VicOne and Zero Day Initiative to co-host Pwn2Own Automotive 2025, where contestants compete to discover zero-day vulnerabilities in connected cars and automotive devices.
Top security researchers from around the world to gather in Tokyo.
TOKYO — VicOne Inc. (headquarters in Shinjuku, Tokyo; CEO: Max Cheng), a subsidiary of Trend Micro Incorporated (headquarters in Shinjuku, Tokyo; CEO: Eva Chen) and a leading automotive cybersecurity solutions provider, is happy to announce that it will co-host the zero-day vulnerability discovery contest Pwn2Own Automotive 2025, in collaboration with Trend Micro’s vulnerability research community, Zero Day Initiative (ZDI).
The second installment of Pwn2Own Automotive, following its highly successful debut in January, where 49 zero-day vulnerabilities were discovered, has been confirmed. The event will be held from Wednesday, January 22, to Friday, January 24, 2025, at Tokyo Big Sight as part of the Automotive World 2025 – Advanced Automotive Technology Expo (https://www.automotiveworld.jp/tokyo/ja-jp.html#/).
Pwn2Own Automotive contributes to building a foundation for future automotive cybersecurity by strengthening cybersecurity measures and promoting the prevention of cyber incidents through the discovery of zero-day vulnerabilities. This effort addresses growing concerns about vulnerabilities and increased attack risks as the adoption of software-defined vehicles (SDVs) leads to software-controlled vehicle functions.
Under the platform of Zero Day Initiative (ZDI), the contest enables world-class security researchers to conduct real-world testing of the latest automotive technologies. By identifying zero-day vulnerabilities before they can circulate in the black market, the event facilitates swift countermeasures, helping prevent cyberattacks and enhancing the overall security of automotive products.
Additionally, the contest fosters innovation by recognizing the achievements of security researchers. This incentivizes further research and development while providing hands-on experience that nurtures talent in the cybersecurity industry, ultimately contributing to an improved global cybersecurity landscape.
About the contest
Participants (researcher teams) in Pwn2Own Automotive 2025 will compete by earning points in four categories: Tesla, in-vehicle infotainment (IVI) systems, electric vehicle (EV) chargers, and operating systems (OSs).
Each participant must demonstrate the ability to execute arbitrary code on the target devices or OS in their chosen category. They are allowed up to three attempts per target during the contest. Successful challenges earn points, and the participant or team with the highest points at the end of the contest is awarded the prestigious title of “Master of Pwn.”
To qualify, the vulnerabilities targeted must be previously unknown, undisclosed, and unreported. Any deviation from these criteria may result in a reduced payout. Only the first participant to successfully complete a challenge in each category is eligible for a monetary reward. The order of the challenges is determined randomly through a draw.
Comments from Brian Gorenc, Vice President of Threat Research at Trend Micro
“At Trend ZDI, we conduct research to address real-world cyberattack scenarios in the automotive sector. Hosting this contest in collaboration with VicOne, who has unmatched expertise and experience in automotive cybersecurity, is a key step in demonstrating our security research expertise within the automotive industry and the research community.”
Comments from Max Cheng, CEO of VicOne
“Through this contest, created in collaboration with ZDI, VicOne is contributing to building a safer future for software-defined vehicles (SDVs). By discovering zero-day vulnerabilities, this event enables security researchers to uncover unknown, unpublished, and unreported vulnerabilities, facilitating early risk identification and mitigation within the automotive industry. Such efforts are critically important for the global automotive sector, especially as the evolution of SDVs accelerates.”
About Pwn2Own Automotive 2025
Pwn2Own Automotive 2025
Date and time: January 22 – 24, 2025
Venue: Tokyo Big Sight West Hall (within Automotive World 2025)
Website: https://vicone.com/pwn2own-automotive
Registration deadline:
The deadline to register for the contest is 5:00 p.m. JST on January 16, 2025. To complete registration, participants must submit a white paper detailing the vulnerability testing procedures and execution methods. Remote participation online is also available.
For more information about Pwn2Own Automotive and the contest rules, visit: https://www.zerodayinitiative.com/Pwn2OwnAuto2025Rules.html
Automotive World 2025
Date and time: January 22 – 24, 2025, 10:00 a.m. – 5:00 p.m.
Venue: Tokyo Big Sight West Hall
Website: https://www.automotiveworld.jp/tokyo/ja-jp.html#/
About Trend Micro (Trend ZDI)
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro’s cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, the platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 65 countries, Trend Micro enables organizations to simplify and secure their connected world. www.TrendMicro.com
About VicOne
With a vision to secure the vehicles of tomorrow, VicOne delivers a broad portfolio of cybersecurity software and services for the automotive industry. Purpose-built to address the rigorous needs of automotive manufacturers, VicOne solutions are designed to secure and scale with the specialized demands of the modern vehicle. As a Trend Micro subsidiary, VicOne is powered by a solid foundation in cybersecurity drawn from Trend Micro’s 30+ years in the industry, delivering unparalleled automotive protection and deep security insights that enable our customers to build secure as well as smart vehicles. For more information, visit vicone.com.
Media Contact
Myla Pilao
myla_pilao@vicone.com
