Cybersecurity researchers are winning hundreds of thousands of dollars in cash and prizes in the Pwn2Own contest, discovering previously unknown vulnerabilities in widely used products like Adobe Reader, Windows 11, SharePoint and others.
During the first day of the two day competition hunting threats, the largest prize, including $200,000 in cash and a brand new car, was awarded to a team called “Synacktiv” who successfully used a single integer overflow against the Tesla ECU with the vehicle’s CAN BUS control , according to the competition sponsor, Zero Day Initiative. This is the second time the team has won by a Tesla hackingand the second Tesla 3 collected by the group, ZDI added in the winners’ announcement.
After Tesla hacking group, the runner-up on the first day of Pwn2Own’s bug bounty contest was Manfred Paul, who raised $102,500 in bug bounties, including $60,000 for finding flaws in Apple Safari that include an integer underflow bug and a bypass PAC, ZDI said. Paul won an additional $42,000 for exploiting both the Chrome and Edge browsers, the organization added.
The top winners advanced to the second day of Pwn2Own to compete for the top title, “Master of Pwn.”