InfoSecBulletin Cybersecurity for mankind
Pwn2Own Automotive 2026 concluded with security researchers earning $1,047,000 for exploiting 76 zero-day vulnerabilities from January 21 to January 23.
The Pwn2Own Automotive hacking competition focused on car technologies and occurred this week in Tokyo, Japan, during the Automotive World conference.
Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw
Daily Cyber security update for 26.10. 2026
The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hackers focused on fully updated in-vehicle infotainment systems, electric vehicle chargers, and car operating systems during the contest.
Vendors have 90 days to create security fixes for zero-day exploits reported during the Pwn2Own contest before TrendMicro’s Zero Day Initiative makes them public.
Team Fuzzware.io won the Pwn2Own Automotive 2026 contest, earning $215,000, followed by Team DDOS with $100,750 and Synactiv with $85,000.
Fuzzware.io made $118,000 by hacking an Alpitronic HYC50 Charging Station, an Autel charger, and a Kenwood DNR1007XR navigation receiver on the first day.
They received $95,000 for finding zero-day vulnerabilities in the Phoenix Contact CHARX SEC-3150, ChargePoint Home Flex EV charger, and Grizzl-E Smart 40A EV charger on the second day. They also earned $2,500 for a bug collision while trying to root an Alpine iLX-F511 multimedia receiver on the final day of the contest.
The Synacktiv Team earned $35,000 for exploiting an out-of-bounds write flaw and an information leak to hack the Tesla Infotainment System using a USB-based attack on the first day of Pwn2Own.
The schedule and results for the third day are available here, as well as the complete schedule for Pwn2Own Automotive 2026. In Pwn2Own Automotive 2024, hackers earned $1,323,750 by exploiting 49 zero-day bugs and hacking a Tesla twice. Last year, they made $886,250 for 49 zero-days during Pwn2Own Automotive 2025.
