hacker; head of offensive ai @wiz_io, now at @google; agentic pentesting, post-training & gemini cyber; $3,000,000 bug bounty hunter; arsenal

Joined December 2019
Pinned Tweet
The Gemini 4 Era 👾
Researchers at @wiz_io put Gemini 4 Argon to the test against complex cyber threats. In real-world testing, it found more than two times more vulnerabilities than baseline models — catching a critical risk that previous frontier models missed. See how they did it ↓
3
3
59
5,802
Nagli retweeted
Researchers at @wiz_io put Gemini 4 Argon to the test against complex cyber threats. In real-world testing, it found more than two times more vulnerabilities than baseline models — catching a critical risk that previous frontier models missed. See how they did it ↓
65
58
17
526
168,478
As the embargo is now lifted, find all the information needed on php2shell.com/ - the critical RCE vulnerability our research team identified affecting PHP core wiz.io/blog/php2shell-php-rc…
皆様に、今夜に対応して頂きたい大至急のお願いです。   多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な2件の脆弱性に関する注意喚起を行っています。   公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時(日本時間)に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。   修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。   国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。 国家サイバー統括室(注意・警戒情報)(@cyber_forecast) / X
8
53
5
297
44,941
NASA had a flaw that could have allowed threat actors unauthorized access to their Mission AI Hub - a portal that holds plain-text chat history of engineering development, alongside a proxy to specialized government models without restrictions. Glad we could help securing it!
3
3
129
7,369
Read more on our disclosed report: bugcrowd.com/disclosures/2e6… And about Scan For Good: wiz.io/scan-for-good We thank NASA for their cooperation and rapid remediation, and glad to help more organizations secure themselves using the power of frontier ai models.
2
10
981
This vulnerability was found as part of Scan For Good, where we helped hundreds of organizations identify and remediate critical exposures with the power of frontier ai, free of charge As attackers are ramping up the usage of very capable open source models, we are trying to do our part and help remediate critical flaws on production, live systems
3
564
Gemini 4 Argon has arrived! The era of super intelligence in cyber security has begun, excited to share more on how we use it to secure the world - and we are just getting started 🌎 youtu.be/ftkic7Tdpcg?si=3QxA… deepmind.google/blog/introdu…
15
17
1
196
18,574
Learn more about Scan For Good
Today we're launching Scan for Good in partnership with @GoogleDeepMind. We're combining frontier AI with Wiz Research to help public services, critical infrastructure, healthcare, and nonprofits find and fix critical exposures.
1
345
Always nice to listen to these two @fransrosen @Rhynorater
5
2
144
5,884
Cool to see @sundarpichai highlighting our Scan For Good initiative together with @GoogleDeepMind, Gemini 4 Argon has been a real game changer for us -- more to come soon! 🎨
Today we're launching Scan for Good in partnership with @GoogleDeepMind. We're combining frontier AI with Wiz Research to help public services, critical infrastructure, healthcare, and nonprofits find and fix critical exposures.
1
4
53
4,391
With Wiz, we're already using Argon to scan critical public infrastructure for public good for free as part of the Scan for Good program. It has already uncovered a critical vulnerability exposing sensitive personal information across healthcare software used by hospitals worldwide, identifying a severe risk that previous frontier models had missed. wiz.io/blog/scan-for-good-cr…
1
2
7
945
Gemini 4 Argon is a great model for cybersecurity tasks
Lots of discussion out there about our next model(!), so I wanted to give an early look as soon as possible. Introducing Gemini 4 Argon! It shows frontier performance in complex workflows, cyber defense and software engineering. Teams are using it extensively at Google, from coding to quantum computing, great feedback. Here’s a look at the benchmarks:
12
2
46
8,281
Gemini 4 Argon is the best model we used here at Wiz for Web Penetration Testing tasks, it shows Frontier performances in short and long-horizon assessments - finding risks in web applications without access to their source code
3
7
1
124
28,116
And @GoogleDeepMind have pretty cool offices 🪐
6
581