← Back to the boardNews
Hacking GitHub with a Semicolon & Claude with Sagi Tzadik | Wiz
Why it’s here: Covers a critical RCE vulnerability in GitHub (CVE-2026-3854) affecting Enterprise Server users, which bears on cybersecurity policy and federal patching concerns, plus AI-assisted reverse engineering, a specialist technical development relevant to the cyber and AI landscape.
Trace across the boardItem
4d agoWiz Research · research by WizHacking GitHub with a Semicolon & Claude with Sagi Tzadik | WizWiz podcast episode in which researcher Sagi Tzadik explains how a semicolon in GitHub's git push option handling enabled a critical RCE, found using Claude paired with reverse engineering tooling.1 outletCyber13 linked
Connected
13 links- NewsBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | WizBoth involve Wiz, Sagi Tzadik
- NewsGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz BlogBoth involve Wiz, GitHub
- NewsHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz BlogBoth involve Wiz, GitHub
- NewsWhen AI builds itselfBoth involve GitHub, Claude
- NewsIntroducing Atlas: Wiz's AI vulnerability researcher | Wiz BlogBoth involve Wiz, GitHub
- NewsThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz BlogBoth involve Wiz, GitHub
- NewsBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz BlogBoth involve Wiz, MCP servers
- NewsHow to Evaluate AI Agent Cybersecurity Capabilities | Wiz BlogBoth involve Wiz, MCP servers
- NewsAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxBoth involve Claude
- NewsLiteLLM Compromised, Steals Credentials | Wiz BlogBoth involve Wiz, GitHub
- NewsMicrosoft CISO urges Artex regulation, but experts say it won’t workBoth involve Wiz, GitHub
- NewsSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz BlogBoth involve Wiz, GitHub
- NewsClaude's new constitutionBoth involve Claude
About
- Wiz
- GitHub
- Claude
- MCP servers