DEVCORE wins Pwn2Own Berlin 2026 global championship after exploiting four Microsoft products, earning 50.5 total points and $505,000 USD in prize money

DEVCORE's research team, led by Principal Security Researcher Orange Tsai, successfully exploited Microsoft Edge, Exchange, Windows 11, and SharePoint during the May 16 competition, becoming the only team to land a successful exploit in the Browser category.

DEVCORE remains the only team ever to successfully exploit critical vulnerabilities in Microsoft Exchange Server twice at Pwn2Own, with their first win in 2021; their Exchange research earned the highest single-target prize of the entire event.

The competition included multiple AI models as research targets for the first time, reflecting the rise of AI-assisted vulnerability hunting, which Zero Day Initiative noted has significantly increased the overall volume of vulnerability disclosures in its monthly security reports.