{"id":512546,"date":"2023-10-25T12:36:24","date_gmt":"2023-10-25T10:36:24","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=512546"},"modified":"2023-10-25T12:38:33","modified_gmt":"2023-10-25T10:38:33","slug":"hacking-teams-win-r1-4-million-for-exploiting-galaxy-s23-zero-day","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/512546-hacking-teams-win-r1-4-million-for-exploiting-galaxy-s23-zero-day.html","title":{"rendered":"Hacking teams win R1.4 million for exploiting Galaxy S23 zero-day"},"content":{"rendered":"<p>The Pwn2Own hacking competition in Toronto this year saw two teams successfully exploit zero-day vulnerabilities on Samsung&#8217;s Galaxy S23 smartphone, Bleeping Computer <strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/samsung-galaxy-s23-hacked-twice-on-first-day-of-pwn2own-toronto\/\" target=\"_blank\" rel=\"noopener\">reports<\/a><\/strong>.<\/p>\n<p>Combined, the two teams earned $75,000 (R1.4 million), and other hacking teams demonstrated exploits and vulnerability chains in Xiaomi&#8217;s 13 Pro, as well as printers, smart speakers, and surveillance cameras.<\/p>\n<p>Pentest Limited was the first team to successfully demonstrate a zero-day on the Samsung Galaxy S23 by exploiting improper input validation weaknesses to gain code execution.<\/p>\n<p>They took home $50,000 (R950,000) and five Master of Pwn points for being the first to demonstrate a zero-day for the device successfully.<\/p>\n<p>STAR Labs SG almost successfully demonstrated a zero-day for the device, earning it five Master of Pwn points. However, it only got a $25,000 (R475,000) cash reward.<\/p>\n<p>&#8220;While only the first demonstration in a category wins the full cash award, each successful entry claims the full number of Master of Pwn points,&#8221; the Pwn2Own organisers said.<\/p>\n<p>&#8220;Since the order of attempts is determined by a random draw, those who receive later slots can still claim the Master of Pwn title \u2014 even if they earn a lower cash payout.&#8221;<\/p>\n<p>In total, $438,750 (R8.4 million) was awarded to teams that successfully demonstrated zero-day vulnerabilities on the first day of the competition.<\/p>\n<p>However, the biggest prizes have yet to come.<\/p>\n<p>Teams can earn a cash prize of up to $300,000 (R5.7 million) for successfully hacking the iPhone 14 and up to $250,000 (R4.8 million) for Google&#8217;s Pixel 7.<\/p>\n<hr \/>\n<h3 class=\"my-4\">Now read: <a href=\"https:\/\/mybroadband.co.za\/news\/security\/512268-cyberattackers-put-malware-on-blockchain-to-stop-removal.html\" rel=\"bookmark\">Cyberattackers put malware on blockchain to stop removal<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>The best cash prizes are yet to come. Hacking teams still stand a chance to win up to R5.7 million for hacking the iPhone 14 and R4.8 million for the Google Pixel 7.<\/p>\n","protected":false},"author":341076,"featured_media":411756,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[90266,9253,82513,90268],"class_list":["post-512546","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-pentest-limited","tag-pwn2own","tag-samsung-galaxy-s23","tag-star-labs-sg"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/512546"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341076"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=512546"}],"version-history":[{"count":0,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/512546\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/411756"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=512546"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=512546"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=512546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}