Hack that escapes VM by exploiting Edge browser fetches $105,000 at Pwn2Own

Credit: arstechnica.com


Enlarge (credit: Heather Katsoulis)


Contestants at this year's Pwn2Own hacking competition in Vancouver just pulled off an unusually impressive feat: They compromised Microsoft's heavily fortified Edge browser in a way that escapes a VMware virtual machine it runs in. The hack fetched a prize of $105,000, the highest awarded so far over the past three days.


According to a Friday morning tweet from the contest's organizers, members of Qihoo 360's security team carried out the hack by exploiting a heap overflow bug in Edge, a type confusion flaw in the Windows kernel, and an uninitialized buffer vulnerability in VMware, contest organizers. The result was a "complete virtual machine escape."


Virtual machines are vital to the security of individuals and large organizations everywhere. In server hosting environments, they're used as a container that prevents one customer's data and operating system from being accessed by other customers sharing the same physical server. Virtual machines are also used on desktop computers to isolate untrusted content. Should the guest operating system be compromised through a drive-by browsing exploit or similar attack, the hackers still don't get access to data or operating system resources on the host machine.

Top Stories

Q&A with Topgolf’s CEO about the popular sports entertainment company and a possible Seattle location

Golf isn’t the most popular sport, but Topgolf is certainly doing its part to change that perception. The growing sports entertainment company operates more than 30 driving-range-meets-bowling-alley entertainment facilities — with 11 more soon to open — that feature 6-person hitting bays with microchipped trackable golf balls, along with food, drink, TV screens, free WiFi, and much more. Technology is a key part of the Topgolf experience — from the balls with RFID chips to the Protracer cameras — and that’s why we’re excited to hear from Topgolf co-chairman and CEO Erik Anderson at the GeekWire Sports Tech Summit on June 21-22 in Seattle at CenturyLink Field. Anderson, who… Read More
  • 2 days ago
  • 13

How Jeff Bezos’ passion for space is inspiring the next generation of entrepreneurs and explorers

When Amazon CEO Jeff Bezos visited the Museum of Flight this weekend to answer questions from students, the kids did not hold back. “That’s one of the great things about kids,” Bezos said on Saturday. “There are always questions.” Scores of elementary-school and middle-school students came from the Seattle area as well as from Deer Park, a city just north of Spokane on the other side of the state, to cram into the museum’s “Apollo” exhibit and meet America’s second-richest person (after Bill Gates). The kids asked about Bezos’ successful expedition to recover sunken rocket engines from the Apollo moon missions, about his… Read More
  • 1 day ago
  • 11

GeekWire Deals: Tackle your business plan with the simple, visual Roadmap Planner

Running a business is complicated. When you’re at the helm of strategy, finances, and vision, it can feel like you’re spending more time planning than actually doing. Tasks like this require serious organization, and that’s exactly what today’s GeekWire Deals offer will provide. It’s time to upgrade from a mess of Post-it notes and recruit Roadmap Planner. This project management mastermind brings everything into one easy-to-navigate digital calendar, with all the tagging and color-coding you need to stay on-track. Visualize your current state, your future goals, and all the progress you make along the way. Share easily with team members… Read More
  • 1 day ago
  • 9

Microsoft’s next-generation HoloLens glasses may make you look like Clark Kent

Today, Microsoft’s HoloLens augmented-reality headset has a geeky RoboCop vibe, but someday it could become more like a pair of eyeglasses suitable for Superman’s mild-mannered alter ego. At least that’s the impression you’re likely to get from a Microsoft Research study on HoloLens technology, due to be presented in July at SIGGRAPH 2017 in Los Angeles. The study delves into the possibilities of creating a display system that looks more like sunglasses than the bulky, goggle-like systems that are currently favored for virtual reality and mixed reality. The system could also build in a vision-correcting algorithm. “If we ultimately wish to make a display the size of… Read More
  • 7 hours ago
  • 9

HP gives Envy laptops an edgier look, updates Spectre x2 with Kaby Lake CPUs

Sharper edges, new kickstands, Intel and AMD processors, and more.
  • 17 hours ago
  • 9
farawayyachtingcharters - Easy Branches
botoxfillerveintheraphyinphuket - Easy Branches

Latest in Technology

Watch NASA astronauts take on a quick but crucial spacewalk at the space station

NASA astronauts Peggy Whitson and Jack Fischer are due to head out from the International Space Station on Tuesday for a 2.5-hour-long quickie spacewalk aimed at fixing a serious computer problem. The duo will replace a critical computer relay box, known as a multiplexer-demultiplexer or MDM. The box is one of two MDMs that regulate the operation of its radiators, solar arrays and cooling loops. One of the MDMs failed on Saturday, but because each box can handle all essential functions, operations on the station haven’t been affected. In addition to installing a spare MDM and rerouting the station’s computer commands,… Read More
  • 9 minutes ago

There’s new evidence tying WCry ransomware worm to prolific hacking group

Common tools, techniques, and infrastructure make link "highly likely."
  • 3 hours ago

Crunch Report | Ford names Jim Hackett as new CEO

 Today’s Stories: Ford names Jim Hackett CEO to take its connected car plans up a gear, Dish integrates with Amazon Alexa for hands-free TV, Patreon doubles in a year to 1 million paying patrons and 50,000 creators and Verse grabs $20.5 million to take its P2P payments play beyond Europe. Read More
  • 6 hours ago

