sagitz

@sagitz_

Cloud Security Researcher at @wiz_io • Microsoft Most Valuable Researcher 21/22/23 • Black Hat Speaker • Ask me anything about ZeroDay.cloud

Pinned
sagitz
@sagitz_
Oct 21
Today we disclose PHP2Shell - remotely exploitable memory corruptions in PHP WordPress pre-auth RCE: ✅ Drupal pre-auth RCE: ✅ Joomla pre-auth RCE: ✅ Remote memory disclosure of any PHP application: ✅ Read more ⬇️🧵
66
sagitz
@sagitz_
Oct 4
Sandboxing is more important than ever. Exactly why we put a $200k bounty on a Firecracker/gVisor escape on ZeroDay.Cloud/2026
Guillermo Rauch
@rauchg
Oct 3
We’ve confirmed a KVM 0day through our Vercel Sandbox bounty program. Affecting the industry’s gold standard solution for Linux virtualization. 2026 is wild! Thankful to Paulos and other researchers helping us make the most secure sandbox for agents. Full writeup coming.
Quote
Paulos Yibelo
@PaulosYibelo
Oct 3
Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon
9
sagitz
@sagitz_
Aug 20
This is probably the most critical vulnerability I have ever found: 5c0d8c7c8a44b4b0164514c5058db149d908de46a1c041498f812ec8a0919fda
16
sagitz
@sagitz_
Jul 30
Incredible find. The impact is as severe as it gets
Yuval Avrahami
@yuvalavra
Jul 30
We (+@liormama) gained full access to EVERY database on Azure's flagship DB service 🤯 And all we needed was a single key 🔑 This is the story of #CosmosEscape 🧵👇
sagitz
@sagitz_
Jul 22
$100,000 in bounty 🤯 Thanks @GitHubSecurity
289