sagitz

Wiz

@sagitz_

Cloud Security Researcher at @wiz_io • Microsoft Most Valuable Researcher 21/22/23 • Black Hat Speaker • Ask me anything about ZeroDay.cloud

Joined March 2019

912 Following 14K Followers 325 Posts

Latest posts 5

Pinned post

sagitz @sagitz_ Oct 21

Today we disclose PHP2Shell - remotely exploitable memory corruptions in PHP

WordPress pre-auth RCE: ✅
Drupal pre-auth RCE: ✅
Joomla pre-auth RCE: ✅
Remote memory disclosure of any PHP application: ✅

Read more ⬇️🧵

sagitz @sagitz_ Oct 4

Sandboxing is more important than ever. Exactly why we put a $200k bounty on a Firecracker/gVisor escape on ZeroDay.Cloud/2026

www.zeroday.cloud 2026 Competition | ZeroDay.cloud Join ZeroDay.cloud 2026, the cloud hacking competition at Black Hat Europe. Find zero-days in core open-source software, demonstrate live in London, and compete for prizes from a $6.5M pool.

Guillermo Rauch Verified account @rauchg Oct 3

We’ve confirmed a KVM 0day through our Vercel Sandbox bounty program. Affecting the industry’s gold standard solution for Linux virtualization.

2026 is wild! Thankful to Paulos and other researchers helping us make the most secure sandbox for agents. Full writeup coming.
View quoted post on X

sagitz @sagitz_ Aug 20

This is probably the most critical vulnerability I have ever found:

5c0d8c7c8a44b4b0164514c5058db149d908de46a1c041498f812ec8a0919fda

sagitz @sagitz_ Jul 30

Incredible find. The impact is as severe as it gets

Yuval Avrahami Verified account @yuvalavra Jul 30

We (+@liormama) gained full access to EVERY database on Azure's flagship DB service 🤯

And all we needed was a single key 🔑

This is the story of #CosmosEscape 🧵👇

View quoted post on X

sagitz @sagitz_ Jul 22

$100,000 in bounty 🤯

Thanks @GitHubSecurity