At Pwn2Own Automotive 2024 Day 2, researchers were rewarded over $1 million for exploiting Tesla infotainment systems, Sony, Alphine players, Autel charging systems, and much more.
On the first day, a prize of $722,500 was given to researchers for 24 distinct 0 days. The Synacktiv Team completed their 3 zero-day vulnerabilities on the Tesla Modem and received $100,000.
Trustifi’s Advanced threat protection prevents the widest spectrum of sophisticated attacks before they reach a user’s mailbox. Try Trustifi Free Threat Scan with Sophisticated AI-Powered Email Protection .
The summary for Day 2 of Pwn2Own Automotive 2024 is provided below.
Using a 3-bug chain, the PHP Hooligans and Midnight Blue team exploited the Phoenix Contact CHARX SEC-3100. They get six Master of Pwn Points and $30,000.
The Tesla Infotainment System was attacked by the Synacktiv team using a 2-bug chain. They get ten Master of Pwn Points in addition to $100,000.
Using a 2-bug chain, NCC Group EDG was able to defeat the Alpine Halo9 iLX-F509. They receive 4 Master of Pwn Points and $20,000.
Synacktiv exploited Automotive Grade Linux by using a 3-bug chain. They get 5 Master of Pwn Points and $35,000.
Le Tran Hai Tung attacked the Alpine Halo9 iLX-F509 with a 2-bug chain. He gains four Master of Pwn Points and $20,000.
fuzzware.io exploited the ChargePoint Home Flex with a two-bug chain. They get six Master of Pwn Points and $30,000.
The Midnight Blue / PHP Hooligans team exploited the Autel MaxiCharger AC Wallbox Commercial using a stack-based buffer overflow. They get six Master of Pwn Points and $30,000.
With a stack-based buffer overflow, RET2 Systems exploited the JuiceBox 40 Smart EV Charging Station. They get six Master of Pwn Points and $30,000.
Thus far this week, researchers have been granted over $1,000,000 in prizes (¥150 million!).
You can view the detailed itinerary of the highly competitive contest by following this link. Additionally, for your reference, a comprehensive rundown of the Pwn2Own Automotive 2024 Day 2 outcomes can be found here. If you are looking for information on a specific day, you can easily access it using this link.
Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…
Hackers are making some phishing pages harder to track by changing the code delivered to…
A cyber incident reportedly forced a British power plant to halt operations for about four…
Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…
TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…
A fake student resume is being used to place a remote-access tool on researchers’ Windows…