CuraSec

Learn archived

Three Teams Remotely Exploit Fully Patched Pixel 10 at Pwn2Own Ireland

2026-10-09 17:26 UTC · The Hacker News · read the source ↗ #pwn2own#mobile-exploit#google-pixel
  • Engineer — Learn: Remote code execution on a fully patched Pixel 10 is noteworthy research, but no patch or public PoC is available yet and mobile handsets are outside the typical cloud/AppSec engineering stack; monitor Google’s security bulletins for patches once they drop.
  • SOC/IR — Learn: Contest rules channel these exploits to the vendor privately, so there are no IOCs, public TTPs, or active exploitation signals to hunt; file as background awareness of Pixel attack surface until Google publishes details.
  • Leader — Learn: A controlled competition result with no active exploitation; if the org manages a corporate Pixel fleet, note that remote compromise of fully patched devices is now demonstrated and watch for Google’s patch announcement to assess MDM policy response.
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.