Cybersecurity firm Synacktiv’s team won a second Tesla Model 3 at Pwn2Own 2023 after hacking it with a heap overflow and an OOB write exploit chain.
Cybersecurity firm Synacktiv won $360,000 and a second Tesla Model 3 on day two of the 2023 Pwn2Own competition in Vancouver, Bleeping ComputerTeam members David Berard and Vincent Dehors earned the company $250,000 by hacking the Tesla Model 3 via a heap overflow, and an out-of-bounds write exploit chain.
They also took home the car itself as a reward, and the company earned a further $110,000 for successful Oracle VirtualBox and Ubuntu Desktop Exploits. The team’s Thomas Imbert and Thomas Bouzerar exploited a three-bug chain to escalate privileges on a VirtualBox host.Ten zero days were successfully exploited on the second day of the competition.
Other notable hacks included Team Viettel’s 2-bug chain exploit for Microsoft Teams and its successful exploitation of a use-after-free bug and an uninitialised variable on Oracle’s VirtualBox.significant winningsOn day one, the company earned $140,000 for successfully hacking a Tesla Model 3 and using a time-of-check-to-time-of-use zero-day vulnerability to elevate privileges on macOS.
Synacktiv’s team also used a TOCTOU attack against the Tesla and won the vehicle in addition to the prize money.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Hacking team exploits Tesla Model 3 zero-day — win R1.8 million and the carThe Pwn2Own hacking competition runs from 22 to 24 March 2023, with $1,080,000 (R19.6 million) up for grabs.
Read more »
Volkswagen takes on Tesla with new affordable EVVW’s ID. 2all concept, priced at roughly R460,520, boasts 450km of range and a spacious design to bring electric mobility to the masses
Read more »
REVIEW: VW Polo sedan practical without being too prosaicThe four-door model is larger and slightly cheaper than its hatchback cousin
Read more »
New Accent SA wants? Latest model debuts as Hyundai Verna | The Citizen🚗Dramatic new exterior and interior joined by an equally novel turbocharged petrol engine. Read the full story here 👇
Read more »
Twitter will begin killing old verification badges from AprilTwitter will begin removing so-called legacy verified marks from user accounts next week, as it works toward a model where only paid subscribers and members of approved organisations have that status.
Read more »