Risky Bulletin: Pwnie Awards 2026 winners

A delayed release of the Pwnie Awards 2026 results has finally surfaced, thanks to a leaked stream link shared by TechCrunch, resolving weeks of uncertainty about the Black Hat & DEFCON ceremony outcomes. The awards recognized critical security research such as ITScape's KVM/arm64 guest-to-host escape (CVE-2026-46316) for Best RCE and CopyFail for Best Privilege Escalation Bug. Microsoft received the Lamest Vendor Response award for its handling of the Nightmare Eclipse disclosure, while Meta faced criticism for an Instagram account takeover enabled by AI prompt injection.