> ## Content Index
> Fetch the complete content index at: https://www.privacyguides.org/llms.txt
> Use this file to discover other available public pages before exploring further.

# Hackers at Pwn2Own Ireland Exploit Zero Days in the Google Pixel 10, Samsung Galaxy S26, and OpenAI Codex
- URL: https://www.privacyguides.org/news/2026/10/13/hackers-at-pwn2own-ireland-exploit-zero-days-in-the-google-pixel-10-samsung-galaxy-s26-and-openai-codex/
- Published: 2026-10-13T00:42:02.000Z
- Updated: 2026-10-13T00:42:02.000Z
- Description: Hackers at the Pwn2Own Ireland hacking competition were able to chain together zero-day exploits and already known vulnerabilities to exploit the Google Pixel 10, the Samsung Galaxy S26, and OpenAI's Codex.
- Author: Fria Reyes
- Tags: News Briefs

Hackers at the [Pwn2Own Ireland](https://www.bleepingcomputer.com/news/security/hackers-earn-1262000-for-98-zero-days-at-pwn2own-ireland/) hacking competition were able to chain together zero-day exploits and already known vulnerabilities to exploit the Google Pixel 10, the Samsung Galaxy S26, and OpenAI's Codex.

The competition is run by [Zero Day Initiative](https://www.zerodayinitiative.com) and challenges security researchers to find vulnerabilities and exploit just about anything, from browsers, to smart home appliances, to phones. The point is to encourage vulnerabilities to be found before they're exploited in the wild by threat actors.

The hackers were required to run the latest software and firmware patches, since the focus is on finding new bugs.

The participants walked away with $1,262,000 in total, awarded for exploiting 98 zero-days. Researchers from Ikotas Labs ultimately won, with $361,000 earned over the course of the contest.

Of particular note this time was the Google Pixel 10, often recommended and touted for its security.

The iPhone 17 was available as a potential target as well, but no contestants registered to attack it.

The Pixel 10 was exploited three times on day three, providing the biggest payout all week.

The Galaxy S26 was exploited three times on day one, three times on day two, and one more time on the final day of the competition.

OpenAI's Codex was exploited with an argument injection bug on day 1.

Several smart home appliances and printers found themselves in the crosshairs as well.

The Philips Hue Bridge Pro was exploited a total of four times. A brother printer was exploited on day 3 after two previous failed attempts. A Canon imageFORCE 1643F copy machine was exploited twice.

While we know these exploits exist now, Zero Day Initiative doesn't disclose the technical details publicly until after a 90-day period, allowing the vendors time to patch the bugs.