The eighteenth annual CanSecWest security conference is underway in downtown Vancouver, Canada, where researchers are competing in the 11th Pwn2Own computer hacking contest for over $2 million in prizes.

Day one results have already been published over at the Zero Day Initiative website, with a couple of successful Mac-related exploits already appearing in the list of achievements.

IMG 0994


Samuel Groß of phoenhex returned to Pwn2Own to successfully hack Apple's desktop Safari browser. Groß used a JIT optimization bug in Safari, a macOS logic bug, and a kernel overwrite to execute code to successfully exploit the browser, earning himself $65,000 and six points towards Master of Pwn. The exploit also caused a text-based message to appear on a MacBook Pro's Touch Bar.

The achievement harks back to Groß's similar success at last year's event, where he targeted Safari with an escalation to root on macOS that allowed him and Niklas Baumstark to scroll a message on a MacBook Pro Touch Bar, earning them $28,000.

Another Safari exploit at Pwn2Own 2018 was initiated by Richard Zhu, who managed to bypass iPhone 7 security protocols with the help of two Safari bugs at November's Pwn2Own mobile event. However, this time Zhu failed to get his exploit chain working within the allotted 30-minute time limit.

IMG 0955

Richard Zhu at Pwn2Own 2018 (Image via ZDI)

Unfazed, Zhu returned to wow the crowd with a Microsoft Edge exploit that used two use-after-free (UAF) bugs in the browser and an integer overflow in the kernel to successfully run his code with elevated privileges. The dramatic effort against the ticking clock earned him $70,000 and seven points towards Master of Pwn.

Apple representatives have attended the Pwn2Own contest in the past, and affected parties are made aware of all security vulnerabilities discovered during the contest so that they can be patched in future software updates.

The participating teams earned a total of $162,000 in prizes on day one, and the event resulted in three Apple bugs, two Oracle bugs, and three Microsoft bugs. Pwn2Own day two begins today at 10:00 a.m. Pacific and will involve additional exploit attempts against macOS and Safari.

Update: On Pwn2Own Day 2, MWR Labs, a team consisting of Alex Plaskett, Georgi Geshev, and Fabi Beterke successfully used two Safari vulnerabilities to execute a sandbox escape. For the feat, they earned $55,000 and 5 Master of Pwn points.

In a separate attempt, Markus Gaasedelen, Nick Burnett, Patrick Biernat of Ret2 Systems, Inc. tried to target Safari using an elevation of privileges kernel exploit, but the team was unable to get the exploit working in the allotted time period.

Tag: Pwn2Own

Top Rated Comments

Kabeyun Avatar
42 months ago
Excellent. Bug bounties are great for everyone.
Score: 11 Votes (Like | Disagree)
now i see it Avatar
42 months ago
If guys using a laptop in their bedrooms can hack a Mac & iPhone during their spare time, one can only wonder what the NSA is capable of
Score: 3 Votes (Like | Disagree)
DrJohnnyN Avatar
42 months ago
Nice payday.
Score: 3 Votes (Like | Disagree)
Kabeyun Avatar
42 months ago
If guys using a laptop in their bedrooms can hack a Mac & iPhone during their spare time, one can only wonder what the NSA is capable of
Afaik, they’re hiring the same guys with laptops in their bedrooms.
Score: 2 Votes (Like | Disagree)
DeepIn2U Avatar
42 months ago
Hmph. And some macrumors members don’t understand the love for the TouchBar ;)

If guys using a laptop in their bedrooms can hack a Mac & iPhone during their spare time, one can only wonder what the NSA is capable of
One cannot understand why Apple doesn’t hire these people to work on Apple services and products. I really hope a Pawn team figures out and demonstrates a Siri hack and then Siri gets rapid advancement as a result.

Then again maybe their too busy having fun hacking Alexa:

Random creepy laughs,
Random answering questions or denying tasks in quite bedroom at 3AM,
Executing commands nobody in hearing range ever gave.

Yeah not in any need for a connected smart speaker. I already have insomnia I don’t need schizophrenia induced trauma to go along with it lol.
Score: 2 Votes (Like | Disagree)
SecuritySteve Avatar
42 months ago
Give me one good reason why do they need contests when each of them can report their hacking individually and earn more?
This entire "contest" is an illusion. The exploits that they are showing are not discovered on the spot, they are the product of months of research and development. However this dramatic fashion of unveiling them gives the researchers fame and publicity, and forces the vendor to acknowledge and fix the vulnerabilities rather than privately kicking the can down the road for potentially a year at a time.
Score: 2 Votes (Like | Disagree)

Top Stories

apple music change forever

Apple Music Teaser: 'Get Ready – Music is About to Change Forever'

Sunday May 16, 2021 2:39 pm PDT by
The Browse tab in the Music app across Apple's platforms has started displaying a prominent teaser hinting at an upcoming major announcement for Apple Music. Under the heading "Coming soon," the headline says "Get ready – music is about to change forever." An accompanying "Tune-In Video" simply shows an animated Apple Music logo. Rumors have indicated that Apple is preparing to launch a...
m1 ipad pro early customer

