Pwn2Own Berlin 2026: 47 Zero‑Days Uncovered, $1.3M Payouts – What Defenders Need to Know

What Happened

During the three‑day Pwn2Own Berlin 2026 event, security researchers demonstrated 47 previously unknown zero‑day exploits across ten distinct target categories, earning a total of $1.298 million in payouts.

Impact

• Zero‑days span a range of software and hardware platforms, including operating systems, browsers, and embedded devices.
• Exploits were demonstrated in real‑time, showing the ability to bypass authentication, gain remote code execution, and exfiltrate data.
• Defenders with exposed systems in these categories face immediate risk of compromise.

Immediate Actions

• Identify all assets that fall into the ten target categories highlighted at the event.
• Apply vendor‑issued patches or mitigations as soon as they become available.
• Enable and enforce multi‑factor authentication wherever possible.
• Deploy intrusion detection and behavioral analytics to detect exploitation attempts.
• Share findings with threat‑intel feeds and internal incident‑response teams.

Long‑Term Recommendations

TrendAI’s presence at the event underscores the need to integrate AI‑driven security solutions that provide continuous visibility and automated threat detection. Consider adopting a zero‑trust architecture and regularly testing for zero‑days through red‑team exercises.

“The convergence of AI and security is accelerating, making proactive defense more critical than ever.”