InfoSecBulletin Cybersecurity for mankind
During the first day of the Pwn2Own Ireland 2025 hacking contest by Trend Micro’s Zero Day Initiative, participants earned $522,500 for their exploits. 34 new vulnerabilities have been used to hack printers, NAS devices, routers, and smart home products.
The top prize of $100,000 was given in the ‘SOHO Smashup’ category, which involves exploits on two device types. Researchers linked exploits for the QNAP Qhora-322 router and the QNAP TS-453E NAS device.
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
500+ critical infrastructure hit by Medusa ransomware
Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks
Apple Patches 28 Security Flaws in macOS, iOS, and iPadOS
DoNot (APT-C-35) Targeting Bangladesh Military Personnel
McDonald’s, Vodafone Affected by Azure Theft Campaign Exposing Millions of Records
NIST to Modernize NVD in the Age of Artificial Intelligence
Another significant reward, $50,000, was paid out for a Synology ActiveProtect Appliance DP320 exploit. The same amount was also earned for a Sonos Era 300 smart speaker hack. Other NAS device exploits, targeting Synology and QNAP products, earned researchers $40,000 each.
ZDI awarded $40,000, $20,000, and $12,500 for vulnerabilities in the Home Assistant Green device. Exploits on the Philips Hue Bridge earned $40,000 and $20,000. Hacking Canon and HP printers earned researchers $20,000 and $10,000.
Pwn2Own Ireland 2025 will run until Thursday, when a researcher will show a zero-click exploit for WhatsApp to try to win $1 million.
Over $1 million was awarded at Pwn2Own Ireland 2024 for exploits in cameras, printers, NAS devices, smart speakers, and smartphones.
