EV charging is an ecosystem risk, not a device problem. Each session connects charger hardware, vehicle systems, apps, and cloud platforms into one attack surface. Pwn2Own Automotive 2026 proved the risk is active: 76 zero-days disclosed, $1,047,000 awarded, and EV chargers from multiple manufacturers successfully exploited. Securing it requires coordinated controls across the full stack.
We examine the electric vehicle (EV) charging communication vulnerabilities revealed at the recent DEF CON 33, highlighting their mitigations and broader industry impacts.
VicOne and the American Center for Mobility (ACM) examine the evolving threat landscape of electric vehicle supply equipment (EVSE) and outline strategies to secure the grid edge.
While ISO 15118 promises smarter, more secure electric vehicle (EV) charging, it also introduces new risks. Discover what it takes to secure EV charging in our latest research.
At Black Hat USA 2025, security researchers revealed how vulnerabilities in EV chargers could cause charging cables to overheat and burst into flames. Their findings underscore the urgent need for stronger safeguards and hardware protection to ensure the safety of these devices.
We analyze the exploit chain used against the Tesla Wall Connector EV charger at Pwn2Own Automotive 2025, mapping it to the Automotive Threat Matrix and exploring its broader implications for automotive cybersecurity.
We discuss the two vulnerabilities discovered in the Phoenix Contact CHARX SEC-3100 EV charging controller at Pwn2Own Automotive 2024, highlighting their impact and possible mitigations.
Exposed serial interfaces in electric vehicle (EV) chargers present a significant vulnerability, enabling attackers to tamper with hardware and firmware. This creates opportunities for malicious activities, highlighting the need for strong security measures to prevent such exploits.
We examine two more Autel MaxiCharger vulnerabilities discovered at Pwn2Own Automotive 2024: CVE-2024-23967 and CVE-2024-23957. Both are classified as a stack-based buffer overflow, a classic yet avoidable programming error that could lead to remote code execution.
We examine CVE-2024-23938, a JuiceBox 40 smart EV charging station vulnerability discovered at Pwn2Own Automotive, and discuss its broader implications for the automotive industry.