🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

Starting the reverse engineering process from scratch every time a new software version is released? Find out how to use Ghidra's Version Tracking tool in our latest Labs post, by Byte Insight labs.nettitude.com/blog/version-t…

Announcing #Pwn2Own Automotive 2025! Last time, we awarded over $1,300,000 and we have more than a million in cash and prizes again - including a #Tesla! We've also mixed up the targets a bit to increase the challenges. Read the detail (and rules) here: zerodayinitiative.com/blog/2024/9/23…

We may have announced #Pwn2Own Automotive today, but we haven't forgotten about #Pwn2Own Ireland. Here's the 1st set of boxes to ship from Austin->Cork. Registrations closes on Oct 17, so get those entries in!

In his first blog for us (but hardly his first blog), Byte Insight details two #Autel EV Charger bugs used during #Pwn2Own Automotive. He also looks at the patches from Autel & speculates how they could have done it differently. zerodayinitiative.com/blog/2024/10/2…

That's a wrap for #Pwn2Own Ireland 2024! Over last 4 days, we awarded $1,066,625 for over 70 0-day bugs. That makes 4 contests in a row that exceeded the million-dollar mark. Congratulations to the Viettel Cyber Security team for winning Master of Pwn with 33 points and $205,000.

Our next event will be January 22-24, 2025 in Tokyo as we return for the second #Pwn2Own Automotive. We hope to see you there.

Thinking of participating in #Pwn2Own Automotive? ZDI's Byte Insight provides a detailed look at the internals of the #Kenwood DMX958XR. This is the first in a series detailing the attack surface of the IVI. Read all the details (& gander at the pics) at zerodayinitiative.com/blog/2024/11/1…

In his second blog post covering the #Kenwood DMX958XR IVI, ZDI researcher Byte Insight examines the device's attack surface and lists all the open-source software used, including a 2011 version of OpenSSL. Awkward. zerodayinitiative.com/blog/2024/11/2…

The WolfBox E40 EV charger is a target in the upcoming #Pwn2Own Automotive. ZDI researcher Dmitry Janushkevich tears one down in his latest blog to find what attack surfaces exist in the device. He also details extracting the firmware. zerodayinitiative.com/blog/2024/12/2…

Headed to #Blackhat Europe next week? Be sure to check out ZDI researchers Jonathan Andersson's & Thanos Kaliyanakis' talk on glitching the GigaDevice GD32F407 MCU. They'll show you what it takes to conduct a successful EM-FI glitch attack. blackhat.com/eu-24/briefing…

The #Tesla wall charger is a new target for this year's #Pwn2Own Automotive. ZDI researcher Dmitry Janushkevich breaks down the device to expose the attack surface in his latest blog. Read the details (and check out the pictures) at zerodayinitiative.com/blog/2024/12/1…

Our first look behind the scenes of #Pwn2Own Automotive youtube.com/shorts/XeING1Y…

Registration for #Pwn2Own Automotive is now closed! We have over 50 entries from over 20 teams - including a lot of first timers! The drawing for order will be next Tuesday, January 21, at 1400 Tokyo time (GMT+9). Watch it live at youtube.com/live/doaUXuz7u…

Announcing #Pwn2Own Berlin! We're moving our enterprise-focused event to offensivecon and introducing an AI category. More than $1,000,000 in cash & prizes (Incl. a Tesla) are available to win. Check out the details at zerodayinitiative.com/blog/2025/2/24…

Just a week out from our first ever #Pwn2Own Berlin! See you at offensivecon

Zed and Dustin are getting set for #Pwn2Own Berlin youtube.com/shorts/R_jo83o…

Extracting Embedded MultiMediaCard (eMMC) contents in-system. ZDI researcher Dmitry Janushkevich details how to interact with an eMMC chip and notes some pitfalls you may encounter on the way. zerodayinitiative.com/blog/2025/6/18…