AI security drama: rez0 accuses Wiz of credit-grabbing over PHP2Shell vulnerability disclosure

rez0__ · x · 2026-10-23

AI security figures clash over Wiz's handling of the PHP2Shell vulnerability. James Berthoty defends Wiz, noting it independently found the vulnerabilities and exploit paths, published extensive responder resources, and framed the work under OpenAI's Patch the Planet initiative. rez0 pushes back, arguing that the "discovered by Wiz" framing itself amounts to taking credit. The thread captures ongoing tension over attribution in coordinated vulnerability disclosure.

Related event: Dispute Erupts Over Credit for PHP2Shell Vulnerability(3 posts)→

Original post →

More from Fun

Fun channel →