InfoSecBulletin Cybersecurity for mankind
During the first day of the Pwn2Own Ireland 2025 hacking contest by Trend Micro’s Zero Day Initiative, participants earned $522,500 for their exploits. 34 new vulnerabilities have been used to hack printers, NAS devices, routers, and smart home products.
The top prize of $100,000 was given in the ‘SOHO Smashup’ category, which involves exploits on two device types. Researchers linked exploits for the QNAP Qhora-322 router and the QNAP TS-453E NAS device.
FortiSandbox, FortiOS, FortiProxy ZTNA flaws unveil, while Fortigate firewall actively exploited
Microsoft Patch Tuesday September 2026 Fixed 973 Flaws Fixed, 2 Zero-Days
A single call: ShinyHunters Gained Access to 6 Million Customers’ Records
The first zero-click worm to spread through WeChat calls across iOS and Android
USA Bimbo Bakeries Confirms Data Stolen in Oracle EBS Zero-Day Attack
ALERT
Roundcube Webmail fixes 12 security flaws, including zero-click XSS and SSRF bypass
New HOOKEDGE Backdoor Deployed by Hackers in European Espionage
Hackers Exploiting MikroTik RouterOS Flaw Gaining Network Access
CrowdStrike launches SafeMind, the first agentic cybersecurity solution for defenders
Claude, DeepSeek, and Qwen AI agents combinedly used to hit gov.t across Asia
Another significant reward, $50,000, was paid out for a Synology ActiveProtect Appliance DP320 exploit. The same amount was also earned for a Sonos Era 300 smart speaker hack. Other NAS device exploits, targeting Synology and QNAP products, earned researchers $40,000 each.
ZDI awarded $40,000, $20,000, and $12,500 for vulnerabilities in the Home Assistant Green device. Exploits on the Philips Hue Bridge earned $40,000 and $20,000. Hacking Canon and HP printers earned researchers $20,000 and $10,000.
Pwn2Own Ireland 2025 will run until Thursday, when a researcher will show a zero-click exploit for WhatsApp to try to win $1 million.
Over $1 million was awarded at Pwn2Own Ireland 2024 for exploits in cameras, printers, NAS devices, smart speakers, and smartphones.
