InfoSecBulletin Cybersecurity for mankind
The Zeroday Cloud hacking competition in London awarded $320,000 to researchers for showing serious remote code execution vulnerabilities in cloud infrastructure components. This is the first event focused on cloud systems, hosted by Wiz Research with Amazon Web Services, Microsoft, and Google Cloud.
Researchers achieved an 85% success rate in 13 hacking sessions, uncovering 11 zero-day vulnerabilities.
Bajaj Auto System Hit by a Ransomware Attack
Cisco Unified CM flaw CVE-2026-20230 exploited in attacks
LastPass says hackers stole customer data via Klue, supply chain breach
New Apple Exploit Bypasses Boot Defenses, Possibly Affects Millions of iPhones Worldwide
India’s Tata Electronics hit by cyber breach: Hacker target 630 GB record
Anthropic’s Mythos reportedly broke NSA classified systems in hours
OpenAI New Method “Deployment Simulation” Predicts AI Risks Before Deployment
AryStinger botnet infected thousands of D-Link routers globally
Hacker suspected of sending alerts across Brazil
CyberSentinel AI features 33 security tools like Nmap, SQLMap, and ZAP, utilizing Claude and GPT
Wiz said that $200,000 was awarded on the first day for finding vulnerabilities in Redis, PostgreSQL, Grafana, and the Linux kernel.
On the second day, researchers made $120,000 by exploiting vulnerabilities in Redis, PostgreSQL, and MariaDB, which are widely used databases for storing sensitive information.
The Linux kernel was breached due to a container escape flaw, enabling attackers to bypass isolation between cloud tenants and compromising cloud security.
Researchers at cybersecurity companies Zellic and DEVCORE were awarded $40,000 for their success.
Team Xint Code won the first Zeroday Cloud competition by successfully exploiting Redis, MariaDB, and PostgreSQL, earning $90,000 for their efforts. The awarded amount is just a small part of the $4.5 million prize pool available for researchers demonstrating exploits.
The eligible categories and products that had no exploits in the competition are AI (Ollama, vLLM, Nvidia Container Toolkit), Kubernetes, Docker, web servers (nginx, Apache Tomcat, Envoy, Caddy), Apache Airflow, Jenkins, and GitLab CE.
