Cloud Security Researcher at @wiz_io • Microsoft Most Valuable Researcher 21/22/23 • Black Hat Speaker • Ask me anything about ZeroDay.cloud

Pinned Tweet
$100,000 in bounty 🤯 Thanks @GitHubSecurity
289
315
10,921
840,567
sagitz retweeted
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
112
1,558
6,378
1,309,140
sagitz retweeted
NASA had a flaw that could have allowed threat actors unauthorized access to their Mission AI Hub - a portal that holds plain-text chat history of engineering development, alongside a proxy to specialized government models without restrictions. Glad we could help securing it!
3
3
115
5,741
sagitz retweeted
$300,000 for the hacker who can crack NGINX on stage 💸💸💸 Can you uncover what others missed in one of the web's most critical open-source projects 🧠? 🔗 Explore official targets, scope, & rules ↴ zeroday.cloud/2026-competiti… SEE YOU THERE!
1
3
22
2,331
Sandboxing is more important than ever. Exactly why we put a $200k bounty on a Firecracker/gVisor escape on ZeroDay.Cloud/2026
We’ve confirmed a KVM 0day through our Vercel Sandbox bounty program. Affecting the industry’s gold standard solution for Linux virtualization. 2026 is wild! Thankful to Paulos and other researchers helping us make the most secure sandbox for agents. Full writeup coming.
9
27
374
37,497
sagitz retweeted
🚨 The stakes just got higher. ZERODAY.CLOUD 2026 is coming soon! 🚨 We are back, and this time we are bringing a jaw-dropping $6.5 MILLION prize pool to the table. 💰 Join forces with the brightest minds in infosec to hunt down vulnerabilities in the critical open-source software powering the modern cloud. This isn't just a competition; it's a mission to secure the future of cloud computing. Are you ready to claim your bounty? Submit your exploit ➡️ zeroday.cloud
1
7
37
2,773
sagitz retweeted
Replying to @wiz
@Wiz Research presents ZERODAY.CLOUD 2026! 🕵️‍♀️ Our open-source cloud hacking competition is back at @BlackHatEvents Europe with @awscloud, @MsftSecIntel & @googlecloud . Hunt vulns for a $6.5M prize pool! 💰🏆 Register now: zeroday.cloud/2026-competiti…
7
7
57
16,575
sagitz retweeted
Last year, we saw 11 critical zero-days in just 2 days at our cloud hacking competition. This year, AI is raising the bar. ZeroDay.cloud/2026 is back with harder targets and bigger bounties. I have a feeling this one’s going to be wild 👀
Think you (& your AI) got what it takes to find critical vulns? We @wiz_io + @AWScloud + @MSFTsecurity + @GoogleCloud are coming back with ZeroDay.cloud 2026 🚀 Find critical vulns, get paid from our $6.5M prize pool 👉 zeroday.cloud/2026
4
62
11,387
sagitz retweeted
Think you (& your AI) got what it takes to find critical vulns? We @wiz_io + @AWScloud + @MSFTsecurity + @GoogleCloud are coming back with ZeroDay.cloud 2026 🚀 Find critical vulns, get paid from our $6.5M prize pool 👉 zeroday.cloud/2026
7
28
7,092
This is probably the most critical vulnerability I have ever found: 5c0d8c7c8a44b4b0164514c5058db149d908de46a1c041498f812ec8a0919fda
16
8
224
50,027
Incredible find. The impact is as severe as it gets
We (+@liormama) gained full access to EVERY database on Azure's flagship DB service 🤯 And all we needed was a single key 🔑 This is the story of #CosmosEscape 🧵👇
1
31
5,574
sagitz retweeted
Atlas, our AI vulnerability research system, is now ranked #1 on CyberGym. We've used it to discover and responsibly disclose more than 200 confirmed vulnerabilities across gVisor, Linux kernel, containerd and many other projects. Here’s how Atlas works behind the scenes 🧵
15
38
412
34,327
sagitz retweeted
Congrats @sagitz_ on an incredible find 🎉
$100,000 in bounty 🤯 Thanks @GitHubSecurity
12
26
906
68,567
sagitz retweeted
Cyber people, the most important reminder of the month: BlueHatIL is happening on June 23–24 - and even if you registered for the original dates, you’ll still need to register again for the updated event. Yes, again. We know❤️ Register here: microsoftrnd.co.il/bluehatil…
3
19
4,506
sagitz retweeted
The magical news you’ve all been waiting for: registration for the new BlueHat IL 2026 date is officially open! Spots are limited - go grab yours! Register here: aka.ms/BlueHatILRegistration Full Agenda: microsoftrnd.co.il/bluehatil…
3
9
3,488
sagitz retweeted
Once @wiz_io disclosed, we validated the finding, deployed a fix to github(.)com, and confirmed there was no exploitation in less than two hours. Read more about what happened, how we responded, and what we are doing to prevent similar issues in the future. ⬇️ github.blog/security/securin…
13
82
586
55,273
We landed on a shared node serving millions of repositories belonging to other users and orgs - all of which were accessible to our user🔓 We confirmed cross-tenant access by reading our own private repo from a different user
3
9
383
87,359
We disclosed to @GitHub, who deployed a fix on GitHub.com the same day (!) and released patches for all supported GHES versions 🛡️ ⚠️ GHES customers: upgrade to 3.19.3+ immediately. Read the full technical breakdown here → wiz.io/blog/github-rce-vulne…
15
49
1,003
102,515