At the Tianfu Cup competition, experts demonstrated a way to hack a brand new iPhone 13 with a fully patched version of iOS 15. For the identified vulnerability, ethical hackers received $ 300,000. The Tianfu Cup is one of China's premier hacker contests, where cybersecurity researchers demonstrate exploiting vulnerabilities in popular software. This year's Tianfu Cup was held on October 16-17 in Chengdu city. Participants were given three attempts of five minutes each to show their exploits worked. According to the results, the Kunlun Lab team won, which earned $ 654,500. By the way, this year the experts successfully hacked the following designated targets:
Nonetheless, the most interesting exploit turned out to be 0-click, which leads to remote code execution on fully patched iOS 15. Researchers have shown a way to jailbreak on a fresh iPhone 13. In addition, it is worth noting a chain of exploits for a vulnerability in Goolge Chrome that leads to remote code execution. This was demonstrated for the first time at the Tianfu Cup.
- Windows 10 - 5 times
- Adobe PDF Reader - 4 times
- Ubuntu 20 - 4 times
- Parallels VM - 3 times
- iOS 15 - 3 times
- Apple Safari - 2 times
- Google Chrome - 2 times
- ASUS AX56U router - 2 times
- Docker CE - 1 time
- VMWare ESXi - 1 time
- VMWare Workstation - 1 time
- qemu VM - 1 time
- Microsoft Exchange - 1 time
Nonetheless, the most interesting exploit turned out to be 0-click, which leads to remote code execution on fully patched iOS 15. Researchers have shown a way to jailbreak on a fresh iPhone 13. In addition, it is worth noting a chain of exploits for a vulnerability in Goolge Chrome that leads to remote code execution. This was demonstrated for the first time at the Tianfu Cup.
