Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

At Pwn2Own Ireland 2026 in Cork, three separate research teams successfully remote-hacked a fully patched Google Pixel 10 on October 8, with Trend Micro's Zero Day Initiative (ZDI) confirming all three entries as working exploits. Xint earned $150,000, a group led by Dimitrios Valsamaras received $112,500 for a chain combining a known bug with a zero-day, and Ikotas Labs took the top prize of $300,000 for a multi-bug chain, helping it secure the overall "Master of Pwn" title. The exploits reportedly worked through the phone's default browser or via NFC, Wi-Fi, Bluetooth or baseband radios, though technical details remain undisclosed while Google and other vendors get a 90-day window to patch before ZDI publishes them. The contest also saw Samsung's Galaxy S26 compromised in all seven attempts against it, alongside successful hacks of OpenAI's Codex, Oracle's Autonomous AI Database, printers from Lexmark, Canon and Brother, smart home gear including Sonos Era 300 and Philips Hue Bridge Pro, and Garmin's Index BPM, with total payouts exceeding $1.2 million across the event.