Samsung Bixby Exploited via $50K Chain to Hijack Galaxy Phones
Researchers demonstrated a chain of three CVEs across Samsung Members, Samsung Account, and Bixby that granted system‑level control of Galaxy S25, S24, and Flip 7 devices, netting $50K at Pwn2Own. The bug forces Bixby to run malicious Capsules, enabling data exfiltration and remote code execution. Samsung must patch these components.