Byte Insight

CVE-2024-0244: @ByteInsight details how he exploited the #Canon MF753Cdw printer back when he was a #Pwn2Own contestant. Now he's on the judging side as a ZDI analyst, but Doom is still on the table. zerodayinitiative.com/blog/2…

In part two of his look into the Kenwood DNR1007XR, @ByteInsight outlines the attack surface of the IVI and shows where potential vulnerabilities may be found. It's a #Pwn2Own Automotive target, so we'll see if anyone finds something interesting. zerodayinitiative.com/blog/2…

Breaking Down the Attack Surface of the Kenwood DNR1007XR – Part One. @ByteInsight takes a look at one of the IVI targets in the upcoming #Pwn2Own Automotive contest. Hardware breakdown today; attack surface this Friday. Check it out at zerodayinitiative.com/blog/2…

The Master of Pwn trophy for #Pwn2Own Ireland has arrived. Quoth this raven - hack some more. #P2OIreland

Announcing #Pwn2Own Automotive 2026! We're heading back to Tokyo and we're adding new targets Level 3 charging thanks to @alpitronic & the OCTT thanks to the Open Charge Alliance. Tesla is back, too. Check out the details at zerodayinitiative.com/blog/2…

Great to see Trend ZDI researchers Jonathan Andersson  and Thanos Kaliyanakis present their findings on EV Charger security. We heard things got a bit flammable. #Blackhat

Extracting Embedded MultiMediaCard (eMMC) contents in-system. ZDI researcher Dmitry Janushkevich details how to interact with an eMMC chip and notes some pitfalls you may encounter on the way. zerodayinitiative.com/blog/2…

Zed and Dustin are getting set for #Pwn2Own Berlin youtube.com/shorts/R_jo83ooj…

Just a week out from our first ever #Pwn2Own Berlin! See you at @offensive_con

Announcing #Pwn2Own Berlin! We're moving our enterprise-focused event to @offensive_con and introducing an AI category. More than $1,000,000 in cash & prizes (Incl. a Tesla) are available to win. Check out the details at zerodayinitiative.com/blog/2…

Our first look behind the scenes of #Pwn2Own Automotive youtube.com/shorts/XeING1Y-f…

Registration for #Pwn2Own Automotive is now closed! We have over 50 entries from over 20 teams - including a lot of first timers! The drawing for order will be next Tuesday, January 21, at 1400 Tokyo time (GMT+9). Watch it live at youtube.com/live/doaUXuz7udQ…

The #Tesla wall charger is a new target for this year's #Pwn2Own Automotive. ZDI researcher Dmitry Janushkevich breaks down the device to expose the attack surface in his latest blog. Read the details (and check out the pictures) at zerodayinitiative.com/blog/2…

Headed to #Blackhat Europe next week? Be sure to check out ZDI researchers Jonathan Andersson's & Thanos Kaliyanakis' talk on glitching the GigaDevice GD32F407 MCU. They'll show you what it takes to conduct a successful EM-FI glitch attack. blackhat.com/eu-24/briefings…

The WolfBox E40 EV charger is a target in the upcoming #Pwn2Own Automotive. ZDI researcher Dmitry Janushkevich tears one down in his latest blog to find what attack surfaces exist in the device. He also details extracting the firmware. zerodayinitiative.com/blog/2…

In his second blog post covering the #Kenwood DMX958XR IVI, ZDI researcher @ByteInsight examines the device's attack surface and lists all the open-source software used, including a 2011 version of OpenSSL. Awkward. zerodayinitiative.com/blog/2…

Thinking of participating in #Pwn2Own Automotive? ZDI's @ByteInsight provides a detailed look at the internals of the #Kenwood DMX958XR. This is the first in a series detailing the attack surface of the IVI. Read all the details (& gander at the pics) at zerodayinitiative.com/blog/2…

That's a wrap for #Pwn2Own Ireland 2024! Over last 4 days, we awarded $1,066,625 for over 70 0-day bugs. That makes 4 contests in a row that exceeded the million-dollar mark. Congratulations to the Viettel Cyber Security team for winning Master of Pwn with 33 points and $205,000.

Our next event will be January 22-24, 2025 in Tokyo as we return for the second #Pwn2Own Automotive. We hope to see you there.