#pwn2own — Public Fediverse posts

Day 1 is officially wrapped with quite a pot of gold being awarded across the teams! Checkout a snapshot of where the leaderboard stands as of today - more to come over the next two days so keep following along as we post live updates! #Pwn2Own #Pwn2OwnIreland

For full leaderboard & schedule details: https://pwn2own.zerodayinitiative.com

Ending Day 1 with collisions seems apropos. Joohyun Park of Xint used 5 different bugs in his exploit of the Philips Hue Bridge Pro, but 4 were previously known. His 3rd round success still nets him $6,000 and 2.5 Master of Pwn points. #Pwn2Own

Confirmed! In the penultimate exploit of Day 1, Cong Thanh, Duc Hieu and Nam Dung of AHNTUD used an OOB Write to exploit Canon imageFORCE 1643F. They win $10,000 and 2 Master of Pwn points. #Pwn2Own

Verified! The 1st full win the the Wellness category has Interrupt Labs using an OOB Read and an OOB Write to exploit the Garmin Index BPM. They win $20,000 and 2 Master of Pwn points. #Pwn2Own

Sweet! In the final attempt of the day, Interrupt Labs successfully targeted the Garmin Index BPM in the Wellness category. They head off for the final disclosure of #Pwn2Own Ireland 2026 Day One. #P2OIreland

Unfortunately, the team of Nam Nguyen and Thai Son Dinh and Hoang Tien Minh of VinSOC couldn't get their exploit of Chroma working within the time allotted. #Pwn2Own

Nice! Cong Thanh, Duc Hieu and Nam Dung successfully exploited the Canon imageFORCE 1643F. The ANHTUD team heads to the disclosure room to explain what they did. #Pwn2Own

Confirmed! Ikotas Labs, Inc. used a single argument injection bug to exploit OpenAI Codex. They win $40,000 and 4 more Master of Pwn points. More outstanding research on display. #Pwn2Own

Sweet! Joohyun Park of Xint successfully exploited the Philips Hue Bridge Pro on his first attempt. He's off to the disclosure room with all of the details of his exploit. #Pwn2Own

Verified! Nam Nguyen, Thanh Vu, and Tin Huynh of VinSOC combined 5 bugs to exploit the #Oracle Autonomous AI Database. They win $40,000 and 4 Master of Pwn points. Outstanding work! #Pwn2Own #P2OIreland

Confirmed! Sina Kheirkhah of Summoning Team used a single bug to exploit the Lexmark CX532adwe printer. The second round win nets him $10,000 and 2 Master of Pwn points. #Pwn2Own

It seems to be a day for collisions. ByungYoung Yi, and KeunHo Kim of Out of Bounds used 5 bugs to exploit the Phillips Hue Bridge Pro, but 4 of those bugs were previously known. They still earn $12,000 and 2.5 Master of Pwn points. #Pwn2Own

Unfortunately, Mikhail Evdokimov, Polina Smirnova and Mate Zombor of White Noise Club could not get their exploit of the Google Pixel 10 working within the time allotted. #Pwn2Own

Confirmed (w/ a collision)! Ikotas Labs, Inc. used 4 bugs to exploit the #Samsung Galaxy S26, but one was already known to the vendor (yet unpatched). They still earn $11,000 and 4.5 Master of Pwn points. #Pwn2Own #P2OIreland

Very nice! Sina Kheirkhah of Summoning Team needed no time at all to exploit the Lexmark CX532adwe. He's off to the disclosure room to go over all the details. #Pwn2Own #P2OIreland

Confirmed! Thanh Do of Team Confused showed no confusion at all as he used a single use-after-free on the Lexmark CX532adwe to win $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OIreland

Boomshakalaka! 🏀🗑️ ByungYoung Yi, and KeunHo Kim of Out of Bounds needed little time exploiting the Philips Hue Bridge Pro. They head off to the disclosure room to see if their bug(s) is unique. #Pwn2Own #P2OIreland

My oh my! Nam Nguyen, Thanh Vu, and Tin Huynh of VinSOC wasted no time exploiting the Oracle Autonomous AI Database. They're heading to the disclosure room to explain themselves. #Pwn2Own

A slam dunk success with 7 zero-days bugs disclosed from Vũ Chí Thành and Huỳnh Đức Tin of VinSOC during their exploit of Philips Hue Bridge Pro in the Smart Home category, taking home a total of $40,000 and 4 Master of Pwn points #Pwn2Own

The Garmin Index BPM withstood Aaron Christophel of Summoning Team targeting as exploit attempts were unsuccessful before the clock ran out #Pwn2Own

