Hackers exploit 32 zero-days on first day of Pwn2Own Ireland

Illustration of a robot

The first day of the Pwn2Own Ireland 2026 hacking competition saw security researchers exploit 32 zero-day vulnerabilities across various devices. Multiple teams successfully compromised the Samsung Galaxy S26 smartphone, with three different groups earning a combined $388,500 for their efforts. The competition featured seven categories of targets, including mobile phones, printers, smart home devices, messaging apps, and AI-related systems. Some of the vulnerabilities discovered had already been known to manufacturers beforehand.

Leading the leaderboard, researchers from VinSOC won $80,000 by chaining multiple zero-day exploits to compromise a Philips Hue Bridge Pro smart lighting hub and an Oracle Autonomous AI Database. Additional achievements included hacking printers from Lexmark and Canon, exploiting vulnerabilities in smart speakers and AI coding agents, and compromising various smart home devices. One team attempted to hack the Google Pixel 10 but ran out of time before completing their exploit. The Zero Day Initiative organizes the competition to identify security flaws before malicious actors can use them, with vendors receiving 90 days to patch vulnerabilities before public disclosure.

Source: Read the full story at BleepingComputer

This summary was written with AI assistance from the linked source.

Send this to yourself, or to someone who should see it

Enter your email and we will send you a link to this article.

We use your email only to send this link. It is not saved or added to any list.

Or share it