Three Remote Hacks Hit a Fully Patched Pixel 10
At Pwn2Own Ireland, three teams broke into a fully patched Google Pixel 10 over the network on the same day, splitting $562,500 in prizes.
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
At Pwn2Own Ireland, three teams broke into a fully patched Google Pixel 10 over the network on the same day, splitting $562,500 in prizes.

Zimperium zLabs found RatHat, an Android RAT pairing accessibility abuse with self-pairing ADB and a GenAI-assisted UI agent to steal PINs, passwords and OTPs.

Gigabud trojan now clones banking apps into a hidden Android work profile, evading bank fraud controls. Indonesia saw nearly $1M in losses.

Apple's first foldable is here. iPhone Duo pairs a 5.4-inch outer display with a 7.6-inch inner display, runs the A20 Pro chip, and starts at RM9,499.

Needle 2 is a 45M-parameter tool-calling model in a 14MB binary that runs a full session in 28MB of RAM. No GPU, no cloud, no problem.