Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
Samsung Galaxy S26 hacked multiple times at Pwn2Own Ireland 2026, with researchers finding 45 zero-day vulnerabilities.
During Pwn2Own Ireland 2026, security researchers successfully exploited 45 unique zero-day vulnerabilities, earning over $232,500. The Samsung Galaxy S26 was a prime target, being compromised three times by different research teams. The competition emphasizes finding flaws in fully patched devices, with vendors given 90 days to patch before public disclosure.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Samsung Galaxy S26?
Get an email when a new story names Samsung Galaxy S26, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonSecurity researchers exploited 45 unique zero-day vulnerabilities at Pwn2Own Ireland, with the Samsung Galaxy S26 compromised three separate times by independent teams — despite being a fully patched, modern device. This underscores that even the latest patches cannot guarantee safety when undiscovered zero-day vulnerabilities exist in complex software stacks. The competition's 90-day disclosure policy creates a race between vendors and threat actors once flaws are publicly known. For organizations and consumers, this highlights the critical importance of layered security controls beyond simply keeping devices updated. Relying solely on vendor patch cycles as a security strategy leaves a dangerous window of exposure.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.