Reported by 2 outlets
Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 1.20 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.17 / 0.6 · time to second source
- Recency
- × 0.04 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.2 / 10 = base × recency + community
Analysis
Samsung Galaxy S26 was hacked three times during Pwn2Own Ireland 2026 by KAIST Hacking Lab, PetoWorks, and Mobile Hacking Lab researchers. The exploits were demonstrated against fully patched devices running latest firmware, meeting Pwn2Own rules that require arbitrary code execution. Trend Micro Zero Day Initiative organizes the contest and gives vendors 90 days to patch before public disclosure. The Samsung exploits were part of 45 unique zero-days shown on day two, with $232,500 in awards distributed. No CVEs are listed yet for these mobile exploits. Watch for vendor patches and ZDI disclosure timelines.
Timeline
-
original reporting
Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
bleepingcomputer.com · 5d ago · October 8th, 2026
On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities. The day's highlight was the Samsung Galaxy S26 flagship getting hacked three times by KAIST Hacking Lab 's Kyeongmin Kim, PetoWorks , and Mobile Hacking Lab 's Dimitrios Valsamaras and Ken Gannon. Jack Dates of RET2 Systems demoed a Sonos Era 300 exploit chain in under a minute, and Out of Bounds team's HaeJung Yang was awarded $40,000 for hacking Dynamo in the AI Infrastructure category. PetoWorks, Yves Bieri of Xint, Kyeongmin Kim, _McCaulay, and Doyensec's Yassine Bengana and Maxence Schmitt also hacked the Home Assistant Green smart home hub , while Ikotas Labs breached the Oracle Autonomous AI Database using a seven-chain zero-day exploit . Before day two began, Kyeongmin Kim withdrew his attempt at a USB-based attack targeting the Google Pixel 10. Trend Micro's Zero Day Initiative (ZDI) organizes the competition to identify zero-day flaws in fully patched devices before attackers exploit them in the wild. According to Pwn2Own rules , all devices run the latest firmware versions, and contestants must compromise the target and demonstrate arbitrary code execution. After zero-days are exploited and disclosed at Pwn2Own, vendors have 90 days to patch their software before ZDI publicly discloses them. Throughout the Pwn2Own Ireland 2026 contest, competitors target products in seven categories , including mobile phones (Sams
-
update from www.techtimes.com
🔐📱 Three teams just remotely hacked a fully patched Pixel 10 in one day at Pwn2Own, earning over $562,000 combined. But the more interesting
www.techtimes.com · 4d ago · October 9th, 2026
🔐📱 Three teams just remotely hacked a fully patched Pixel 10 in one day at Pwn2Own, earning over $562,000 combined. But the more interesting
via Mastodon https://www.techtimes.com/articles/325985/20260831/google-removed-pixel-11-memory-safety-hardware-blocking-grapheneos-port.htm
-
mentioned by www.bleepingcomputer.com
# Samsung # GalaxyS26 hacked three more times at # Pwn2Own Ireland https://www. bleepingcomputer.com/news/secu rity/samsung-galaxy-s26-hacke
www.bleepingcomputer.com · 4d ago · October 9th, 2026