The world's largest white-hacking competition "Pwn22Own Automotive 24" will take place at the Tokyo Big Sight Event Center from January 2025 to 2, 2025. It is a competition for top ethical hackers and cybersecurity experts to research and fix previously unknown cybersecurity vulnerabilities ("zero-day discovery") in the automotive sector.
Following the highly successful premiere in January 2024, in which 49 previously unknown cybersecurity vulnerabilities (zero-day vulnerabilities) were discovered and reported to the respective manufacturers, the second edition of the "Pwn2Own Automotive" competition has now been announced. The event helps to lay a foundation for future cybersecurity in the automotive industry by strengthening cybersecurity measures and promoting the prevention of cyber incidents through the discovery of zero-day vulnerabilities. This addresses the growing threat of cybersecurity vulnerabilities and increased attack risks associated with the introduction of software-defined vehicles (SDVs) and software-controlled vehicle functions.
Competition awards prizes for uncovering security vulnerabilities
By leveraging the ZDI platform, the competition enables leading cybersecurity experts to test and attack the latest automotive technologies in real-world conditions. By identifying zero-day vulnerabilities before they circulate on the black market and can be used for criminal purposes, the event enables vehicle manufacturers and suppliers to take rapid countermeasures that help prevent cyberattacks and improve the overall security of automotive products.
In addition, the competition encourages innovation by recognizing the achievements of cybersecurity researchers or white hackers and awarding prizes totaling over $1 million for the discovery of new vulnerabilities. This incentivizes further research and development while providing hands-on experience that develops talent in the cybersecurity industry and ultimately contributes to an improved global cybersecurity landscape.
Subscribe to our newsletter now
Read the best news from B2B CYBER SECURITY once a monthUp to three hacking attempts are allowed per target
Participants (research teams) in the “Pwn2Own Automotive 2025” competition will earn points in four separate categories: Tesla, in-vehicle infotainment systems (IVI), electric vehicle (EV) chargers and operating systems (OS).
Each participant must prove that they are able to execute arbitrary (bug) code on the target devices or operating systems provided in their chosen category. During the competition, up to three hacking attempts per target system are allowed. Points are awarded for successful attack attempts, and the participant or team with the most points at the end of the competition receives the prestigious title of "Master of Pwn".
To be considered for the competition, the cyber vulnerabilities attacked must have been previously unknown, unpublished and/or unreported. Any deviation from these criteria may result in a lower prize. Only the first participant to successfully complete a cyber attack in each category is entitled to a cash prize. The order of the tasks is randomly determined by a drawing of lots.
Cyber-secure future for software-defined automobiles
"At Trend ZDI, we conduct research on cyber-secure vehicles and deal with real-world attack scenarios in the automotive sector. Conducting this competition in collaboration with VicOne, who has extensive expertise and experience in cybersecurity in the automotive industry, is an important step in demonstrating our expertise in security research within the automotive industry and research community," said Brian Gorenc, Vice President of Threat Research at Trend Micro and responsible for the ZDI program.
VicOne's CEO Max Cheng explains: "Through this competition launched in conjunction with ZDI, VicOne is helping to create a more cyber-secure future for software-defined vehicles (SDVs). By discovering zero-day vulnerabilities, this event enables security researchers or white hackers to publicize unknown, unpublished and previously unreported cybersecurity vulnerabilities, facilitating early risk detection and mitigation in the automotive industry. Such efforts are critical for the global automotive sector, especially as the development of SDVs advances at an ever-increasing pace."
About Pwn2Own Automotive 2025:
Date and time: January 22nd 〜January 24th, 2025
Venue: Tokyo Big Site West Hall – As part of the 17th AUTOMOTIVE WORLD 2025
Website: see link
About VicOne
With a vision to secure the vehicles of tomorrow, VicOne offers a broad portfolio of cybersecurity software and services for the automotive industry. VicOne's solutions are specifically designed to meet the stringent requirements of automotive manufacturers and suppliers and are designed to meet the specific needs of modern vehicles.
Matching articles on the topic