Another Collision 💥 4 bugs - 3 collisions & 1 zero-day successfully exploit the Samsung Galaxy S26 and Interrupt Labs takes home $15,750 and 3.25 Master of Pwn points #Pwn2Own

Out of Bounds results are confirmed as a Collision! They'll take home $15k and 3 Master of Pwn points in their exploit of LiteLLM in the #AIInfrastructure category. #Pwn2Own

Wow - the setup took a while (and included Starlink!), but Interrupt Labs successfully exploited the #Samsung Galaxy S26. They're off to the disclosure room to provide the details. #Pwn2Own

Another bug collision! linhlhq and Son Dinh of VinSOC exploited the #Sonos Era 300 with 2 bugs, but one was publicly known. They still earn $17,500 and 3.5 Master of Pwn points. #Pwn2Own

We have a collision! Nguyen Thanh Dat of Viettel Cyber Security used 4 bugs to exploit the #Samsung Galaxy S26, but 3 were known by the vendor. They still earn 31,250 and 3.25 Master of Pwn points. #Pwn2Own

The disclosure rooms are full! With Interrupt Labs off to their own to discuss their exploit of the Samsung Galaxy S26 in the hopes of confirming their win of $50,000 and 5 Master of Pwn points! #Pwn2Own

Off to the disclosure room VinSOC after successfully exploiting the @Sonos Era 300, pending confirmation - $50,000 and 5 Master of Pwn points will be theirs! #Pwn2Own

And with a cheer of success, Out of Bounds is heading off to the disclosure room, stay tuned for the confirmation of the win! #Pwn2Own

Tik tic ⏰ Printers continue to prove to be a time challenge as unfortunately T-X Lab team hit the time limit on their exploit attempt of Lexmark CX532adwe in the Printers category #Pwn2Own #theclockstricksagain

Verified! Taisic Yun of Xint used a Improper Input Validation bug along with code injection to get his reverse shell on LiteLLM. He earns $40,000 and 4 Master of Pwn points. #Pwn2Own

We have our first confirmation of #Pwn2Own Ireland 2026! @_McCaulay combined an OOB Write and a format string(!) bug to exploit the #Sonos Era 300. He earns $50,000 and 5 Master of Pwn points.

You can find the latest results from #Pwn2Own Ireland at the blog (https://www.zerodayinitiative.com/blog/2026/10/6/pwn2own-ireland-2026-day-one-results) or the leaderboard (https://pwn2own.zerodayinitiative.com/) #P2OIreland

Whew! It took some reconfiguring and tweaking, but Taisic Yun of Xint successfully got his reverse shell on LiteLLM in the AI category. After exhaling, they head off to the disclosure room to dish the deets. #Pwn2Own

Boom! Nguyen Thanh Dat of Viettel Cyber Security kicks things off by successfully exploiting the #Samsung Galaxy S26. He's off to the disclosure room to provide the details. #Pwn2Own

Unfortunately, Ikotas Labs, Inc. could not get their exploit of the Brother MFC-L8970CDWworking within the time allotted. #Pwn2Own

Here's what's on tap for the beginning of #Pwn2Own Ireland

Excited to share that 🇫🇷 Yassine Bengana & Maxence Schmitt 🇫🇷 will be representing #Doyensec at #PWN2OWN Ireland - targeting the Smart Home category for a total of $30,000 and 3 Master of Pwn points, Wed. Oct. 7 @ 11:15AM

https://www.zerodayinitiative.com/blog/2026/10/5/pwn2own-ireland-2026-the-full-schedule#day-one

#appsec #security

#Pwn2Own Ireland schedule is finalized.
Team Xint attempts (Ireland time):
LiteLLM - Tuesday 9:30
Philipps Hue - Tuesday 18:30
Home Assistant - Wednesday 9:30
Oracle AI Database - Wednesday 11:45
Pixel 10 - Thursday 11:15

https://www.zerodayinitiative.com/blog/2026/10/5/pwn2own-ireland-2026-the-full-schedule

Zed sez you can find the live leaderboard at https://pwn2own.zerodayinitiative.com
#Pwn2Own https://youtube.com/shorts/ND18cvmNRSA?feature=share

The full schedule for #Pwn2Own Ireland 2026 is now live! You can find it at https://www.zerodayinitiative.com/blog/2026/10/5/pwn2own-ireland-2026-the-full-schedule. And check out https://pwn2own.zerodayinitiative.com/ for live leaderboard updates throughout the day. #P2OIreland