Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
Researchers exploited 32 zero-days for $388,500 on day one of Pwn2Own Ireland, hacking Samsung Galaxy S26 twice and Oracle's AI database.
On the first day of Pwn2Own Ireland 2026, competitors earned $388,500 exploiting 32 zero-days, with Interrupt Labs, Ikotas Labs, and Nguyen Thanh Dat of Viettel Cyber Security hacking the Samsung Galaxy S26 twice. Leaderboard-topping VinSOC researchers earned $80,000 combining a seven-zero-day chain against the Philips Hue Bridge Pro and a five-zero-day chain against the Oracle Autonomous AI Database. Other demos hit LiteLLM, Lexmark and Canon printers, the Sonos Era 300, and the OpenAI Codex cloud coding agent via a single argument-injection bug. Trend Micro's Zero Day Initiative gives vendors 90 days to patch before public disclosure.