Pwn2Own Hacking Contest Adds Exploit Category: Unicorns
The annual Pwn2Own browser-hacking competition has risen to mythical status over the years, with tall tales of security researchers exploiting within minutes browser technologies thought to be secure. For their efforts, researchers have been awarded cash and prizes by the event's sponsor, Hewlett-Packard's Zero Day Initiative (ZDI).
HP has now released the rules for the upcoming 2014 event and is adding a new category never seen before in a security competition: the Exploit Unicorn.
The Exploit Unicorn is a challenge that will require the successful security researcher to bypass multiple levels of security on multiple technologies in order to win. To claim the Exploit Unicorn, a security researcher will need to exploit Microsoft Windows Internet Explorer 11 running a on 64-bit Windows 8.1 operating system, with the Enhanced Mitigation Experience Toolkit (EMET) running.