{"data":{"id":1659,"lang":"en","title":"Pwn2Own Berlin 2026 Day One Pays Out $523,000 for 24 Zero-Days as Hackers Crack Windows 11, Microsoft Edge and AI Platforms","summary":"Researchers earned $523,000 on day one of Pwn2Own Berlin 2026 with 24 zero-days across Windows 11, Microsoft Edge, NVIDIA and AI platforms like OpenAI Codex and LM Studio.","category":"technology","category_label":"Technology","published_at":"2026-05-16T14:01:38Z","updated_at":"2026-05-16T14:01:38Z","url":"https://techtools.cz/tools/news/article/1659-pwn2own-berlin-2026-day-one-pays-out-523-000-for-24-zero-days-as-hackers-crack","api_url":"https://techtools.cz/news-api/v1/articles/1659?lang=en","markdown_url":"https://techtools.cz/news-api/v1/articles/1659.md?lang=en","image_url":"https://www.bleepstatic.com/content/hl-images/2025/05/15/Pwn2Own_Berin.jpg","word_count":209,"reading_time_minutes":2,"sources":[{"url":"https://www.bleepingcomputer.com/news/security/windows-11-and-microsoft-edge-hacked-on-first-day-of-pwn2own-berlin-2026/","domain":"bleepingcomputer.com"},{"url":"https://www.thezdi.com/blog/2026/5/13/pwn2own-berlin-2026-day-one-results","domain":"thezdi.com"},{"url":"https://securityaffairs.com/192183/hacking/pwn2own-berlin-2026-day-one-523000-paid-out-ai-products-fall.html","domain":"securityaffairs.com"}],"translation":{"lang":"cs","id":1732,"title":"Pwn2Own Berlin 2026 vyplatil první den 523 000 dolarů za 24 zero-day chyb, hackeři prolomili Windows 11, Microsoft Edge i AI platformy","url":"https://techtools.cz/tools/news/clanek/1732-pwn2own-berlin-2026-vyplatil-prvni-den-523-000-dolaru-za-24-zero-day-chyb","api_url":"https://techtools.cz/news-api/v1/articles/1732?lang=cs"},"content":"Security researchers walked away with $523,000 in cash on the first day of Pwn2Own Berlin 2026 after demonstrating 24 unique zero-day vulnerabilities across browsers, operating systems, NVIDIA infrastructure and a new AI category. The contest, held at the OffensiveCon conference from May 14 to 16, has a total prize pool exceeding $1 million and is focused on enterprise technologies and artificial intelligence.\n\nThe standout result came from Orange Tsai of the DEVCORE Research Team, who chained four separate logic bugs to escape the Microsoft Edge sandbox in a single attempt, earning $175,000 and 17.5 Master of Pwn points. DEVCORE leads the competition with $205,000 so far, followed by Valentina Palmiotti at $70,000. Other successful exploits included a privilege escalation on Windows 11 by Angelboy and TwinkleStar03 ($30,000), Compass Security exploiting OpenAI Codex with a single CWE-150 bug ($40,000), and STARLabs SG chaining five bugs including SSRF and code injection against LM Studio ($40,000).\n\nThe AI category proved particularly fruitful, with researchers also taking down LiteLLM, marking the first major Pwn2Own where AI gateways and LLM tooling were treated as first-class targets alongside Windows and Edge. With the full schedule still ahead, 2026 is on track to exceed last year's Berlin edition payouts."}}