
PHP2Shell: Exploitation Attempts and Remediation Trends
Wiz research has been monitoring PHP2Shell exploitation attempts, but none have succeeded so far. We examine the techniques used, what prevented the attacks from completing and how observed exposure has changed since disclosure.
blog · wiz.io
The Pwn Request Reckoning: What Still Works Against GitHub Actions
GitHub's 2026 changes close PWN Request flaws by default. Learn what’s patched, residual attack vectors, and how to audit workflows before policy enforcement.
Back