{"id":246456,"date":"2026-05-15T01:27:00","date_gmt":"2026-05-15T05:27:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/15\/pwn2own-berlin-2026-day-one-523000-paid-out-ai-products-fall\/"},"modified":"2026-05-15T06:40:11","modified_gmt":"2026-05-15T10:40:11","slug":"pwn2own-berlin-2026-day-one-523000-paid-out-ai-products-fall","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/15\/pwn2own-berlin-2026-day-one-523000-paid-out-ai-products-fall\/","title":{"rendered":"Pwn2Own Berlin 2026, Day One: $523,000 paid out, AI products fall"},"content":{"rendered":"

Pwn2Own Berlin 2026, Day One: $523,000 paid out, AI products fall<\/a><\/p>\n

https:\/\/securityaffairs.com\/192183\/hacking\/pwn2own-berlin-2026-day-one-523000-paid-out-ai-products-fall.html<\/a><\/p>\n

Publish Date: 2026-05-15 01:27:00<\/a><\/p>\n

Source Domain: securityaffairs.com<\/a><\/p>\n

Pwn2Own Berlin 2026, Day One: $523,000 paid out, AI products fall<\/h2>\n<\/p>\n

\t\t\t\t\t\t\t Pierluigi Paganini<\/span>
\n\t\t\t\t\t\t\t\"\"\/ May 15, 2026<\/span><\/p>\n

\t\t\t\t\t\t\"\"\/<\/p>\n

Pwn2Own Berlin 2026 day one saw 22 entries and 24 zero-days across major software, with researchers earning $523,000 in total rewards.<\/h2>\n

Day one of Pwn2Own Berlin 2026 featured 22 entries targeting widely used technologies, including browsers, operating systems, AI platforms, and NVIDIA infrastructure. By the end of the day, researchers demonstrated 24 unique zero-day vulnerabilities and earned a total of $523,000 in rewards, highlighting ongoing security risks across major enterprise and consumer software ecosystems.<\/p>\n

Orange Tsai of the DEVCORE Research Team made the headlines; he chained four separate logic bugs to escape the Microsoft Edge sandbox, a technically demanding achievement that earned him $175,000 and 17.5 Master of Pwn points in a single attempt. It was the kind of result that reminds you why this competition exists: not to embarrass vendors, but to surface flaws in controlled conditions before someone with worse intentions finds them first.<\/p>\n

\u201cOrange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points.\u201d reads the post by Zero Day Initiative.<\/p>\n

That’s my chain \u2014 a full chain w\/ logic bugs only! No memory corruption, no AI, and of course no collisions at all \ud83d\ude09 https:\/\/t.co\/Rv0AgeRgEJ<\/p>\n

\u2014 Orange Tsai \ud83c\udf4a (@orange_8361) May 14, 2026<\/p>\n

\"\"<\/p>\n

Windows 11 was successfully exploited three times during the day: by Angelboy and TwinkleStar03 of the DEVCORE Internship Program, by Marcin Wi\u0105zowski, and by Kentaro Kawane of GMO Cybersecurity. Each demonstrated a distinct privilege-escalation zero-day on a fully patched system, earning $30,000 apiece. Three different researchers, three different bugs, one operating system. That pattern alone is worth…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Pwn2Own Berlin 2026, Day One: $523,000 paid out, AI products fall https:\/\/securityaffairs.com\/192183\/hacking\/pwn2own-berlin-2026-day-one-523000-paid-out-ai-products-fall.html Publish Date: 2026-05-15…<\/p>\n","protected":false},"author":1,"featured_media":246457,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/securityaffairs.com\/wp-content\/uploads\/2026\/05\/image-43.png","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,24],"class_list":["post-246456","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-cybersecurity"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/246456"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=246456"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/246456\/revisions"}],"predecessor-version":[{"id":246458,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/246456\/revisions\/246458"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/246457"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=246456"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=246456"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=246456"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}