White hat hackers participating in the Pwn2Own Ireland 2024 competition organized by Trend Micro's Zero Day Initiative (ZDI) they made half a million dollars on the first day of the event, for exploits targeting NAS devices, cameras, printers and smart speakers.
The highest single prize, $100.000, went to Summoning Team's Sina Kheirkhah, who revealed a total of nine vulnerabilities for an attack from a QNAP QHora-322 router on a TrueNAS Mini X storage device. 
Another exploit chain involving QNAP QHora-322 and TrueNAS Mini X products was presented by Viettel Cyber Security, and won $50.000.
Jack Dates of RET2 Systems also won a hefty payout, receiving $60.000 for hacking a Sonos Era 300 smart speaker.
The QNAP TS-464 and Synology DiskStation DS1823XS+ NAS device exploits won $40.000 each for two different teams.
Participants also presented exploits for Lorex 2K WiFi, Ubiquity AI Bullet and Synology TC500 cameras, HP Color LaserJet Pro MFP 3301fdw and Canon imageCLASS MF656Cdw printers.
These efforts earned between $11.000 and $30.000. According to ZDI, a total of $516.250 was awarded on the first day of Pwn2Own Ireland for more than 50 unique vulnerabilities.
George is still wondering what he is doing here….

