cyber.hendryadrian.com
Security News · wiz.io

Wiz Launches Cloud and AI Hacking Competition With Up to $4.5 Million in Bounties

· Original article ↗

Summary

Wiz Research announced zeroday.cloud, a cloud and AI hacking competition at Black Hat Europe in London on December 10–11, with up to $4.5 million in bounties and targets across six software categories.

Key points

  • The competition is scheduled for December 10–11 at Black Hat Europe in London.
  • AWS, Microsoft, and Google Cloud are partnering with Wiz Research.
  • Targets span AI, Kubernetes and cloud-native software, containers and virtualization, web servers, databases, and DevOps tools.
  • Submissions must achieve full container or VM escape for virtualization targets, or zero-click remote code execution for other targets.
  • Contestants will demonstrate exploits live; Wiz Research and cloud-provider partners will judge submissions.

Article Details

Event Type
Announcement of zeroday.cloud, a cloud and AI security hacking competition.
Impact
The competition offers up to about $4.5 million in bounties for responsible researchers to find critical vulnerabilities in listed cloud and AI software and work with vendors to fix them. Submissions must demonstrate total compromise of the target, including a full container or VM escape in the virtualization category or a zero-click remote code execution vulnerability for other targets.

Vendors

Amazon Web ServicesWe’re incredibly grateful to AWS, Microsoft, and Google Cloud for partnering with Wiz Research to make zeroday.cloud possible. Their support shows a shared industry commitment to advancing cloud security for everyone.Google CloudWe’re incredibly grateful to AWS, Microsoft, and Google Cloud for partnering with Wiz Research to make zeroday.cloud possible. Their support shows a shared industry commitment to advancing cloud security for everyone.MicrosoftWe’re incredibly grateful to AWS, Microsoft, and Google Cloud for partnering with Wiz Research to make zeroday.cloud possible. Their support shows a shared industry commitment to advancing cloud security for everyone.

Products

Apache AirflowDevOps & Automation: Apache Airflow, Jenkins, GitLab CEApache TomcatWeb Servers: nginx, Apache Tomcat, Envoy, CaddyCaddyWeb Servers: nginx, Apache Tomcat, Envoy, CaddyContainerdContainers and Virtualization: Docker, Containerd, Linux Kernel (Ubuntu)DockerContainers and Virtualization: Docker, Containerd, Linux Kernel (Ubuntu)EnvoyWeb Servers: nginx, Apache Tomcat, Envoy, CaddyFluent BitKubernetes and Cloud-Native: Kubernetes API Server, Kubelet Server, Grafana, Prometheus, Fluent BitGitLab Community Edition (CE)DevOps & Automation: Apache Airflow, Jenkins, GitLab CEGrafanaKubernetes and Cloud-Native: Kubernetes API Server, Kubelet Server, Grafana, Prometheus, Fluent BitJenkinsDevOps & Automation: Apache Airflow, Jenkins, GitLab CEKubelet ServerKubernetes and Cloud-Native: Kubernetes API Server, Kubelet Server, Grafana, Prometheus, Fluent BitKubernetes API ServerKubernetes and Cloud-Native: Kubernetes API Server, Kubelet Server, Grafana, Prometheus, Fluent BitLinux kernelContainers and Virtualization: Docker, Containerd, Linux Kernel (Ubuntu)MariaDBDatabases: Redis, PostgreSQL, MariaDBNGINXWeb Servers: nginx, Apache Tomcat, Envoy, CaddyNvidia Container ToolkitAI: Ollama, vLLM, NVIDIA Container Toolkit (Container Escape)OllamaAI: Ollama, vLLM, NVIDIA Container Toolkit (Container Escape)PostgreSQLDatabases: Redis, PostgreSQL, MariaDBPrometheusKubernetes and Cloud-Native: Kubernetes API Server, Kubelet Server, Grafana, Prometheus, Fluent BitRedisDatabases: Redis, PostgreSQL, MariaDBvLLMAI: Ollama, vLLM, NVIDIA Container Toolkit (Container Escape)

Related Articles