Contestants managed to “hack” the Samsung Galaxy s22 twice during the first day of the “Pwn2Own” hacking competition held in Toronto, Canada. The event was organized by Trend Micro’s Zero Day Initiative.
See also: Your ex can track you with Airtag!
The STAR Labs team was the first to successfully exploit a zero-day bug in the Samsung Galaxy S22 flagship device, performing an improper input validation , and did so on its third attempt, earning $50,000 and 5 Master of Pwn.
And another contestant, Chim, presented a successful exploit targeting the Samsung Galaxy S22 and was able to perform an improper input validation attack, earning $25,000 (50% of the prize for the second round targeting the same device) and 5 Master of Pwn points.
“The first winner of each objective will receive the full cash prize and the devices under test,” explain the competition organizers.
“For the second and subsequent rounds in each objective, all other winners will receive 50% of the prize, however, they will still earn full Master of Pwn points.”
According to the contest rules, in both cases, the Samsung Galaxy s22 phones were running the latest version of Android, with all available updates.
During this first day of the contest, contestants have also successfully “demonstrated” zero-day vulnerabilities in printers and routers from multiple vendors, including Canon, Mikrotik, NETGEAR, TP-Link, Lexmark, Synology and HP.
See also: Google Android: Millions of users at risk due to hacks
This year's competition, which focuses on consumer products, began on December 6 and ends on December 8. 26 teams are competing to successfully " hack " 66 devices across all categories. Security researchers participating in the Pwn2Own competition could target mobile phones, home automation hubs, printers, wireless routers , NAS (Network-attached storage) and other devices. All up to date with the latest updates and in their default configuration. Prizes The highest rewards, however, were behind the successful breach of the Google Pixel 6 and the Apple iPhone 13 , with the prize money being $200,000. Hacking Google and Apple devices can also offer a $50,000 bonus if the exploits are executed with kernel-level privileges , bringing the maximum prize for a given challenge to $250,000. For more information and the results of the competition, you can visit their website . On the second day of the competition, the Samsung Galaxy S22 will be tested again by hackers from vulnerability research firm Interrupt Labs. Source: bleepingcomputer.com
