Vietnamese Team Wins Pwn2Own Ireland with Over $1 Million in Rewards
In a thrilling display of cybersecurity prowess, a team from Vietnam emerged victorious at the inaugural Pwn2Own Ireland event, securing over $1 million in prizes from Trend Micro’s Zero Day Initiative (ZDI). The competition, held last week at Trend Micro’s Cork office, saw skilled hackers uncover and demonstrate exploits for over 70 zero-day vulnerabilities across various popular devices.
Viettel Cyber Security Takes Home Top Honors
Viettel Cyber Security, the winning team, pocketed a staggering $205,000 for successfully exploiting vulnerabilities in a range of products, including a TrueNAS Mini X enterprise storage solution, a Lorex 2K WiFi camera, a QNAP QHora-322 router, a Sonos Era 300 speaker, a HP Color LaserJet Pro MFP printer, a Lexmark CX331adwe printer, and a QNAP TS-464 NAS storage device.
The True Winners: End Users Benefit from Responsible Disclosure
While the financial rewards are impressive, the ultimate beneficiaries of Pwn2Own Ireland are the end users of the targeted products. The responsibly disclosed zero-day vulnerabilities will enable vendors to patch security flaws, ultimately leading to more secure devices and a safer digital landscape for everyone.
Meta Sponsors, but WhatsApp Remains Secure
The competition welcomed Meta as a sponsor for the first time this year, adding a new category dedicated to the WhatsApp Messenger app. Despite the rigorous testing, no team managed to find exploitable vulnerabilities in the popular messaging platform, showcasing its robust security measures.
Pwn2Own Tokyo Sets Sights on Automotive Security
The next Pwn2Own event is slated for January 22, 2025, in Tokyo. This time, the focus will be on automotive systems, with competitors challenged to uncover vulnerabilities in Tesla vehicles, in-vehicle infotainment (IVI) systems, electric vehicle chargers, and operating systems.
Following in the footsteps of previous victories, the competition highlights the growing importance of securing connected devices and critical infrastructure. By bringing together ethical hackers and tech companies, Pwn2Own plays a vital role in driving innovation and improving cybersecurity worldwide.