According to Android Authority , the first group exploits a vulnerability in the allowed input list on the Galaxy S23, while the second group can exploit the phone's input validation technique. In simpler terms, improper input validation can allow hackers to trick an app and execute code or control resources on the device.
A bug on Galaxy S23 was exploited by a hacker group to earn a $50,000 bounty
According to the contest rules, entrants must “compromise the device by browsing web content in the default browser for the target being tested,” or by communicating with the device using NFC, Wi-Fi, or Bluetooth. The device must also be running the latest software version and patches.
While this news may be alarming for Galaxy S23 owners, the contest provides a safe space and bounties for security researchers to discover and exploit vulnerabilities in popular devices, allowing companies to understand and work to fix the security of their devices.
The Galaxy S23 was one of four phones available to researchers participating in the competition, alongside the Google Pixel 7, iPhone 14, and Xiaomi 13 Pro. Additionally, a number of additional devices including smart home devices, network storage devices, and printers were also exploited on the first day of this year's competition.
Notably, last year's Pwn2Own competition also saw the Galaxy S22 running Android 13 hacked in just 55 seconds. Over the course of the four-day competition, the Galaxy S22's security measures were exploited four times. This year's Pwn2Own competition runs until October 27, so more vulnerabilities on popular devices could emerge.
Source link
Comment (0)