Interrupt Labs (Organization): news timeline & CVEs

Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland

Researchers collected $232,500 at Pwn2Own Ireland after 45 zero-days, including three Samsung Galaxy S26 hacks.

On day two of Pwn2Own Ireland 2026, researchers earned $232,500 by exploiting 45 unique zero-days in fully patched devices. Samsung's Galaxy S26 was compromised three times by KAIST Hacking Lab's Kyeongmin Kim, PetoWorks, and Mobile Hacking Lab. Other successful targets included the Sonos Era 300, Home Assistant Green, Philips Hue Bridge Pro, and Oracle Autonomous AI Database via multi-bug chains. Trend Micro's ZDI gives vendors 90 days to patch before public disclosure; in-the-wild exploitation was not reported.

BleepingComputerupdated Oct 8, 10:41 UTC · 13h agofirst Oct 8, 06:32 UTC · 17h agoExploit / PoC 8 sources1

Hackers exploit 32 zero-days on first day of Pwn2Own Ireland

Researchers exploited 32 zero-days for $388,500 on day one of Pwn2Own Ireland, hacking Samsung Galaxy S26 twice and Oracle's AI database.

On the first day of Pwn2Own Ireland 2026, competitors earned $388,500 exploiting 32 zero-days, with Interrupt Labs, Ikotas Labs, and Nguyen Thanh Dat of Viettel Cyber Security hacking the Samsung Galaxy S26 twice. Leaderboard-topping VinSOC researchers earned $80,000 combining a seven-zero-day chain against the Philips Hue Bridge Pro and a five-zero-day chain against the Oracle Autonomous AI Database. Other demos hit LiteLLM, Lexmark and Canon printers, the Sonos Era 300, and the OpenAI Codex cloud coding agent via a single argument-injection bug. Trend Micro's Zero Day Initiative gives vendors 90 days to patch before public disclosure.

BleepingComputerupdated Oct 8, 10:41 UTC · 13h agofirst Oct 6, 19:21 UTC · 2d agoExploit / PoC 8 sources1

Interrupt Labs

Timeline2 articles

Appears with

Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland

Hackers exploit 32 zero-days on first day of Pwn2Own Ireland