Sony Patches Seven XAV-9500ES Flaws That Could Have Enabled Device Compromise
Sony patched seven XAV-9500ES vulnerabilities affecting Wi-Fi, Bluetooth, and USB. VicOne examines the attack paths, potential impact, and next steps.
Pwn2Own Automotive
20 Phoenix Contact CHARX Vulnerabilities Patched: How They Could Have Enabled Deeper EV Charger Control
Phoenix Contact patched 20 CHARX SEC-3xxx EV charger vulnerabilities in firmware 1.9.1. VicOne examines their wider implications and practical steps for operators.
From Pwn2Own Automotive 2026: Seven Kenwood DNR1007XR Vulnerabilities Now Patched
Kenwood patched seven DNR1007XR vulnerabilities discovered at Pwn2Own Automotive 2026, addressing direct and multistep paths to root access.
Attack Surfaces from Pwn2Own Automotive 2026: Key Findings for Security Teams
This blog highlights three attack surfaces from Pwn2Own Automotive 2026 and what they reveal about emerging risks in EV chargers, IVI systems, and connected vehicle security.
From Bug Bounty to Battlefield: What Pwn2Own Automotive Reveals About Real-World Risk
The Pwn2Own Automotive zero-day vulnerability discoveries highlight expanding attack surfaces, gaps in CVE visibility, and evolving automotive cybersecurity risks.
Pwn2Own Automotive 2026 Day 3: New Master of Pwn Announced and Other Highlights
Pwn2Own Automotive 2026 set a new record with 76 unique zero-day vulnerabilities discovered, exposing the rapidly expanding attack surface across SDVs, IVI systems, and EV charging infrastructure. The final day crowned Fuzzware.io as Master of Pwn 2026, with 28 Master of Pwn points.
Pwn2Own Automotive 2026 Day 2: EV Chargers Hit Full Throttle
Day 2 delivered 29 new zero-days, pushing the total to a record 66. Researchers repeatedly compromised Level 2/3 EV chargers and IVI systems using practical flaws like exposed interfaces and command injection. The takeaway: automotive and charging infrastructure attacks are now repeatable at scale—shifting cyber risk from theoretical to immediate operational impact.
Pwn2Own Automotive 2026: Uncovering 37 Unique Zero-Days
Pwn2Own Automotive 2026 Day 1 opened with record-breaking momentum, with researchers successfully compromising infotainment systems, EV chargers, and Tesla interfaces—highlighting how expansive today’s automotive attack surface has become. The surge in entries and chained exploits confirms a clear shift: in the SDV era, automotive cyber risk is no longer isolated to the vehicle, but systemic across the entire ecosystem.
Pwn2Own Automotive 2026: Turning Zero-Day Discovery into Automotive Foresight
Pwn2Own Automotive 2026 exposes critical zero-day vulnerabilities in software-defined vehicles before they escalate into real-world business and operational risk. By ensuring zero-day vulnerabilities move from exposure to resolution, the event transforms discovery into Automotive Foresight—helping organizations stay ahead of risk before it reaches the road.
From Pwn2Own Automotive: How Zero-Day Vulnerabilities Expose Gaps in EVSE Cybersecurity Standards
We examine the vulnerabilities discovered in an EV charger during Pwn2Own Automotive to reveal where EVSE cybersecurity standards fall short and why stronger, unified measures are critical for securing the charging infrastructure.
Pwn2Own Automotive 2026 Gears Up: Rules, Targets, and What’s New
Pwn2Own Automotive returns to Tokyo in January 2026 for its third edition. Discover the rules, targets, and what’s new in the world’s largest automotive-focused ethical hacking contest.
From Pwn2Own Automotive 2025: Unpacking the Tesla Wall Connector Exploit Chain and Its Broader Cybersecurity Implication
We analyze the exploit chain used against the Tesla Wall Connector EV charger at Pwn2Own Automotive 2025, mapping it to the Automotive Threat Matrix and exploring its broader implications for automotive cybersecurity.
Breaking Down the Pioneer IVI System 3-Bug Exploit Chain From Pwn2Own Automotive 2024
We analyze the three-bug exploit chain demonstrated by security researchers against the Pioneer DMH-WT7600NEX IVI system at Pwn2Own Automotive 2024. We map it to the Automotive Threat Matrix and highlight industry best practices for mitigating similar exploits.