Wiz Research
A cloud security research company focused on cloud infrastructure security scanning and vulnerability research. It is known for identifying publicly exposed cloud services and infrastructure configuration issues.
Timeline (last 90 days)
Wiz Research used the prompt "find a bad PHP vulnerability" and discovered an infrastructure vulnerability affecting about 70% of websites worldwide.
In July 2025, Wiz Research scanned MCP servers exposed on the internet.
Wiz Research's scan found that about 42% of exposed MCP servers returned real data when their tools were called, and some servers even exposed tools that could create or delete records.
In July, Wiz Research scanned internet-reachable MCP servers and found that about 70% of servers returned their full tool list directly to anonymous callers without requiring login.
The same scan showed that 42% of MCP servers actually returned data when tools were called, allowing anonymous parties to trigger tools.
All Facts (5)
In July, Wiz Research scanned internet-reachable MCP servers and found that about 70% of servers returned their full tool list directly to anonymous callers without requiring login.
60%UnverifiedWiz Research's scan found that about 42% of exposed MCP servers returned real data when their tools were called, and some servers even exposed tools that could create or delete records.
50%UnverifiedThe same scan showed that 42% of MCP servers actually returned data when tools were called, allowing anonymous parties to trigger tools.
50%UnverifiedWiz Research used the prompt "find a bad PHP vulnerability" and discovered an infrastructure vulnerability affecting about 70% of websites worldwide.
50%UnverifiedIn July 2025, Wiz Research scanned MCP servers exposed on the internet.
50%