Hackers exploit 34 zero-days on first day of Pwn2Own Ireland

On day one of Pwn2Own Ireland 2025 researchers demonstrated and chained 34 unique zero-day vulnerabilities across categories including routers, NAS, printers, smart home devices and mobile phones, earning $522,500 in prizes; notable successes included remote WAN access to a QNAP router and root on Synology and QNAP devices. The Zero Day Initiative coordinates 90-day responsible disclosure with vendors, and ZDI and sponsors (Meta, QNAP, Synology) are offering expanded prizes including a $1M reward for a zero-click WhatsApp exploit.