M1 iPad Pro Arrives Early for Lucky Customer

Saturday May 15, 2021 11:57 pm PDT by
Days ahead of their expected launch and seemingly before official review embargoes lift, one lucky customer has already gotten their hands on the brand new 12.9-inch M1 iPad Pro. Reddit User PeterDragon50 Posted on Reddit, u/PeterDragon50 has already received their 12.9-inch iPad Pro through retailer Nebraska Furniture Mart. The Reddit user says they placed their order when pre-orders...
2021 mbp hdmi slot 3d

2021 MacBook Pro Leaks Confirm Returning MagSafe and Ports

Friday May 14, 2021 3:06 am PDT by
Apple's upcoming MacBook Pro models are expected to feature a number of major changes such as larger display options and powerful new Apple silicon chips. Among the more surprising updates to this year's MacBook Pro models is the return of three ports that have been missing from the machines for over five years. Expected to come in 14- and 16-inch sizes, the 2021 MacBook Pro models are...
Twitter Feature

Twitter's 'Blue' Subscription Service May Cost $2.99, Will Offer Undo Tweet Option

Saturday May 15, 2021 11:08 am PDT by
Twitter has been working on some kind of subscription service since last summer, and Jane Manchun Wong, who often digs into new features coming in apps, has shared details on just what Twitter is exploring. Twitter's subscription service could be called Twitter Blue, and at the current time, it's priced at $2.99 per month. There will be a "Collections" section that allows users to save and...
AirPods Lineup Not Lossless Feature

AirPods, AirPods Max and AirPods Pro Don't Support Apple Music Lossless Audio

Monday May 17, 2021 10:44 am PDT by
Apple today announced that starting in June, Apple Music songs will be available to stream in Lossless and Hi-Resolution Lossless formats, but lossless audio won't be supported on the AirPods, AirPods Max, or AirPods Pro. Apple's Lossless Audio is encoded as Apple Lossless Audio Codec files, with lossless quality ranging from 16-bit 44.1 kHz playback to 24-bit 48 kHz playback and Hi-Res...
Top Stories 60 Feature

Top Stories: M1 iMac Benchmarks, iPhone Battery Life Tips, Colorful MacBook Air?

Saturday May 15, 2021 6:00 am PDT by
Anticipation is building for the new iMac and iPad Pro models, which have started shipping out ahead of a launch around May 21. Benchmarks for the new machines are starting to come in, and the M1 chips inside of them are registering at around the same figures seen with other M1-based Macs, making for significant upgrades over previous-generation models. This week also saw some rumors about...
apple music spatial audio

Apple Music Launching Spatial Audio With Dolby Atmos and Lossless Audio in June at No Extra Cost

Monday May 17, 2021 6:06 am PDT by
Apple today announced that Apple Music will be gaining support for Spatial Audio with Dolby Atmos at no additional cost starting in June. At launch, Apple Music subscribers will have access to thousands of songs in Spatial Audio from artists like J Balvin, Gustavo Dudamel, Ariana Grande, Maroon 5, Kacey Musgraves, The Weeknd, and many others. Apple says this feature will provide a...
General Music and AirPod 3 Feature

Rumor: Apple to Announce Third-Generation AirPods and HiFi Apple Music Tier on May 18

Thursday May 13, 2021 10:32 pm PDT by
A new rumor suggests that Apple will announce the third-generation AirPods and the recently rumored HiFi, or high-fidelity Apple Music tier, on Tuesday, May 18, via a press release on its website. The new rumor comes from Apple YouTuber Luke Miani who shared the alleged exclusive news with the AppleTrack website. According to the YouTuber, Apple plans to release the next-generation AirPods...
apple music logo

Apple Music Teaser References 'Hi-Res Lossless' and 'Dolby Atmos'

Sunday May 16, 2021 4:04 pm PDT by
Earlier today, Apple Music began teasing a special announcement with the tagline "Get Ready – Music is About to Change Forever." This teaser comes amid a rumor that Apple is preparing to announce the third-generation AirPods alongside a HiFi, or lossless audio streaming tier for Apple Music on Tuesday, May 18. Now, references to "Apple Lossless," "Free Lossless," "Hi-Res Lossless," and...
tile amazon sidewalk integration

Apple Says Tile Trackers Sold Poorly in Apple Stores

Friday May 14, 2021 4:53 am PDT by
Earlier last month, Spotify, Tile, and Match (owner of Tinder), testified at an app store antitrust hearing spearheaded by the U.S. Senate. During the hearing, Spotify called Apple's App Store "an abusive power grab," while Tile said Apple uses its platform to "unfairly limit competition for its products." Now, in response to their testimonies, Apple's vice president and chief compliance...