[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZjBpqwVDW5ZIwCYr1jJqgtbOewaW7-HZzPGUD1rfSXQ":3},{"article":4,"iocs":53,"watch_terms":54,"solutions":55,"lesson":156},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"50ab6c0f-2f3d-48d8-889b-f862e0214efa","Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland","samsung-galaxy-s26-hacked-three-more-times-at-pwn2own-ireland-958c66","​​​On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities. [...]","During Pwn2Own Ireland 2026, security researchers successfully exploited 45 unique zero-day vulnerabilities, earning over $232,500. The Samsung Galaxy S26 was a prime target, being compromised three times by different research teams. The competition emphasizes finding flaws in fully patched devices, with vendors given 90 days to patch before public disclosure.","Samsung Galaxy S26 hacked multiple times at Pwn2Own Ireland 2026, with researchers finding 45 zero-day vulnerabilities.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fsamsung-galaxy-s26-hacked-three-more-times-at-pwn2own-ireland\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F07\u002FPwn2Own-Ireland.jpg","2026-10-08T06:32:16+00:00","2026-10-08T08:00:05.012786+00:00",8,[17,20,22,24,26,28],{"name":18,"type":19},"Samsung Galaxy S26","product",{"name":21,"type":19},"Sonos Era 300",{"name":23,"type":19},"Home Assistant Green",{"name":25,"type":19},"Oracle Autonomous AI Database",{"name":27,"type":19},"Google Pixel 10",{"name":29,"type":19},"iPhone 17","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,41,43,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21,23],{"controls":56,"vendors":144},[57,86,115],{"slug":58,"name":59,"problem":60,"products":61},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":87,"name":88,"problem":89,"products":90},"patch-management","Automated patch management","Known holes get closed in days, not months.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":116,"name":117,"problem":118,"products":119},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[120,128,136],{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":140,"product_name":141,"url":142,"description":143},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",[145,151],{"slug":146,"name":147,"logo_path":148,"roles":149},"google","Google","\u002Fvendor-logos\u002Fgoogle.png",[150],"affected",{"slug":152,"name":153,"logo_path":154,"roles":155},"oracle","Oracle","\u002Fvendor-logos\u002Foracle.png",[150],{"slug":157,"title":158,"body":159,"framework_refs":160,"framework_notes":170},"samsung-galaxy-s26-hacked-three-times-at-pwn2own-ireland-via-zero-day-exploits","Samsung Galaxy S26 Hacked Three Times at Pwn2Own Ireland via Zero-Day Exploits","Security researchers exploited 45 unique zero-day vulnerabilities at Pwn2Own Ireland, with the Samsung Galaxy S26 compromised three separate times by independent teams — despite being a fully patched, modern device. This underscores that even the latest patches cannot guarantee safety when undiscovered zero-day vulnerabilities exist in complex software stacks. The competition's 90-day disclosure policy creates a race between vendors and threat actors once flaws are publicly known. For organizations and consumers, this highlights the critical importance of layered security controls beyond simply keeping devices updated. Relying solely on vendor patch cycles as a security strategy leaves a dangerous window of exposure.",[161,162,163,164,165,166,167,168,169],"CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 10: Malware Defenses","NIST SP 800-124 Rev. 2: Guidelines for Managing the Security of Mobile Devices","NIST CSF ID.RA-1: Asset vulnerabilities are identified and documented","NIST CSF RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of technical vulnerabilities","ITIL 4: Change Enablement and Problem Management practices",{}]