Hackers Exploit Galaxy S25 0-Day to Turn On Camera and Track Users

A critical zero-day vulnerability in Samsung’s Galaxy S25 was exploited at Pwn2Own Ireland 2025, allowing attackers to silently turn on the device’s camera and track a user’s real-time location via GPS data, according to Zero Day Initiative.

Security researchers Ben R. and Georgi G. from Interrupt Labs demonstrated the exploit, which stemmed from improper input validation in the phone’s software stack and enabled remote control without any user interaction, leaving the device potentially compromised without obvious signs. The researchers earned $50,000 in prize money and 5 Master of Pwn points for the breakthrough, with the event contributing to Pwn2Own Ireland 2025’s reported $2 million in total payouts across 73 unique zero-day vulnerabilities.

Samsung has not issued a public statement on the Galaxy S25 flaw, but the article notes a security update addressing similar Android vulnerabilities should arrive soon, and urges users to enable automatic updates and monitor official security channels. Until a patch is released, users handling sensitive activities are advised to remain vigilant about device behaviour and permissions, as such flaws highlight the challenges of securing flagship devices amid rapid multimedia and system library development.

According to the Zero Day Initiative, the responsible disclosure process ensures patches can be developed and tested before public release.