sagitz

@sagitz_

Wiz

Cloud Security Researcher at @wiz_io • Microsoft Most Valuable Researcher 21/22/23 • Black Hat Speaker • Ask me anything about ZeroDay.cloud

Joined March 2019

11.6KFollowers

907Following

314Posts

58Media

4.1KLikes

@sagitz_

Sandboxing is more important than ever. Exactly why we put a $200k bounty on a Firecracker/gVisor escape on ZeroDay.Cloud/2026

Guillermo Rauch@rauchg · Oct 3

We’ve confirmed a KVM 0day through our Vercel Sandbox bounty program. Affecting the industry’s gold standard solution for Linux virtualization.

2026 is wild! Thankful to Paulos and other researchers helping us make the most secure sandbox for agents. Full writeup coming.

Open quoted post →

9 27 5 373 37.2K 181

@sagitz_

This is probably the most critical vulnerability I have ever found:

5c0d8c7c8a44b4b0164514c5058db149d908de46a1c041498f812ec8a0919fda

16 8 2 224 49.8K 87

@sagitz_

Incredible find. The impact is as severe as it gets

Yuval Avrahami@yuvalavra · Jul 30

We (+@liormama) gained full access to EVERY database on Azure's flagship DB service 🤯

And all we needed was a single key 🔑

This is the story of #CosmosEscape 🧵👇

Open quoted post →

0 1 0 30 5.5K 10

@sagitz_

$100,000 in bounty 🤯

Thanks @GitHubSecurity

291 319 106 10.9K 840K 1.4K

@sagitz_

Claude just found a 0-day lol

12 19 3 420 62.2K 94

@sagitz_

Insane research & impact by @yuvalavra 👑

Yuval Avrahami@yuvalavra · Jan 15

We hacked the AWS JavaScript SDK, a core library powering the entire @awscloud ecosystem - including the AWS Console itself 🤯

How did we do it? Just two missing characters was all it took.

This is the story of #CodeBreach 🧵👇

Open quoted post →

0 1 0 30 11K 10

@sagitz_

Now that all vulnerabilities have been reported, it's time to share some highlights and behind-the-scenes moments from the first iteration of ZeroDayCloud 🧵

1 1 0 19 5.5K 3

@sagitz_

Final call! Just 2 more days to submit your exploit for ZeroDay Cloud! ⌛

Friendly reminder: Admission to the event is 100% FREE!

See you at London ExCeL on December 10-11 🤩

0 1 1 12 4.4K 1

@sagitz_

Two weeks left to submit an exploit to ZeroDay.Cloud 🎉

We've been working tirelessly on this event and are so excited to see your reports 🤩

If you have any questions about targets, configurations, or setups, send me a DM

Good luck!

0 5 0 17 4.6K 3

@sagitz_

Very excited to be on the review board this year! 😊

The CFP for @BlueHatIL 2026 is now open, so make sure to submit your abstract.

It's going to be awesome! 🤩

BlueHat IL@BlueHatIL · Nov 12, 2025

CFP for BlueHatIL 2026 is open! Submit your abstract - your time to shine starts now: microsoftrnd.co.il/bluehatil/conf…

Open quoted post →

0 0 0 10 3.1K 0

@sagitz_

ICYMI, we increased the bounties for multiple targets on ZeroDay.cloud

If you have any questions regarding scope or configurations, please let me know - my DM is open

Good luck!

0 3 0 13 7.3K 6

@sagitz_

In case you missed it: $4.5M in bounties (up to $300k per target!) are up for grabs for open source software in the zeroday.cloud competition 🤯

We've partnered with all major cloud providers to offer massive rewards and recognize vulnerability research excellence 🎯

1 7 0 24 5.3K 13

@sagitz_

Fascinating talk by @benny_isaacs and Brakha about their beautiful exploit of a UAF vulnerability in the Redis Lua interpreter at the recent Pwn2Own. A must-watch! 🤩

Hexacon@hexacon_fr · Sep 15, 2025

📢 From 2-Bit Reset to 0-Click RCE in Redis: A Pwn2Own Edition by Benny Isaacs (@benny_isaacs) & Nir Brakha

Open quoted post →

0 2 0 23 4.2K 9

@sagitz_

Are you up for a challenge?

I authored a container security challenge for the @wiz_io Ultimate Cloud Security Championship 🤩

Put your skills to the test and try it out! 👇
cloudsecuritychampionship.com/challenge/2

0 19 1 55 9.4K 11

@sagitz_

Most points in the AI category at the recent @thezdi Pwn2Own! 🥳

Wiz@wiz_io · May 19, 2025

🏆 Wiz Research took 1st place in #Pwn2Own's first-ever AI category, competing against global teams targeting critical AI infrastructure.

Huge thanks to our incredible research team! @nirohfeld, @shirtamari, @ronenshh, @benny_isaacs, @sagitz_ & Nir Brakha!

Open quoted post →

4 2 0 56 4.5K 3

@sagitz_

Game changer 🥁🙈

Jonathan Jacobi@j0nathanj · May 8, 2025

Introducing Multiverse: the first AI-generated multiplayer game.

Multiplayer was the missing piece in AI-generated worlds — now it’s here. Players can interact and shape a shared AI-simulated world, in real-time.

Training and research cost < $1.5K. Run it on your own PC.

We @enigma_ai are open-sourcing everything: code, data, weights, architecture, and research.

Here’s a closer look (and how it works!):

0:27

Open quoted post →

0 0 0 7 1.6K 0

@sagitz_

TIL that AFL++ has an April Fools' Easter egg 😂

0 2 0 19 1.6K 0

@sagitz_

I had a lot of fun working on this research!

* Unauthenticated RCE? ✅
* Overlooked attack vector in Kubernetes? ✅
* Nginx quirks? ✅
* Stable & reliable exploit? ✅

Check out the thread for details about the vulnerability we found in Ingress Nginx Controller 👇

0:34

Nir Ohfeld@nirohfeld · Mar 25, 2025

We (+@sagitz_ @ronenshh @hillai) found a series of unauthenticated RCEs in core @kubernetesio project "Ingress-NGINX".

The impact?

From zero permissions ➡️ to complete cluster takeover 🤯

This is the story of #IngressNightmare 🧵⬇️

Open quoted post →

3 19 0 112 14.6K 29

@sagitz_

ICYMI, #Pwn2Own will have an AI category this year! Looks like our team has already pwned 2 of these targets👀

Ollama CVE-2024-37032: wiz.io/blog/probllama…

NVIDIA Container Toolkit CVE-2024-0132: wiz.io/blog/nvidia-ai…

Maybe we should look at the rest of the targets too😎

TrendAI Zero Day Initiative@thezdi · Feb 24, 2025

Announcing #Pwn2Own Berlin! We're moving our enterprise-focused event to @offensive_con and introducing an AI category. More than $1,000,000 in cash & prizes (Incl. a Tesla) are available to win. Check out the details at zerodayinitiative.com/blog/2025/2/24…

Open quoted post →

2 14 0 106 12K 27

@sagitz_

I’m in Seoul for #POC2024 🤩
if you see me, come say hi!

1 0 0 14 1.7K 0

sagitz (@sagitz_) — posts, photos & videos | PeekX