The Pwn2Own Berlin 2025 hacking competition highlighted the evolving cybersecurity landscape by introducing a category specifically targeting Artificial Intelligence (AI) infrastructure, demonstrating that AI systems are becoming significant attack surfaces.

While participants also discovered numerous zero-day vulnerabilities in traditional enterprise software, such as virtualization platforms and web browsers, the focus on AI underscored its increasing integration into critical systems and its dual role in both offensive and defensive cyber operations.

The event revealed vulnerabilities in platforms like NVIDIA Triton and Chroma, prompting discussion on new vulnerability classes unique to AI and the ethical challenges of using AI in security.

Overall, the competition emphasized the urgent need for organizations to adopt proactive, AI-aware security strategies, including securing the AI data supply chain and leveraging AI for defense while preparing for attacks against their own AI deployments, in collaboration with researchers and vendors through coordinated disclosure.