Samsung Galaxy S24 and Sonos Era hacked on Pwn2Own Ireland Day 2

October 24, 2024 at 10:04AM On day two of Pwn2Own Ireland 2024, white hat hackers exposed 51 zero-day vulnerabilities, winning $358,625. The Viettel Cyber Security team led the competition, with participants like Pham Tuan Son and Ken Gannon achieving significant points and payouts. Overall, 103 vulnerabilities have been exploited, totaling $847,875 in prizes. **Meeting Takeaways … Read more

VMware Struggles to Fix Flaw Exploited at Chinese Hacking Contest

October 21, 2024 at 03:16PM VMware has addressed a remote code execution vulnerability for the second time in two months. This flaw was first exploited during a Chinese hacking contest in June. The company’s ongoing efforts highlight challenges in fully resolving the security issue. **Meeting Notes Takeaways:** 1. **Recurring Issue**: VMware has faced a remote … Read more

Google fixes one more Chrome zero-day exploited at Pwn2Own

April 3, 2024 at 12:40PM Google has resolved a zero-day vulnerability in Chrome, tracked as CVE-2024-3159, stemming from an out-of-bounds read weakness in the Chrome V8 JavaScript engine. The flaw allowed remote attackers to gain unauthorized access to data or trigger a crash. Google also addressed two other Chrome zero-days and two Android zero-days, underscoring … Read more

Mozilla fixes two Firefox zero-day bugs exploited at Pwn2Own

March 22, 2024 at 01:52PM Mozilla released security updates to fix two zero-day vulnerabilities in the Firefox web browser exploited during the Pwn2Own Vancouver 2024 hacking competition. Manfred Paul earned $100,000 and 10 Master of Pwn points after exploiting the flaws. Mozilla quickly patched the vulnerabilities in Firefox 124.0.1 and Firefox ESR 115.9.1 to prevent … Read more

Tesla Hack Earns Researchers $100,000 at Pwn2Own Automotive

January 25, 2024 at 11:48AM The Pwn2Own Automotive hacking contest at the Automotive World conference in Tokyo has concluded its second day, with overall earnings exceeding $300,000. The Synacktiv team leads with $430,000, notably earning for exploiting Tesla systems. Additional awards were granted to other successful hacking attempts. Day three will involve further hacking attempts. … Read more

Tesla hacked, 24 zero-days demoed at Pwn2Own Automotive 2024

January 24, 2024 at 08:38AM During the first day of Pwn2Own Automotive 2024, security researchers hacked Tesla Modem and other devices, earning a total of $722,500 in awards, with Synacktiv Team securing $100,000 by exploiting three zero-day bugs. They also hacked EV charging stations, earning an additional $120,000, and the NCC Group EDG team won … Read more

Hackers Earn $400k on First Day at Pwn2Own Toronto 2023

October 25, 2023 at 12:16PM The Pwn2Own Toronto 2023 hacking contest started and participants successfully hacked various devices, earning over $400,000 on the first day. Team Orca of Sea Security earned the highest reward of $60,000 by exploiting vulnerabilities in the Sonos Era 100 speaker. Other devices targeted included the Samsung Galaxy S23, Western Digital’s … Read more