Pwn2Own Berlin 2026: On the Ground with ZDI's Biggest AI Showdown Yet
ID: e550fac0-24ec-51a5-b59d-5352909adfd2
STIX ID: report--e550fac0-24ec-51a5-b59d-5352909adfd2
Feed Name: TrendAI Security Blog
Threat Score
Pwn2Own Berlin 2026 recap: multiple high-impact proof-of-concept vulnerabilities and exploit chains were demonstrated — including Exchange SYSTEM RCE, pre-auth SharePoint RCE, a Microsoft Edge sandbox escape, and a VMware ESXi guest-to-host cross-tenant escape — alongside numerous AI-product trust-boundary failures; TrendAI ZDI disclosed findings to vendors, published network-level protections, and recommends endpoint/process-lineage monitoring, segmentation, and runtime controls to mitigate risks.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.