Rev Up for Pwn2Own Automotive 2025: Here Are the Contest Rules and Targets
September 25, 2024Pwn2Own Automotive is set to make a triumphant return at the Automotive World conference in Tokyo, Japan, in January 2025. We outline the rules and targets for the second edition of this hugely successful automotive-focused ethical hacking competition.
VicOneNavigating the New US Rule on Connected Vehicle Technologies From ‘Countries of Concern’
September 24, 2024The US government is proposing a new rule to ban automotive technologies from countries like China and Russia. We explore how this rule could impact manufacturers and suppliers, and what’s at stake for the future of connected vehicles.
VicOneAutomotive CTF 2024: Top Teams From Japan Advance to Global Finals in Detroit
September 23, 2024The inaugural Automotive CTF Japan raced to a thrilling finish, with the top two teams headed to the global finals in Detroit in October.
VicOneFrom Pwn2Own Automotive: A Stack-Based Buffer Overflow Vulnerability in JuiceBox 40 Smart EV Charging Station
September 18, 2024We examine CVE-2024-23938, a JuiceBox 40 smart EV charging station vulnerability discovered at Pwn2Own Automotive, and discuss its broader implications for the automotive industry.
CyberThreat Research LabRisk-Proof Smart Logistics: The Path to UN R155 Certification and Sustainable, Driverless Solutions
September 10, 2024UD Trucks has partnered with VicOne to enhance cybersecurity in its software-defined vehicles (SDVs) and ensure compliance with UN Regulation No. 155 (UN R155), addressing the growing risks in smart logistics. UD Trucks is strengthening its security operations and accelerating innovation, all while maintaining a focus on safety and efficiency for the future of transportation.
VicOneSecurity Takeaways From Autel MaxiCharger Vulnerabilities Discovered at Pwn2Own Automotive 2024
September 9, 2024VicOne researchers examine two Autel MaxiCharger vulnerabilities discovered at Pwn2Own Automotive 2024 and provide insights into their implications for automotive cybersecurity.
CyberThreat Research LabThe Ripple Effect of Ransomware Attacks on the Automotive Supply Chain
September 6, 2024Ransomware is disrupting the automotive industry, from IT and OT systems to emerging V2X technologies. We discuss the repercussions, key vulnerabilities, and strategies to safeguard against future attacks.
CyberThreat Research LabIs the Automotive Industry Prepared to Navigate API Security Risks in Software-Defined Vehicles?
August 20, 2024The proliferation of APIs in software-defined vehicles (SDVs) has significantly expanded the attack surface, posing serious security risks to the entire automotive ecosystem. In this article, we provide insights into the evolving threat landscape of automotive APIs, tackling vulnerabilities associated with SDVs and recommending a systematic approach for effectively mitigating the risks.
VicOneStrengthening Resilience in Today’s Interconnected Age: VicOne’s Approach
July 29, 2024A large-scale outage resulting from a single content update recently affected computers across multiple industries, including financial institutions, hospitals, and airlines. This incident highlights the challenges faced by organizations and the crucial need for enhanced system resilience in our increasingly interconnected world.
VicOneSecuring the Automotive Supply Chain: Lessons From the Ransomware Attack on a Car Dealership Software Provider
July 4, 2024A software provider for automotive dealerships recently fell victim to a ransomware attack, causing widespread outages and crippling operations for thousands of car dealers. We examine the far-reaching implications of this incident on the automotive supply chain, outline critical lessons learned, and provide strategic security recommendations for automotive stakeholders.
CyberThreat Research LabFrom Key Fob to UWB: Explaining and Securing Ultra-Wideband in Vehicles
June 19, 2024In this second part of our series on vehicle entry system technology, we focus on its most recent iteration, the ultra-wideband (UWB) protocol. We cover its advantages, the potential vulnerabilities it carries, and the measures that will help secure its integration into vehicles.
CyberThreat Research LabPioneering the Future of Automotive Cybersecurity With Unparalleled Automotive Threat Intelligence
June 11, 2024VicOne has partnered with the Automotive Security Research Group (ASRG) to launch AutoVulnDB, an innovative database focused on automotive vulnerabilities. This initiative provides exceptional coverage of automotive threat intelligence, establishing VicOne as the industry leader in comprehensive vulnerability management.
VicOne