Pwn2Own Archives - Recon Bee

Tesla hacked, 37 zero-days demoed at Pwn2Own Automotive 2026

21Jan

By RBNo Comments

News

Tesla hacked, 37 zero-days demoed at Pwn2Own Automotive 2026

On the first day of the Pwn2Own Automotive 2026 competition, security researchers exploited 37 zero-days to hack the Tesla Infotainment System and earn $516,500. After successfully chaining an information leak and an out-of-bounds write vulnerability to obtain root capabilities on the Tesla Infotainment System in the USB-based attack category, Synacktiv Team won $35,000. Additionally, they obtained root-level code execution on the Sony XAV-9500ES digital media receiver by chaining three vulnerabilities, which earned them an extra $20,000 in cash. PetoWorks received $50,000 for chaining three zero-day bugs to obtain root privileges on a Phoenix Contact CHARX SEC-3150 charging controller, while Teams Fuzzware.io earned an additional $118,000 after hacking an Alpitronic HYC50 Charging ...

Sharepoint ToolShell attacks targeted orgs across four continents

22Oct

By RBNo Comments

News

Sharepoint ToolShell attacks targeted orgs across four continents

The ToolShell vulnerability (CVE-2025-53770) in Microsoft SharePoint has been used by hackers thought to be connected to China in attacks on government agencies, academic institutions, telecom service providers, and financial institutions. The security issue affects on-premise SharePoint servers and was published as an actively exploited zero-day on July 20, after various hacking groups related to China used it in massive attacks. Microsoft delivered emergency upgrades the next day. The vulnerability is a workaround for CVE-2025-49706 and CVE-2025-49704, two vulnerabilities that researchers from Viettel Cyber Security had shown off at the Pwn2Own Berlin hacking competition in May. It may be used remotely without authentication to execute code and gain complete file system access. ...

Windows 11 and Red Hat Linux hacked on first day of Pwn2Own

16May

By RBNo Comments

News

Windows 11 and Red Hat Linux hacked on first day of Pwn2Own

Security researchers who successfully demonstrated zero-day attacks for Windows 11, Red Hat Linux, and Oracle VirtualBox were given $260,000 on the first day of Pwn2Own Berlin 2025. After Pumpkin from the DEVCORE Research Team took use of an integer overflow vulnerability to make $20,000, Red Hat Enterprise Linux for Workstations became the first to be classified as a local privilege escalation. By combining a use-after-free with an information leak, Hyunwoo Kim and Wongi Lee were also able to gain root access on a Red Hat Linux device; however, one of the exploited vulnerabilities was an N-day, which resulted in a bug collision. Then, Chen Le Qi of STARLabs SG received $30,000 for a chain of exploits that escalated access to SYSTEM on a Windows 11 system by combining an integer ...

QNAP fixes NAS backup software zero-day exploited at Pwn2Own

30Oct

By RBNo Comments

News

QNAP fixes NAS backup software zero-day exploited at Pwn2Own

During the Pwn2Own Ireland 2024 competition, security researchers used a significant zero-day vulnerability that QNAP has fixed to hack a TS-464 NAS device on Thursday. The company's disaster recovery and data backup product, HBS 3 Hybrid Backup Sync version 25.1.x, has an OS command injection vulnerability that is the source of the security hole, which has been tracked as CVE-2024-50388. HBS 3 Hybrid Backup Sync has reportedly been impacted by an OS command injection vulnerability. According to a security alert released by QNAP on Tuesday, if the vulnerability is exploited, remote attackers may be able to carry out arbitrary operations read more about QNAP fixes NAS backup software zero-day exploited at Pwn2Own. Get up to date on the latest cybersecurity news and enhance your kn...