Mastodawn

We've wrapped up #Pwn2Own Automotive 2025. Join us as we look at the highlights of the three-day event. We awarded $886,250 for 49 unique 0-days - including some exploits that have never been publicly demonstrated before. #P2OAuto https://youtu.be/JbodmIL-Iys

Wrapping Up Pwn2Own Automotive 2025

YouTube

Trend Zero Day Initiative Jan 24

And that’s a wrap! #Pwn2Own Automotive 2025 is complete. In total, we awarded $886,250 for 49 0-days over the three day competition. With 30.5 points and $222,250 awarded, Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) is our Master of Pwn. #P2OAuto

Show thread

Trend Zero Day Initiative Jan 24

Confirmed! In his #Pwn2Own debut Evan Grant (@stargravy) used an OS command injection bug to exploit the Kenwood DMX958XR in the last attempt of the contest. His unique approach earns him $10,000 and 2 Master of Pwn points. #P2OAuto

Show thread

Trend Zero Day Initiative Jan 24

Confirmed! @SinSinology 's last exploit of the contest was a command injection that popped the Alpine iLX-507. He earns himself another $10,000 and 2 more Master of Pwn points. #P2OAuto #Pwn2Own

Trend Zero Day Initiative Jan 24

We have another collision. Rob Blakely & Andres Campuzano of the Technical Debt Collectors successfully exploited the Tesla Wall Connector, but they used a previously known bug. They still earn $12,500 and 2.5 Master of Pwn points. #P2OAuto #Pwn2Own

Trend Zero Day Initiative Jan 24

Whew! Evan Grant (@stargravy) needed all but five minutes of his attempt, but he successfully exploited the Kenwood DMX958XR using only his hands, which now must be registered under the Wassenaar arrangement. #Pwn2Own #P2OAuto

Trend Zero Day Initiative Jan 24

Success! @SinSinology 's last exploit of the contest saw him successfully exploit the Alpine iLX-507. For one final time, he's headed to the disclosure room to provide the details. #P2OAuto #Pwn2Own

Trend Zero Day Initiative Jan 24

Confirmed! The @Synacktiv team used a single buffer overflow to exploit the Autel MaxiCharger. They were also able to demonstrate signals being transmitted via the Charging Connector for the add on. This work earns them $35,000 and 6 Master of Pwn points. #P2OAuto #Pwn2Own

Trend Zero Day Initiative Jan 24

Looking for the results from Day Three of #Pwn2Own Automotive? Look no further. You can find them at https://www.zerodayinitiative.com/blog/2025/1/23/pwn2own-automotive-2025-day-three-and-final-results #P2OAuto

Zero Day Initiative — Pwn2Own Automotive 2025 - Day Three and Final Results

Welcome to the third and final day of Pwn2Own Automotive 2025. Over the past two days, we have awarded $718,250 for 39 unique 0-days. Sina Kheirkhah has a commanding lead for Master of Pwn, but anything can happen. Here’s a look at today’s results…

Zero Day Initiative

Show thread

Trend Zero Day Initiative Jan 24

Confirmed (w/ collision)! @ScepticCtf, @diff_fusion, & @SeTcbPrivilege of fuzzware.io used a 2 bug chain - including an uninitialized variable - to exploit the #WOLFBOX EV charger, but one bug was previously known. The earn $18,750 and 2 Master of Pwn points. #P2OAuto