Security researcher accuses Wiz of buying php2shell domain to steal research credit

SatelliteNetSec · x · 2026-10-22

An infosec credit dispute is unfolding around the php2shell vulnerability naming. Researcher @SinSinology accuses Wiz of rushing to buy the php2shell domain and using its marketing machine to steal the spotlight from the researchers who did the work. In response, they registered phpbleed.com before Wiz could repeat the move, and is calling on contacts at CISA and the press to ensure original researchers get proper recognition: "A big budget can buy a domain. It shouldn't buy someone else's research credit."

Related event: Wiz accused of hijacking researcher credit via domain grab, gets taste of its own medicine(2 posts)→

Original post →

More from Companies & People

Companies & People channel →