Skip To Main Content
Hillai Ben-Sasson on Muck Rack

Hillai Ben-Sasson

Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Hillai

Contact Hillai, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

Remote Code Execution Vulnerabilities in Ingress NGINX | Wiz Blog

|
By Nir Ohfeld, Ronen Shustin, Sagi Tzadik, Hillai Ben-Sasson
| wiz.io
This blog provides a high-level overview of the vulnerability and its impact. We will publish our technical deep-dive tomorrow (March 25) at 10AM ET. Wiz Research discovered CVE-2025-1097, CVE-2025-1098, CVE-2025-24514 and CVE-2025-1974, a series of unauthenticated Remote Code Execution vulnerabilities in Ingress NGINX Controller for Kubernetes dubbed #IngressNightmare.
Open in Who Shared Issue with article?

SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts

|
By Hillai Ben-Sasson
| wiz.io
Does AI have an isolation problem? Over the past months, we on the Wiz Research Team have conducted extensive tenant isolation research on multiple AI service providers. We believe these services are more susceptible to tenant isolation vulnerabilities, since by definition, they allow users to run AI models and applications – which is equivalent to executing arbitrary code.
Open in Who Shared Issue with article?
See all 2 articles