Pwn2Own Ireland Day Two: 45 Zero-Days Demonstrated, Samsung Galaxy S26 Hacked Three More Times
Researchers took home $232,500 in a single day, including $40,000 for an AI infrastructure exploit.
Security researchers demonstrated 45 previously undisclosed vulnerabilities on the second day of Pwn2Own Ireland 2026, earning $232,500 in combined awards, BleepingComputer reports.
Highlights
- Samsung Galaxy S26: compromised three more times on day two
- AI infrastructure: one exploit targeting AI infrastructure earned $40,000
- Total day-two payout: $232,500
Why it matters
Pwn2Own, run by Trend Micro's Zero Day Initiative, pays researchers for working exploits against fully patched products. Vendors receive the technical details and typically have 90 days to ship fixes before they are published.
The addition of an AI infrastructure category reflects how quickly the attack surface is shifting. AI serving stacks, agent frameworks and model-hosting tools are now targets in their own right, and this week Microsoft made sandboxing for AI agents generally available on Windows 11 in response to similar concerns.
Owners of affected devices should install security updates as vendors release them over the coming weeks.