AI scanning tools found security gaps at rail operator and hospitals, Wiz says

Wiz’s new Scan for Good initiative used AI-assisted security testing to find and help remediate critical misconfigurations and data exposures across public services and infrastructure — including leaked admin sessions on a rail operator, an unprotected hospital alert channel and unsafe appointment-booking uploads at a private hospital, municipal records exposures, an exposed admin key allowing access to millions of archive files, and cloud credentials that could have impacted container images. The company worked with affected organizations and CISA guidance was involved; Wiz said the issues were addressed and provided no evidence of active exploitation.