Security researchers exploited 32 zero-day vulnerabilities on the first day of the Pwn2Own Ireland 2026 hacking contest in Cork, earning $388,500 in prize money, according to BleepingComputer.

The highlight was Samsung’s Galaxy S26 flagship, hacked twice. Ikotas Labs remotely compromised the phone with a single email by chaining four flaws. VinSOC researchers topped the leaderboard, earning $40,000 for a seven zero-day chain against the Philips Hue Bridge Pro and another $40,000 for a five zero-day chain against Oracle’s Autonomous AI Database.

Researchers also demoed zero-days in LiteLLM, hacked Lexmark and Canon printers, took down OpenAI’s Codex coding agent with a single argument-injection bug, and exploited four flaws in the Sonos Era 300 smart speaker. An attempt on the Google Pixel 10 failed within the allotted time.

Organised by Trend Micro’s Zero Day Initiative, the contest runs October 6-9 across phones, smart home, printers, messaging, AI infrastructure and wellness devices. Vendors get 90 days to release fixes before the flaws are publicly disclosed.