Pwn2Own is a hacking competition where researchers demonstrate software and device vulnerabilities, helping vendors identify flaws and improve security.
Search across headline titles and summaries.
Background for this topic.
Pwn2Own is a sanctioned hacking competition in which security researchers exploit specified software, devices, or other technology under controlled rules for cash prizes. Targets vary by edition and may include browsers, operating systems, virtualization, mobile devices, enterprise applications, vehicles, or industrial systems. Winning attempts commonly use previously undisclosed vulnerabilities, sometimes chaining several flaws to achieve code execution, sandbox escape, or privilege escalation.
Its security value is that it produces evidence that a vulnerability can be exploited against a real target, rather than merely theoretical findings. Organizers coordinate disclosure with affected developers, who can investigate and issue fixes or mitigations. Security teams should monitor related advisories, identify whether their deployed versions are affected, and prioritize patching when a demonstrated exploit involves an exposed attack surface or requires limited user interaction. Competition results do not mean every instance is exploitable in every environment, and technical exploit details may remain restricted until remediation is available.
The Pwn2Own Ireland 2025 hacking competition has ended with security researchers collecting $1,024,750 in cash awards after exploiting 73 zero-day vulnerabilities. [...]
Pwn2Own Ireland kicked off on Oct. 21 and what researchers found continued to highlight how secure development practices are lacking across the industry.
Security researchers collected $792,750 in cash after exploiting 56 unique zero-day vulnerabilities during the second day of the Pwn2Own Ireland 2025 hacking competition. [...]
On the first day of Pwn2Own Ireland 2025, security researchers exploited 34 unique zero-days and collected $522,500 in cash awards. [...]