Pwn2Own

Let's actually start right there on the micro level, securing the individual device, because there is a fascinating dynamic in the vulnerability research community right now.

You're talking about Pwn2Own?

Yeah, the Pwn2Own Ireland contest that just wrapped up in Cork on October 8th.

The entire premise is just wild to me.

Organizers basically pay independent researchers massive sums of money to break into devices that are running the absolute latest fully patched software.

That is terrifying.

It really is.

To win at Pwn2Own, the researchers had to exploit these silent vectors to either run code of their choice or extract highly sensitive information from a locked device.

Y por último, una actualización sobre una historia que cubrimos anteriormente.

Amber, ¿qué hay de nuevo en Pwn2Own Irlanda?

El primer día del concurso de hackeo Pwn2Own cerró con trescientos ochenta y ocho mil quinientos dólares en pagos, treinta y dos vulnerabilidades zero day únicas en teléfonos Samsung, dispositivos para el hogar inteligente y herramientas para desarrolladores de inteligencia artificial.

Lo más destacado fue una cadena de toma de control total de cuentas en LiteLLM, una capa de enrutamiento de IA de código abierto utilizada por miles de desarrolladores, que combina falsificación de solicitudes del lado del servidor con inyección de código por un premio de cuarenta mil dólares.

Esto pone de relieve lo delgada que es la capa de seguridad bajo las herramientas de IA sobre las que las empresas están construyendo.

Wikimedia says OpenAI agents repeatedly broke its rules.

Pwn2Own kicks off in Ireland.

Our guest is Derek Holt, CEO of Digital AI, who says AI has killed the cybersecurity response window.

And been there, done that.

Still, the foundation warned that AI agents are creating significant security and operational burdens, including increased bandwidth consumption and cleanup work.

Wikimedia called on AI companies to better monitor their agents and make them easily identifiable so website operators can control how they interact with their services.

Ethical hackers uncovered 32 zero-day vulnerabilities on the first day of Pwn2Own Ireland 2026, earning more than $368,000 in prize money.

Researchers targeted smartphones, smart home devices, printers, and AI products, including OpenAI Codex and LightLLM.

You know, that doesn't surprise me, though, that a lot of the folks that are successful at this are college students or, like, maybe right just post-grad.

If you look at things like, you know, the Pwn2Own contest and things like that, or a lot of hackathons or CTF programs...

Tons of the folks that win those are college age people, either in the U.S. or abroad.

A lot of successful teams from, you know, China and other Asian countries or Eastern Europe that are just really good at it.

Yeah.

You know, like building things, but used to do quite a bit of conference talks at Black Hat and, you know, Pwn2Own or CanSecWest, things like that.

And, you know, people that have been around would know Dino's work from, you know, he won the first Pwn2Own.

First

ever Pwn2Own.

He created

the Pony Awards at Black Hat.