Philips (Vendor): news timeline & CVEs

Pwn2Own Ireland 2026 - Day Three Results & Master of Pwn

Pwn2Own Ireland day three lists 17 scheduled attempts, led by three Google Pixel 10 entries.

Zero Day Initiative previewed day three of Pwn2Own Ireland 2026, with 17 scheduled attempts and about $1.33 million in prizes. Google Pixel 10 is the headline target with three attempts, and Samsung Galaxy S26 has one more run. Other targets include Philips Hue Bridge Pro, Home Assistant Green, Oracle Autonomous AI Database, Chroma, and Brother, Canon, and Lexmark printers. The post is a schedule rather than confirmed results, and says Master of Pwn could remain open into the final hour.

Zero Day Initiative Blog10:41 UTC · 12h agoIndustry 8 sources1

Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland

Researchers collected $232,500 at Pwn2Own Ireland after 45 zero-days, including three Samsung Galaxy S26 hacks.

On day two of Pwn2Own Ireland 2026, researchers earned $232,500 by exploiting 45 unique zero-days in fully patched devices. Samsung's Galaxy S26 was compromised three times by KAIST Hacking Lab's Kyeongmin Kim, PetoWorks, and Mobile Hacking Lab. Other successful targets included the Sonos Era 300, Home Assistant Green, Philips Hue Bridge Pro, and Oracle Autonomous AI Database via multi-bug chains. Trend Micro's ZDI gives vendors 90 days to patch before public disclosure; in-the-wild exploitation was not reported.

BleepingComputerupdated 10:41 UTC · 12h agofirst 06:32 UTC · 16h agoExploit / PoC 8 sources1

Pwn2Own Ireland 2026 - The Full Schedule

ZDI posted the Pwn2Own Ireland 2026 schedule, with over 60 entries including phones and AI targets.

Trend Micro's Zero Day Initiative published the Pwn2Own Ireland 2026 schedule after a random draw in Cork. More than 60 entries span phones, smart home, printers, wellness, AI infrastructure, and coding agents, with attempts on 6-7 October 2026 (IST). The largest listed award is $300,000 and 30 Master of Pwn points for a remote Google Pixel 10 attempt. Other targets include Samsung Galaxy S26, Sonos Era 300, LiteLLM, and OpenAI Codex. No successful exploits are reported in the schedule.

Zero Day Initiative Blogupdated 10:41 UTC · 12h agofirst Oct 5, 18:11 UTC · 3d agoIndustry 8 sources

Researchers find way to listen in on headphones from afar

Researchers unveiled InjectEave, an electromagnetic injection side-channel attack that recovers audio from headphones and landline phones up to 30 meters away through walls.

Researchers from HKUST and The Hong Kong Polytechnic University presented InjectEave at USENIX Security 2026, an active EM side-channel attack that injects 0-9 MHz RF signals into nonlinear components such as amplifiers, ADCs, and power converters to modulate and leak target audio. Tested on 11 off-the-shelf devices including Sony, HP, Philips, Apple, and Xiaomi products, the attack recovered intelligible headphone audio from up to 30 meters with an RF amplifier, generally 1-6 meters otherwise, including through walls. The attack uses commodity gear such as a USRP B210 SDR and a Siglent spectrum analyzer, is immune to digital defenses like encryption, and is only partially mitigated by shielding, twisted-pair wiring, and filtering.

The Register · SecuritySep 17, 19:36 UTC · 21d agoResearch

Philips

Timeline4 articles

Appears with

Pwn2Own Ireland 2026 - Day Three Results & Master of Pwn

Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland

Pwn2Own Ireland 2026 - The Full Schedule

Researchers find way to listen in on headphones from afar