Cybersecurity Researchers Score Big Wins at Pwn2Own Ireland 2026, Hacking Top-End Devices with Ease
In a stunning display of skill and determination, cybersecurity researchers at Pwn2Own Ireland 2026 have successfully hacked three Samsung Galaxy S26 flagship devices in under two days. The event, organized by Trend Micro’s Zero Day Initiative (ZDI), has already seen contestants collect over $232,000 in cash awards for exploiting 45 unique zero-day vulnerabilities.
The Samsung Galaxy S26 was the most targeted device at Pwn2Own Ireland 2026, with three separate researchers successfully breaching its security. Kyeongmin Kim of KAIST Hacking Lab, PetoWorks, and Dimitrios Valsamaras and Ken Gannon of Mobile Hacking Lab were among those who demonstrated the ease with which they could compromise the device’s defenses. Their exploits allowed them to execute arbitrary code on the devices, a critical vulnerability that can be exploited by attackers in the wild.
The Pwn2Own competition has become a benchmark for cybersecurity researchers to test their skills and identify zero-day flaws in fully patched devices before attackers have a chance to exploit them. The event’s organizers ensure that all participating devices run the latest firmware versions, and contestants must compromise the target device and demonstrate arbitrary code execution within a set time frame.
The Samsung Galaxy S26 was not the only high-profile device hacked at Pwn2Own Ireland 2026. Researchers also successfully breached the Oracle Autonomous AI Database using a seven-chain zero-day exploit, as well as the Home Assistant Green smart home hub. Other notable targets included the Google Pixel 10 smartphone and the Sonos Era 300 speaker.
The event’s organizers have already announced that contestants will attempt to hack multiple smart home, AI infrastructure, and printer devices on day three of the competition. With over $1 million in cash awards up for grabs, it’s clear that Pwn2Own Ireland 2026 has attracted some of the world’s top cybersecurity talent.
As we watch these skilled researchers demonstrate their prowess, one thing is clear: zero-day vulnerabilities remain a significant threat to our digital security. It’s essential for device manufacturers and users alike to stay vigilant and prioritize patching and updating devices regularly to prevent such attacks from succeeding in the wild.
Ultimately, the success of cybersecurity researchers at Pwn2Own Ireland 2026 serves as a reminder that the cat-and-mouse game between attackers and defenders is far from over. As we continue to rely on connected devices for our daily lives, it’s crucial that we prioritize security measures to prevent such exploits from being used in malicious attacks.
Source: Bleeping Computer — 2026-10-08