Zero Day Initiative | Blog
Follow
Pwn2Own Ireland 2026 – New Targets and Categories
Pwn2Own Ireland is returning to Cork for its third year, scheduled for October 6-9, 2026. Registration closes on October 1st, 2026, at 5:00 p.m. Irish Standard Time, with no exceptions for late entries. To ensure fairness, contestants must have earned at least $15,000 in aggregate bounty payments from ZDI programs lifetime. A maximum of 80 contestants will be accepted, with up to 10 new contestants considered at the organizers' discretion. The event features seven target categories: Mobile Phones, Smart Home Devices, Wellness, Printers, Messaging, AI Infrastructure, and AI Coding Agents. Mobile phones will be targeted using the default browser or short-distance protocols like NFC, Wi-Fi, or Bluetooth. Smart home devices can be attacked via exposed network services, RF attack surfaces, or features from a laptop within the contest network. The new Wellness category focuses on healthcare devices, with attacks launched against exposed network services or RF attack surfaces. Printers, often overlooked, will also be a target, though with a reduced number of devices. The Messaging category returns, specifically targeting WhatsApp with the hope of a functioning exploit leading to code execution. Both AI Infrastructure and AI Coding Agents are new or returning categories focusing on artificial intelligence technologies and their security. The overall winner will be crowned Master of Pwn, accumulating points for successful attempts across all categories. Results will be blogged and tweeted in real-time, and contestants are strongly encouraged to read the full rules thoroughly.