🎬 That’s a wrap on #TheSAS2026. Another thrilling ride comes to an end - and yes, it was just as good as it looks in this video. For the analytical minds in our field, a few numbers from this year: - 180 attendees - 26 countries - 30 talks in 2 days - 120 GB of video content shown - Over 100 shots consumed on stage - 190 audio-cassette badges - 14 teams in the SAS CTF final See you next year!

3/ Can your iPhone do this?

Galaxy S26 Ultra: untrusted_app → root. Introducing "Infinity Core": 6 vulns in the Linux kernel's core subsystems. Their impact spans Linux server LPE, container escape, and Android LPE. Details: github.com/V4bel/InfinityCor…

We just received a $250,000 Chrome Full Chain bonus! 🎉 We've claimed the second Full Chain bonus of 2026. Only two remain! Under the rules, every vulnerability had to be a non-duplicate 0-day, and the entire exploit chain had to be completed before any of them were patched. Huge thanks to @nebusecurity for discovering a V8 vulnerability in just a single day! Also, a big thank you to @_deayzl for collaborating with me on the V8 Heap Sandbox research. P.S. KVM escapes have been getting a lot of attention. I actually captured the Full VM Escape flag in KVMCTF about three months ago. Hopefully, I'll be able to share that research soon, too!

Boom chaka laka! Ben Koo (@kiddo_pwn) and Evangelos Daravigkas (@freddo_1337) of Team DDOS exploitted confirmed with a 5 bug chain, including 1 zero-day targeting Home Assistant Green with a pay out in $4,500 and 2 Master of Pwn points #Pwn2Own

$300,000!!!!! and 30 Master of Pwn points officially makes Ikotas Labs, Inc. the Master of Pwn as they jump to the top of the leader board after they chained multiple issues together to successfully exploit the Google Pixel 10 #Pwn2Own

5 :)

And the results are in! Nguyen Thanh Dat (@rewhiles), dungnm (@dungnm_) of Viettel Cyber Security (@vcslab) targeting Sonos Era 300 with 1 collision & 2 zero-days for a total of $10.5K and 4.25 Master of Pwn points #Pwn2Own

4!

3

2

1

We have a collision! Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) used 4 bugs to exploit the #Samsung Galaxy S26, but 3 were known by the vendor. They still earn 31,250 and 3.25 Master of Pwn points. #Pwn2Own

Boom! Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) kicks things off by successfully exploiting the #Samsung Galaxy S26. He's off to the disclosure room to provide the details. #Pwn2Own

SuperDiceCodeLovers finishes #3 in DEF CON CTF finals

We won RITSEC CTF 2026 as GPT 5.5 Internal Testing and L3akCTF 2026 as gpt 6.7 internal testing 🔥 Jokes aside, it was actually refreshing to play with humans instead of AI agents for once. Huge thanks to @ritsecclub and @l3akctf for organizing such fun events!

Does SELinux even matter in 2026? Anyway, here's a Red Hat Enterprise Linux 0day I originally prepared for Pwn2Own Berlin 2026. Unfortunately, I didn't get an entry token for it :<

DEFCON Qual 1st place! See you in Vegas, guys 🍻

Another collision! Although successful on stage, @rewhiles of Viettel Cyber Security (@vcslab) targeting Anthropic Claude Code in the Coding Agent category used a bug that was previously known to the vendor. They still earn $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin

Boom! @rewhiles of Viettel Cyber Security was able to exploit Anthropic Claude Code! If confirmed, they win $40,000 and 4 Master of Pwn points. They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin