
Over $1M Awarded for 73 Zero-Days at Pwn2Own Dublin 2025
A recap of Pwn2Own Dublin 2025, where hackers earned over $1 million for 73 unique zero-day vulnerabilities, including a full compromise of the new Samsung Galaxy S25.
Topic
Every article tagged Hacking Competition, newest first.

A recap of Pwn2Own Dublin 2025, where hackers earned over $1 million for 73 unique zero-day vulnerabilities, including a full compromise of the new Samsung Galaxy S25.
Keep reading

GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.

Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.

PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.