Some of our ninjas are organizing the Hexacon cybersecurity conference and Synacktiv is proud to support this adventure. If you love highly technical talks and trainings, the registration has just opened. Get on board! hexacon.FR/register

All early bird tickets are gone for good! Thank you to our first supporters 🙏 Standard tickets are now available at 850€ ➡️ hexacon.fr/register/ Another way to grab free tickets might appear soon...🤫

Après 3 ans de pause, BeeRumP 2022 aura lieu le 16 septembre dans les locaux du @GroupeESIEA à Ivry ! Vous pouvez d'ores et déjà envoyer vos soumissions de rump à [email protected] (le meilleur moyen d'avoir une place 😁) !

Congratz David B and vdehors for the nomination!

Congratz dude! Well-deserved nomination!

Already missing the crazy atmosphere of Hexacon but so proud of what we accomplished together ❤️ Thank you to everyone who put their trust in us for this first edition: speakers, committee, trainers, sponsors and attendees 🙏 Return home safely and see you at #HEXACON2023

Synacktiv's ekt0 details the artifacts left by common legitimate third-party remote access tools such as TeamViewer, AnyDesk, Atera & SplashTop during their setup and use. synacktiv.com/publications/l…

Wow! It took the Synacktiv team less than two minutes to demonstrate their exploit of the #Tesla Gateway. If confirmed, they will win $100,000 and a Tesla Model 3 (plus these cool hockey pucks). #Pwn2Own #P2OVancouver

Excellent start for the team! David B and vdehors fully compromised the Tesla Model 3 gateway from the ethernet network 💪 We should book a new parking space now...

Success! Synacktiv used a TOCTOU bug to escalate privileges on Apple macOS. They earn $40,000 and 4 Master of Pwn points. #Pwn2Own #P2OVancouver

That wraps up the first day of #P2OVancouver 2023! We awarded $375,000 (and a Tesla Model 3!) for 12 zero-days during the first day of the contest. Stay tuned for day two of the contest tomorrow! #Pwn2Own

Success / Collision – Thomas Imbert (Mastho) and Thomas Bouzerar (Major_Tom) from Synacktiv demonstrated a 3-bug chain against Oracle VirtualBox with a Host EoP. One bug was previously known. They still earn $80,000 and 8 Master of Pwn points. #Pwn2Own #P2OVancouver

CONFIRMED! Synacktiv used a heap overflow & an OOB write to exploit the Infotainment system on the Tesla. When they gave us the details, we determined they actually qualified for a Tier 2 award! They win $250,000 and 25 Master of Pwn points. 1st ever Tier 2 award. Stellar work!

Day 2 wraps up with another success! Tanguy Dubroca (Sideway) from Synacktiv (Synacktiv) used an incorrect pointer scaling leading to privilege escalation on Ubuntu Desktop. They earn $30,000 and 3 Master of Pwn points. #P2OVancouver #Pwn2Own

That’s a wrap for #P2OVancouver! Contestants disclosed 27 unique 0-days and won a combined $1,035,000 (and a car)! Congratulations to the Masters of Pwn, Synacktiv, for their huge success and hard work! They earned 53 points, $530,000, and a Tesla Model 3. #Pwn2Own

Team Synacktiv: Eloi Benoist-Vanderbeken Eloi Benoist-Vanderbeken, David Berard David B, Vincent Dehors vdehors, Tanguy Dubroca Sideway, Thomas Bouzerar Major_Tom, and Thomas Imbert Mastho. They also receive a $25,000 bonus and Platinum status in 2024.

Pirater une Tesla model 3 en 2 minutes et repartir avec, l'exploit de Eloi Benoist-Vanderbeken et David Berard de Synacktiv 🗨️"Le concours est annoncé environ 3 mois avant l'événement. Et on va avoir la liste des cibles qui font partie de l'événement notamment la Tesla" 🎙️ David Berard

Last sponsor we want to introduce is a special one: it's Synacktiv, the company organizing #HEXACON2023. Leader in offensive security, Synacktiv helps companies assess their networks's security. There will be a lot of ninjas in the conference, feel free to talk to them! 🤗

Ready for tomorrow? #HEXACON2023

That’s a wrap for Day 1 of #Pwn2Own Automotive! We awarded $722,500 in prizes for 24 unique exploits. Tune back in tomorrow here or at the ZDI blog for more updates! Here are the current standings: