#Pwn2Own Ireland returns for 2026! We've got lot's of targets and plan on lot's of good times on the Emerald Isle. We've got a new registration process, so please read the rules carefully to know what to expect. Check it out at www.zerodayinitiative.com/blog/2026/7/... #P2OIreland

Zero Day Initiative — Pwn2Own Ireland 2026 – New Targets and Categories

If you just want to read the rules, you can find them here .   Pwn2Own Ireland returns for 2026, and it’s the third year for this event in the Emerald Isle. Despite the dreary Irish skie...

zerodayinitiative.com

It took quite a bit to parse, but the Patch Report for June is alive. @dustinchilds.bsky.social ignored the France vs. Spain match just to figure out this record release and break it down for you. Check out what you may have missed at youtu.be/5m50_MRaisA

The Patch Report for July 2026

YouTube video by TrendAI Zero Day Initiative

youtu.be

It's landed. The bug apocalypse is upon us as #Microsoft releases patches for 620+ CVEs to go along with #Adobe's 88. @dustinchilds.bsky.social has done his best to make sense of it all. Read his analysis at www.zerodayinitiative.com/blog/2026/7/...

Zero Day Initiative — The July 2026 Security Update Review

Well folks. Here we are. The bug apocalypse has fully descended upon us. I’ll do my best to sort this out in some way meaningful, but this month’s release shows us the nay-sayers were right, and I’ve ...

zerodayinitiative.com

Our research team is back looking at CVE-2026-47291 - a CVSS 9.8 RCE bug in #Windows HTTP.sys. They show root cause and look at why detection may be just as hard as exploitation. www.zerodayinitiative.com/blog/2026/7/...

Zero Day Initiative — CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys

In this excerpt of a TrendAI Research Services vulnerability report, Yazhi Wang and Jonathan Lein of the TrendAI Research team detail a recently patched remote code execution bug in the Windows HTTP p...

zerodayinitiative.com

#Apple has joined #Adobe in patching more often. They released 37 CVEs yesterday. @dustinchilds.bsky.social wears his patch wrangler hat as he breaks down the release. www.zerodayinitiative.com/blog/2026/6/...

Zero Day Initiative — The June 2026 Apple Security Update Review

We’re back with our look at the Apple macOS and iOS security updates. As this is a new feature for us, please let us know your feedback on the blog. For Jun 2026, Apple released 37 unique CVEs acros...

zerodayinitiative.com

#Adobe is moving to a twice-monthly patch release as a result of frontier AI models finding bugs. Today, they released two Priority 1 patches for Cold Fusion and Campaign Classic (CVSS 10!). Neither under active attack. Read the announcement at

Protecting customers faster: How Adobe is responding to AI-accelerated vulnerability discovery | Adobe Security Blog

Effective July 14, 2026, Adobe is moving from monthly to twice-monthly publication of Adobe Security Bulletins and Advisories on the second and fourth Tuesday of each month.

blog.adobe.com

We've updated the look and feel of our website. The blog is under maintenance for now but will be up soon. Let us know if you find any bugs or issues. www.zerodayinitiative.com

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

No time to read the blog? Check out the Patch Report for June 2026. @dustinchilds.bsky.social breaks down this massive release and provides guidance on where to focus your resources. youtu.be/DEGxRsjwUaI

The Patch Report for June 2026

YouTube video by TrendAI Zero Day Initiative

youtu.be

Wow. Over 200 CVEs from #Microsoft and another 123 from #Adobe. It's a record-setting Patch Tuesday, but fear not! @dustinchilds.bsky.social has broken the release down and provides the details. Check out the blog athttps://www.zerodayinitiative.com/blog/2026/6/9/the-june-2026-security-update-review

Zero Day Initiative — The June 2026 Security Update Review

I’ve made it through Pwn2Own Berlin, had a little vacation, and now I’m back for Patch Tuesday. Microsoft and Adobe didn’t disappoint. In fact, they have heralded my return with the largest Patch Tues...

zerodayinitiative.com

Pwn2Own Berlin 2026 is in the books, and it was an amazing contest from start to finish. We awarded $1,129,250 for 47 unique 0-days. Join @dustinchilds.bsky.social and Vincent Lee as they recap the highlights and offer a preview of what's to come. youtu.be/SqeskOpUPQU

Wrapping Up Pwn2Own Berlin 2026: The Final Numbers

YouTube video by TrendAI Zero Day Initiative

youtu.be

Catch up with the happenings from #Pwn2Own day 3! Watch recap here https://youtu.be/czmHJ8oAsQY?si=cMb2O51f4TMlCdQQ

That's a wrap on Pwn2Own Berlin 2026! 🏆 $1,298,250 awarded. 47 unique 0-days. 3 days of absolute chaos. And talk about main character energy - congrats to DEVCORE for claiming Master of Pwn with 50.5 points and $505,000 - they never slowed down. See you next year! #Pwn2Own #P2OBerlin

Collision! While Byung Young Yi (@yibarrack) of Out Of Bounds successfully demonstrated their exploit of Anthropic Claude Code, the bug used had been previously disclosed. They still earn $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin

Mind blown alert 🤯! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG (@starlabs_sg) used a Memory Corruption bug to exploit VMware ESXi with the Cross-tenant Code Execution add-on, earning a sweeeeeet $200,000 and 20 Master of Pwn points. Full win let's go! #Pwn2Own #P2OBerlin

Booyah it's been confirmed! 🎉 splitline (@_splitline_) of DEVCORE Research Team chained 2 bugs to exploit Microsoft SharePoint, earning $100,000 and 10 Master of Pwn points. Massive aura farming this year at #P2OBerlin. Full win! #Pwn2Own

Wow what a fun way to wrap up the day! With TWO minutes to spare, Byung Young Yi (@yibarrack) of Out Of Bounds was able to exploit Anthropic Claude Code! If confirmed, they win $40,000 and 4 Master of Pwn points. They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin

MASSIVE AURA POINTS! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG was able to exploit VMware ESXi! If confirmed, they win $200,000 and 20 Master of Pwn points. They're off to the disclosure room to explain how they did it and seal the deal. #Pwn2Own #P2OBerlin

ATE AND LEFT NO CRUMBS! splitline (@_splitline_) of DEVCORE Research Team totally cooked and was able to exploit Microsoft SharePoint! If confirmed, they win $100,000 and 10 Master of Pwn points. They're skeddadling off to the disclosure room now to drop the lore. #Pwn2Own #P2OBerlin

The math is mathing and we are on the brink of a million dollars! Here's the last set of attempts for the day. Stay tuned or stay square #Pwn2Own #P2OBerlin

Confirmed! Hyunwoo Kim (@v4bel) chained a use-after-free and uninitialized memory bug to escalate privileges on Red Hat Enterprise Linux for Workstations in the fourth round, earning $5,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin

Collision! Although successful on stage, Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security targeted Anthropic Claude Code, hitting a one-vulnerability collision with a previous attempt and earning $20,000 & 2 Master of Pwn points. #Pwn2Own

Unfortunately, Giuseppe Calì of Summoning Team (@SummoningTeam) could not get their exploit of VMware ESXi working within the time allotted. #Pwn2Own #P2OBerlin

Very nicely done! Emanuele Barbeno, Cyrill Bannwart, Yves Bieri, Lukasz D., Urs Mueller (@compasssecurity) of Compass Security were able to exploit Anthropic Claude Code! They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin

Success! Hyunwoo Kim (@v4bel) was able to exploit Red Hat Enterprise Linux for Workstations! If confirmed, they win $20,000 and 2 Master of Pwn points. They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin

Excelsior! Satoki Tsuji of Ikotas Labs, Inc. abused an external control to exploit OpenAI Codex and pop a host of calcs. He earns $20,000 and 4 Master of Pwn points. #Pwn2Own #P2OBerlin

Confirmed! Le Tran Hai Tung, dungnm and hieuvd of Viettel Cyber Security (@vcslab) used an integer overflow to escalate privileges on #Windows 11. Their 5th round win nets them $7,500 and 3 Master of Pwn points. #Pwn2Own #P2OBerlin

We have a collision! Sina Kheirkhah of Summoning Team used two bugs to exploit Red Hat Linux, but one of the bugs was previously known. He still earns $7,000 and 1.5 Master of Pwn points. #Pwn2Own #P2OBerlin

In a video highlight from Day Two, @orange_8361 of @d3vc0r3 exploits #Microsoft #Exchange with a little help from AI. He earns $200,000 and 20 Master of Pwn points. youtube.com/shorts/cq0he... #Pwn2Own #P2OBerlin

Pwn2Own Berlin 2026 Day 2 - DEVCORE vs Microsoft Exchange

YouTube video by TrendAI Zero Day Initiative

youtube.com

TRIPLE YAAAAAAAAAAA! That's 3 for 3 - what a legend 👑 Sina Kheirkhah (@SinSinology) of Summoning Team was able to exploit Red Hat Enterprise Linux for Workstations! Time for the disclosure room to dish the deets. #Pwn2Own #P2OBerlin