Microsoft’s next-generation HoloLens glasses may make you look like Clark Kent

Today, Microsoft’s HoloLens augmented-reality headset has a geeky RoboCop vibe, but someday it could become more like a pair of eyeglasses suitable for Superman’s mild-mannered alter ego. At least that’s the impression you’re likely to get from a Microsoft Research study on HoloLens technology, due to be presented in July at SIGGRAPH 2017 in Los Angeles. The study delves into the possibilities of creating a display system that looks more like sunglasses than the bulky, goggle-like systems that are currently favored for virtual reality and mixed reality. The system could also build in a vision-correcting algorithm. “If we ultimately wish to make a display the size of… Read More
  • 7 hours ago

Insurance software company Vertafore leaving Seattle suburb for Denver’s ‘burgeoning tech scene’

Vertafore, the Bothell, Wash.-based insurance industry software maker, is moving its headquarters to Denver. A report in the Puget Sound Business Journal says the company will relocate in August to a 90,000-square-foot office and that more than 400 employees will be based there. A post on the company’s website says that the move is part of its “Centers of Excellence” strategy for North America as it is “co-locating teams with specialized expertise to drive effective collaboration, improve speed-to-market, and provide innovative products and solutions to meet the evolving demands of customers across the insurance industry.” Vertafore was acquired for by Bain Capital and Vista… Read More
  • 7 hours ago

Zillow ‘Instant Offers’ launches in two cities to test quick-and-easy option for home sellers

Zillow has waded into the complicated and sometimes lengthy process of selling a home by launching a new product on Monday called Instant Offers. The new initiative, being tested in Las Vegas and Orlando, Fla., is billed as a way for homeowners to avoid traditional hassles and sell quickly. According to a news release from the Seattle-based real estate media company, Instant Offers connects homeowners to offers from investors as well as a comparative market analysis (CMA) from a local real estate agent. The process starts when a homeowner is able to provide basic information about their home — number of… Read More
  • 8 hours ago

Tech Moves: Planetary Resources adds space law expert as general counsel; Comcast appoints Washington state VP; and more

Planetary Resources, the asteroid-mining company headquartered in Redmond, Wash., is getting a little extra help as it ventures toward the stars. The company announced the appointment of space law expert Brian Israel as the company’s general counsel on Monday. Israel will oversee the legal, regulatory, and compliance functions of Planetary Resource’s work. Israel has spent the last eight years serving in the State Department’s Office of the Legal Adviser, and for five years he was the lead lawyer responsible for interpreting the United States’ legal obligations when it comes to commercial space activities. He also has experience in technology law, particularly intellectual property law. Planetary Resources’… Read More
  • 8 hours ago

Astronomers use the music of the spheres to track TRAPPIST-1’s seventh planet

An international research team led by a University of Washington astronomer has worked out the intricate dance of seven planets circling an ultracool dwarf star known as TRAPPIST-1, nailing down the coordinates of the outermost world in the process. The astronomers found that all seven exoplanets follow stable orbits thanks to a regular pattern of gravitational interactions, known as orbital resonance. And they determined conclusively that the seventh planet, called TRAPPIST-1h, is too cold for life – although it was could have been warmer in its ancient past. The calculations, laid out today in the journal Nature Astronomy, will go down as… Read More
  • 9 hours ago

Amazon Go across the pond? Filings point to possible international expansion of checkout-free grocery

Amazon last week trademarked several phrases that point to a possible international expansion of its checkout-free Amazon Go grocery concept. First spotted by Bloomberg, the filings show that the United Kingdom’s Intellectual Property Office signed off on Amazon applications to trademark the following slogans: No Lines, No Checkout. (No, Seriously.) and No Queue, No Checkout. (No, Seriously.) Late last year, Amazon also trademarked the Amazon Go logo in the U.K. The No Lines, No Checkout phrase appeared in a promotional video for the Amazon Go concept. Amazon unveiled the concept, which will let shoppers pick up items off the shelves… Read More
  • 9 hours ago

Podcast: Jeff Bezos tells kids about his vision for space, and gives practical tips for success

Amazon and Blue Origin founder Jeff Bezos fielded questions from some very savvy kids at the new Apollo exhibit at Seattle’s Museum of Flight this weekend. The exhibit features F-1 engines from some of the Saturn V rockets that took astronauts to the moon. Bezos’ team recovered the engines from the Atlantic Ocean decades after they took the plunge, and today he and his Blue Origin team are working to ensure that rockets are recovered in real-time on future space missions. It’s a fascinating discussion, with great questions and answers — touching on topics including the future of space, Bezos’ plan to put… Read More
  • 9 hours ago

North Korea’s latest launch heralds mass production of “cold launch” missiles

The Pukguksong-2's “cold launch” mobile launcher reduces warning time for strike.
  • 9 hours ago

TUNE employees build a tiny home for the Pod Project in effort to address homelessness

While everyone seemed to be out soaking up some rare Seattle sunshine this weekend, about a dozen TUNE employees were building a home. To be fair, it was a home designed for quick and easy construction, but still, an invaluable resource to someone who is trying to transition out of homelessness. The build was part of The Pod Project, an initiative created by Seattle architect Mark Huber. Huber designed the Pods — a cheaper, more portable cousin to the tiny home — to offer homeless people a safe, secure shelter while they work toward transitioning into permanent housing. The Pods cost… Read More
  • 10 hours ago