Looking at the Attack Surfaces of the Kenwood DMX958XR IVI

November 21, 2024 | Connor Ford CONTINUE READING

Pwn2Owning Two Hosts at the Same Time: Abusing Inductive Automation Ignition’s Custom Deserialization

Blog post

Pwn2Owning Two Hosts at the Same Time: Abusing Inductive Automation Ignition’s Custom Deserialization

February 08, 2023
Inductive Automation, Pwn2Own, Deserialization

Pwn2Own Automotive: Bringing Researchers and Auto Manufacturers Together

Blog post

Pwn2Own Automotive: Bringing Researchers and Auto Manufacturers Together

January 26, 2023
Pwn2Own, Automotive, Tokyo

Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation

Blog post

Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation

January 23, 2023
Microsoft, Research, CSRSS

CVE-2022-35690: Unauthenticated RCE in Adobe ColdFusion

Blog post

CVE-2022-35690: Unauthenticated RCE in Adobe ColdFusion

January 19, 2023
Adobe, ColdFusion, Research

Announcing Pwn2Own Vancouver for 2023

Blog post

Announcing Pwn2Own Vancouver for 2023

January 12, 2023
Pwn2Own, Tesla, VMware, Apple, Microsoft, Zoom

The January 2023 Security Update Review

Blog post

The January 2023 Security Update Review

January 10, 2023
Security Patch, Microsoft, Adobe

Looking Back at the Bugs of 2022

Blog post

Looking Back at the Bugs of 2022

January 05, 2023
Retrospective, Program News, Microsoft, Linux

Behind the Scenes of Pwn2Own Toronto 2022

Blog post

Behind the Scenes of Pwn2Own Toronto 2022

December 15, 2022
Pwn2Own

The December 2022 Security Update Review

Blog post

The December 2022 Security Update Review

December 13, 2022
Security Patch, Adobe, Microsoft

Pwn2Own Toronto 2022 - Day Four Results and Master of Pwn

Blog post

Pwn2Own Toronto 2022 - Day Four Results and Master of Pwn

December 09, 2022
Pwn2Own, Lexmark, Canon, TPLink, NETGEAR