{"id":472999,"date":"2022-12-07T14:49:20","date_gmt":"2022-12-07T12:49:20","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=472999"},"modified":"2022-12-07T14:51:26","modified_gmt":"2022-12-07T12:51:26","slug":"hacking-teams-exploit-samsung-galaxy-s22-zero-day-twice-win-r1-3-million","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/472999-hacking-teams-exploit-samsung-galaxy-s22-zero-day-twice-win-r1-3-million.html","title":{"rendered":"Hacking teams exploit Samsung Galaxy S22 zero-day twice \u2014 win R1.3 million"},"content":{"rendered":"<p>The Pwn2Own hacking competition in Toronto this year saw two teams successfully exploit a zero-day vulnerability on Samsung&#8217;s Galaxy S22 smartphone, Bleeping Computer <strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/samsung-galaxy-s22-hacked-twice-on-first-day-of-pwn2own-toronto\/\" target=\"_blank\" rel=\"noopener\">reports<\/a><\/strong>.<\/p>\n<p>The Galaxy S22 devices ran the latest version of the Android operating system with all available updates installed.<\/p>\n<p>The first team to successfully exploit the flaw \u2014 STAR Labs \u2014 did so on their third attempt and managed to execute their improper input validation attack on the device.<\/p>\n<p>They took home $50,000 (R868,000) and five Master of Pwn points for their achievement.<\/p>\n<p>Chim \u2014 another competing team \u2014 was also able to successfully exploit a flaw relating to the Galaxy S22, enabling them to execute an improper input validation attack.<\/p>\n<p>Chim took home $25,000 (R434,000) and five Master of Pwn points.<\/p>\n<p>&#8220;The first winner on each target will receive the full cash award and the devices under test,&#8221; the competition&#8217;s organisers said.<\/p>\n<p>&#8220;For the second and subsequent rounds on each target, all other winners will receive 50% of the prize package, however, they will still earn the full Master of Pwn points.&#8221;<\/p>\n<p>During the competition&#8217;s opening day, contestants also exploited zero-day vulnerabilities in printers and routers from various manufacturers.<\/p>\n<p>The competition started on Tuesday, 6 December 2022, and will run until Friday, 9 December.<\/p>\n<p>The largest payouts are up for grabs in the mobile phone category, with organisers offering cash prizes of up to $200,000 (R3.5 million) for successfully hacking Apple iPhone 13 and Google Pixel 6 smartphones.<\/p>\n<p>Contestants also stand a chance to earn a $50,000 (R868,000) cash bonus for executing their attacks with kernel-level privilege.<\/p>\n<hr \/>\n<h2 class=\"my-4\">Now read:\u00a0<a href=\"https:\/\/mybroadband.co.za\/news\/security\/472399-serious-security-bugs-allowed-hackers-to-remotely-unlock-and-start-millions-of-cars.html\">Serious security bugs allowed hackers to remotely unlock and start millions of cars<\/a><\/h2>\n","protected":false},"excerpt":{"rendered":"<p>Two hacking teams executed improper input validation attacks on Samsung Galaxy S22 smartphones at Pwn2Own 2022 in Toronto.<\/p>\n","protected":false},"author":341076,"featured_media":473001,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27,17934],"tags":[72704,73126,9253,72828,81376],"class_list":["post-472999","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-smartphones","tag-apple-iphone-13","tag-google-pixel-6","tag-pwn2own","tag-samsung-galaxy-s22","tag-zero-day-vulnerability"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/472999"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341076"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=472999"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/472999\/revisions"}],"predecessor-version":[{"id":473063,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/472999\/revisions\/473063"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/473001"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=472999"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=472999"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=472999"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}