$320,000 Paid Out at Zeroday.Cloud for Open Source Software Exploits

According to SecurityWeek, $320,000 was paid out at Zeroday[.]Cloud, the London hacking competition organised this week by cloud security giant Wiz, in partnership with AWS, Google Cloud and Microsoft. The event, part of Zeroday[.]Cloud’s $4.5 million prize pool for vulnerabilities in core cloud and AI technologies, covered six categories, with rewards ranging from $10,000 to $300,000.

Researchers earned a total of $320,000 for 11 exploits targeting various open source technologies, with $200,000 awarded on the first day and a further $120,000 on the second day. The biggest single payout was $40,000 for a Linux kernel exploit, while five database system exploits earned researchers $30,000 each—three targeting Redis and two targeting PostgreSQL.

An authenticated remote code execution exploit targeting the Grafana observability platform earned a team $10,000, and Redis was exploited a second time on day two for a total day contribution of $60,000. Redis, PostgreSQL and MariaDB were among the targets acknowledged across the two days.