October 26, 2024 at 05:49AM
Pwn2Own Ireland 2024 concluded with over $1 million awarded for 70+ zero-day vulnerabilities. Security researchers targeted devices across eight categories, earning $1,066,625. Viettel Cyber Security won the “Master of Pwn” title. The next event will be in Tokyo on January 22, 2025, focusing on the automotive industry.
**Takeaways from Meeting Notes: Pwn2Own Ireland 2024**
– **Event Overview**: Pwn2Own Ireland 2024 concluded successfully on its fourth day, featuring over $1 million in prizes for 70 unique zero-day vulnerabilities across fully patched devices.
– **Competition Structure**: Participants, primarily security researchers, compete to earn the “Master of Pwn” title by compromising targets in eight categories, including mobile phones, messaging apps, and smart devices.
– **Prize Distribution**: This event marked the fourth consecutive edition where total earnings surpassed the million-dollar mark, with a total of **$1,066,625** awarded.
– **Key Exploits on Final Day**:
– **Team Smoking Barrels**: Exploited TrueNAS X, earning **$20,000** and 2 Master of Pwn points.
– **Team Cluck**: Used six vulnerabilities to move from QNAP QHora-322 to Lexmark CX331adwe, earning **$23,000** and Master of Pwn points.
– **Viettel Cyber Security**: Targeted TrueNAS Mini X with a two-bug exploit, receiving **$20,000** and 2 Master of Pwn points.
– **PHP Hooligans / Midnight Blue**: Exploited a Lexmark printer for **$10,000** and 2 Master of Pwn points.
– **Awards**: Viettel Cyber Security was awarded the “Master of Pwn” for accumulating **33 Master of Pwn points**, totaling **$205,000** for their demonstrations involving QNAP NAS, Sonos speakers, and Lexmark printers.
– **Future Events**: The next Pwn2Own event is scheduled for **January 22, 2025**, in Tokyo, Japan, focusing on the automotive industry with four categories: Tesla, In-Vehicle Infotainment (IVI), Electric Vehicle Chargers, and Operating Systems.
– **Resources**: Details on competition categories and prizes are available through the Zero Day Initiative (ZDI), including the rules of the competition.