InfoSecBulletin Cybersecurity for mankind
The Zeroday Cloud hacking competition in London awarded $320,000 to researchers for showing serious remote code execution vulnerabilities in cloud infrastructure components. This is the first event focused on cloud systems, hosted by Wiz Research with Amazon Web Services, Microsoft, and Google Cloud.
Researchers achieved an 85% success rate in 13 hacking sessions, uncovering 11 zero-day vulnerabilities.
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
Wiz said that $200,000 was awarded on the first day for finding vulnerabilities in Redis, PostgreSQL, Grafana, and the Linux kernel.
On the second day, researchers made $120,000 by exploiting vulnerabilities in Redis, PostgreSQL, and MariaDB, which are widely used databases for storing sensitive information.
The Linux kernel was breached due to a container escape flaw, enabling attackers to bypass isolation between cloud tenants and compromising cloud security.
Researchers at cybersecurity companies Zellic and DEVCORE were awarded $40,000 for their success.
Team Xint Code won the first Zeroday Cloud competition by successfully exploiting Redis, MariaDB, and PostgreSQL, earning $90,000 for their efforts. The awarded amount is just a small part of the $4.5 million prize pool available for researchers demonstrating exploits.
The eligible categories and products that had no exploits in the competition are AI (Ollama, vLLM, Nvidia Container Toolkit), Kubernetes, Docker, web servers (nginx, Apache Tomcat, Envoy, Caddy), Apache Airflow, Jenkins, and GitLab CE.
