Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own

Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own
Pwn2Own Berlin 2026’s second day saw competitors earn $385,750 by exploiting 15 unique zero-day vulnerabilities across products such as Windows 11, Microsoft Exchange, Red Hat Enterprise Linux for Workstations, and the NVIDIA Container Toolkit. The event also featured notable AI-targeted exploits against Cursor AI and OpenAI Codex, with Orange Tsai, DEVCORE Research Team, and other researchers collecting major bounties. #Windows11 #MicrosoftExchange #RedHatEnterpriseLinux #NVIDIAContainerToolkit #CursorAI #OpenAICodex #OrangeTsai #DEVCORE

Keypoints

  • Competitors earned $385,750 on the second day of Pwn2Own Berlin 2026.
  • Fifteen unique zero-days were exploited across enterprise and AI products.
  • Orange Tsai won $200,000 for chaining bugs in Microsoft Exchange.
  • Windows 11, Red Hat Enterprise Linux, and NVIDIA Container Toolkit were also successfully hacked.
  • AI targets included Cursor AI and OpenAI Codex in separate demonstrations.

Read More: https://www.bleepingcomputer.com/news/security/pwn2own-day-two-hackers-demo-microsoft-exchange-windows-11-red-had-enterprise-linux-zero-days/