Security Researchers Use Wi-Fi and Safari Exploits to Breach iPhone 7 at Annual Mobile Pwn2Own Contest

trend micro's annual mobile pwn2own contest took place in tokyo, japan today @ pacsec security conference, , security researchers spent day attempting hack iphone 7, samsung galaxy s8, google pixel, , huawei mate 9 pro in effort win prizes totaling more $500,000.

​

apple's iphone 7, running ios 11.1, latest version of ios 11 operating system, breached twice tencent keen security lab. first hack targeted wi-fi bug , won team $110,000 , 11 master of pwn points, while second hack targeted safari browser , earned tencent keen security lab $45,000 , 12 master of pwn points.

quote

they used total of 4 bugs gain code execution , escalate privileges allow rogue application persist through reboot. earned $60,000 wifi exploit , added $50,000 persistence bonus - total of $110,000 , 11 master of pwn points.

tencent keen security lab on clock once more targeted safari browser on apple iphone 7. took them few seconds demonstrate exploit, needed 2 bugs - 1 in browser , 1 in system service allow rogue app persist through reboot. second finisher in browser category, earned half of cash award @ $45,000, still earned full 13 master of pwn points.

click expand...

security researcher richard zhu able leverage 2 bugs exploit safari browser , escape sandbox run code on iphone 7, earning him $25,000 , 10 master of pwn points.

along iphone 7, researchers able find exploits samsung galaxy s8 , huawei mate 9 pro, earning total of $350,000.

trend micro hosts pwn2own in effort promote 0 day initiative, designed reward security researchers disclosing major vulnerabilities tech companies apple , google.

pwn2own continues on through tomorrow, additional exploits may uncovered. apple representatives have been known attend pwn2own competitions in past years, , vulnerabilities discovered disclosed apple. company has 90 days produce patches ios-related bugs before they're publicly disclosed.

article link: security researchers use wi-fi , safari exploits breach iphone 7 @ annual mobile pwn2own contest

 

less 24 hours 11.1 , comes out

 

Forums News and Article Discussion MacRumors.com News Discussion

• iPhone
• Mac OS & System Software
• iPad
• Apple Watch
• Notebooks
• iTunes
• Apple ID
• iCloud
• Desktop Computers
• Apple Music
• Professional Applications
• iPod
• iWork
• Apple TV
• iLife
• Wireless