{"id":380379,"date":"2026-10-09T01:24:00","date_gmt":"2026-10-09T08:24:00","guid":{"rendered":"https:\/\/cms-articles.softonic.io\/en\/?p=380379"},"modified":"2026-10-09T01:24:21","modified_gmt":"2026-10-09T08:24:21","slug":"google-pixel-10-hacked-three-times-at-pwn2own-ireland-2026-560000-in-rewards","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/google-pixel-10-hacked-three-times-at-pwn2own-ireland-2026-560000-in-rewards\/","title":{"rendered":"Google Pixel 10 hacked three times at Pwn2Own Ireland 2026: $560,000 in rewards"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Pwn2Own Ireland 2026 is over, and the hacking contest turned up <strong>98 zero-days<\/strong> while paying out more than $1.2 million, according to its published results. The bugs showed up across smartphones, printers, smart speakers, smart-home hubs, coding tools, cloud databases, and even a connected wellness device.<\/p>\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" alt=\"Malwarebytes Anti-Malware\" src=\"\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Malwarebytes Anti-Malware<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/malwarebytes-anti-malware.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">Download<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--0\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"0\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\"><\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/malwarebytes-anti-malware.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/en.softonic.com\/articles\/google-pixel-10-faces-performance-challenges-against-pro-models\" rel=\"noopener\">Google\u2019s Pixel 10<\/a> drew the most attention. Contest results show <strong>three successful attacks<\/strong> against it, worth more than $560,000 combined.<\/p>\n\n<p class=\"wp-block-paragraph\">Ikotas Labs took home <strong>$300,000<\/strong> for a remote exploit chain. Tim Becker and Yves Bieri earned $150,000 for a separate chain, though that payout was cut because part of it relied on a known bug. Dimitrios Valsamaras and Ken Gannon collected $112,500 for a third chain that mixed a zero-day with a known flaw, which is how Pwn2Own reduces rewards when researchers don\u2019t bring a fully original set of bugs.<\/p>\n\n<p class=\"wp-block-paragraph\">The rest of the board was busy too. The published results list a Samsung Galaxy S26 hack for about <strong>$30,000<\/strong>, a Home Assistant Green compromise for roughly the same amount, a Sonos Era 300 hit for $50,000, Lexmark and Brother printer hacks at $20,000 each, a Garmin Index BPM breach at $20,000, and coding and cloud database targets in the $40,000 range.<\/p>\n\n<p class=\"wp-block-paragraph\">If you use any of those products, pay attention. Vendors now get the exploit details privately under the usual <strong>90-day patch window<\/strong>. One other detail from the published results stands out: nobody took a shot at the $300,000 Apple iPhone 17 or <a href=\"https:\/\/whatsapp.en.softonic.com\/\" rel=\"noopener\">WhatsApp<\/a> targets.<\/p>\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" alt=\"Avast Free Antivirus\" src=\"https:\/\/images.sftcdn.net\/images\/t_app-icon-s\/p\/2d9f9134-96d0-11e6-bf8f-00163ec9f5fa\/2365773463\/avast-icon.webp\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Avast Free Antivirus<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/avast.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">Download<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--0\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"0\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\"><\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/avast.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>Pwn2Own Ireland 2026 is over, and the hacking contest turned up 98 zero-days while paying out more than $1.2 million, according to its published results. The bugs showed up across smartphones, printers, smart speakers, smart-home hubs, coding tools, cloud databases, and even a connected wellness device. Google\u2019s Pixel 10 drew the most attention. Contest results &hellip; <a href=\"https:\/\/cms-articles.softonic.io\/en\/google-pixel-10-hacked-three-times-at-pwn2own-ireland-2026-560000-in-rewards\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Google Pixel 10 hacked three times at Pwn2Own Ireland 2026: $560,000 in rewards&#8221;<\/span><\/a><\/p>\n","protected":false},"author":9349,"featured_media":380378,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-380379","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/380379","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9349"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=380379"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/380379\/revisions"}],"predecessor-version":[{"id":380380,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/380379\/revisions\/380380"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/380378"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=380379"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=380379"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=380379"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=380379"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=380379"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=380379"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}