Menu

Pwn2own

Pwn2Own

Pwn2Own: Zero-click Zoom Exploit Among Winners as Payout Record

,

17th April 2021, Kathmandu

The flagship Pwn2Own live hacking event has broken new ground on two fronts after total payouts surpassed $1 million and the competition’s first-ever solo female contestant notched a victory.

Some 23 participating teams and lone security researchers collectively earned a record $1,210,000 from a total prize pool of $1,500,000 over the three-day event, which is organized by Trend Micro’s Zero Day Initiative (ZDI).

The contest concluded yesterday with a three-way tie for the coveted Master of Pwn crown, with Team DEVCORE, security researcher ‘OV’, and Daan Keuper and Thijs Alkemade from Dutch infosec firm Computest sharing top spot on the leaderboard with 20 Master of Pwn points apiece.

Pwn2own 2021

Windows, Ubuntu, Zoom, Safari, MS Exchange Hacked at Pwn2own 2021

, ,

13th April 2021, Kathmandu

The Spring 2021 edition of the Pwn2Own hacking contest ended last week on April 8 with a three-way tie between researchers from Team Dev core, OV and Computes, Daan Keuper, and Thijs Alkemade.

A total of $ 1.2 million was awarded for 16 high-level achievements during the three-day virtual event hosted by the Zero Day Initiative (ZDI).

Targets with successful attempts included zoom operating systems, Apple Safari, Microsoft Exchange, Microsoft Teams, Parallels Desktop, Windows 10, and Ubuntu Desktop.

The technical details of the flaws are not yet clear, and Zoom has a 90-day window to resolve any issues before they are made public. We have contacted Zoom and will update the story if we get a response.

In a statement sharing the findings, the Dutch security firm said researchers “were then able to take almost complete control of the system and perform actions such as turning on the camera, turning on the microphone, reading e-mails, check the screen and download the browser history. “

Independent researcher Alisa e sage also made history as the first woman to win Pwn2Own after finding a bug in Parallels virtualization software. But she only got a partial victory for the reasons that the issue had been reported to ZDI prior to the event.