Wiz: AI scanning tools found security gaps at rail operator and hospitals

Wiz's Scan for Good initiative, using AI tools and Google DeepMind's Gemini models, found a leaked database exposing admin sessions at a public rail operator and an open hospital alert channel. Researchers also found an unsafe file-upload feature on a private hospital's booking site and an admin key exposing 8.8 million files in a national archive.

• Leaked database at rail operator exposed active admin sessions and access to routes and schedules
• Open hospital alert channel let anyone online send systemwide notifications
• Exposed admin key allowed reading and deleting 8.8 million files in a national archive
• Wiz did not name the affected organizations; the exposures have been fixed