Wiz demo shows Gemini 4 extracting a master key for admin access
In the video, Wiz shows Gemini 4 pulling a master key from a health-software config file and turning it into admin access, framed as a dual-use AI security risk.
ANTHROPIC'S DEPUTY CISO SAYS HOLD ON FOR ~18 MONTHS. THIS IS WHAT THE LAST WEEK LOOKED LIKE > Oct 17: private keys for 8 eMudhra intermediate certificates turned out to be recoverable. Chrome and Firefox blocked them that night > Oct 20: Anthropic's red team had Claude audit 25 open-source projects. 493 security issues > Oct 21: PHP shipped emergency fixes for PHP2Shell, flaws AI helped find > Oct 13-22: JPMorgan, Schwab and Morgan Stanley start blocking outside AI agents his ask to security leaders: go to your boards now, and not for AI. for the basics in the video Wiz shows Gemini 4 pulling a master key out of a config file in health software and turning it into admin access. defenders use these models. attackers can use the same ones
This post quotes another post: x.com/jasondclinton/status/2113325263157395456