FORTUNE -- Everybody's Web software got "pwned" at the Pwn2Own hackers conference this week: Apple's (AAPL) Safari, Google's (GOOG) Chrome, Microsoft's (MSFT) Internet Explorer, Mozilla's Firefox and Adobe's (ADBE) Reader and Flash.
Chrome was hacked by a French team from Vupen Security with a use-after-free vulnerability that affects both the WebKit and Blink rendering engines.
Safari was defeated by Liang Chen, one of a pair Chinese Keen Team hackers, using a heap-overflow-and-sandbox-bypass combination that took three months to perfect.
"For Apple, the OS is regarded as very safe and has a very good security architecture," Chen told ThreatPost's Michael Mimoso. "Even if you have a vulnerability, it's very difficult to exploit. Today we demonstrated that with some advanced technology, the system is still able to be pwned. But in general, the security in OS X is higher than other operating systems."
In a separate interview with CNET, Chen said that OS X is harder to attack than iOS 7.0 because Apple issues security updates for its desktop operating system more frequently than for its mobile OS.
The two-day event, sponsored by Hewlett-Packard (HPQ) and organized by the HP-owned Zero-Day Initiative, paid out $850,000 in prize money to eight teams of competitors, plus another $82,500 in charitable donations. The event was staffed by observers from Apple and the other companies, which will presumably now start patching those holes.
"I think the Webkit fix will be relatively easy," Chen told Mimoso. "The system-level vulnerability is related to how they designed the application; it may be more difficult for them."
CORRECTION: An earlier version of this story had the prize money wrong. Keen Team won $62,500 for pwning Safari and another $75,000 for an Adobe Flash exploit for a total of $137,500. Source: Pwn2Own 2014: Rules and Unicorns
A curated selection of the day's most newsworthy tech stories from all over the Web.
"Chrome OS will be killed next year (or "merged" with Android). ... Chrome OS has no purpose that isn't better served by Android (perhaps with a few mods to support a non-touch display)." -- Gmail creator Paul Buchheit (Boy Genius Report and TechCrunch)
Unfortunately, Yahoo finally made good on all those layoff rumors by cutting roughly 600 jobs, MOREJP Mangalindan, Writer - Dec 15, 2010 7:59 AM ET
Every day, the Fortune staff spends hours poring over tech stories, posts, and reviews from all over the Web to keep tabs on the companies that matter. We've assembled the day's most newsworthy bits below.
"I remember him [Larry Ellison] very distinctly telling me one time: Bruce, we can't be successful unless we lie to customers. ... All the things that you would read in books of somebody being a leader, MOREJP Mangalindan, Writer - Dec 2, 2010 6:00 AM ET
A round-up of the companies, deals, and trends that made headlines.
Every day, the Fortune staff spends hours poring over tech stories, posts, and reviews from all over the Web to keep tabs on the companies that matter. We've assembled the day's most newsworthy bits below.In light of reports that private equity players approached AOL and News Corp. to make unsolicited bids for Yahoo, the Internet company has asked Goldman Sachs to MORE JP Mangalindan, Writer - Oct 15, 2010 8:23 AM ET
Google today announced the release of VP8, a new video codec that it envisions will pave the way for the future of video on the Web.
While it wasn't mentioned once during the keynote, VP8 takes dead aim at MPEG LA's H.264 codec, which has the backing of industry heavyweights like Apple and Microsoft (who are both members of MPEG LA).
VP8 technology stems from Google's purchase of On2 Technologies last year. MORESeth Weintraub - May 19, 2010 3:03 PM ET
By Michal Lev-Ram
MOUNTAIN VIEW, Calif. - If Google's new Chrome Web browser succeeds, going online will be an all-Google experience.
"The Web has evolved pretty dramatically, but the underlying browser architecture is still very similar to the original Netscape browser," Sundar Pichai, Google's vice president of product management, said at a press conference Tuesday at the company's Silicon Valley headquarters.
Google (GOOG) says Chrome was designed to be "streamlined and simple." The MOREMichal Lev-Ram, writer - Sep 2, 2008 1:39 PM ET
|GM's recalled Cobalt was a failure from the start|
|Pope Francis challenges the free market - The Buzz|
|Americans have fallen in love with real estate once again|
|Why you should pay off your car loan ASAP|
|Your Internet security relies on a few volunteers|