Confirmed!!! The Synacktiv team used a single integer overflow to exploit the #Tesla ECU with Vehicle (VEH) CAN BUS Control. The win $200,000, 20 Master of Pwn points, and a new Tesla Model 3 (their second!). Awesome work as always. #Pwn2Own #P2OVancouver

Some more info about xz attack: It's RCE, not auth bypass, and gated/unreplayable. bsky.app/profile/filipp…

🤯 The level of sophistication of the XZ attack is very impressive! I tried to make sense of the analysis in a single page (which was quite complicated)! I hope it helps to make sense of the information out there. Please treat the information "as is" while the analysis

xz backdoor is rce based on client pubkey auth, with killswitches bsky.app/profile/filipp…

#HEXACON2024 officially kicks off! 📣 We start by announcing our trainings for the next edition: hexacon.fr/trainings/ Training registrations will open in May

Kubernetes bootstrap tokens streamline the process of deploying nodes' TLS certificates. Paul Barbé & Scouty studied how these tokens could be exploited in AKS, leading to compromise of the whole cluster. synacktiv.com/publications/s…

Exploiting GitHub Actions jobs by registering a rogue #CICD runner to exfiltrate secrets, Hugow developed a tool for a real engagement, successfully compromising the GitHub organization! synacktiv.com/publications/h…

Our ninjas Aymeric P. and Karion are on stage at Sthack to talk about Autel chargers pwning ⚡

It's #SSTIC second day and Hugow presents how to exploit Github Actions ⚙️

Time for #SSTIC rump sessions with Antoine Cervoise!

It's already #SSTIC last day! Julien Legras and kalimero are up and ready to present ntdissector 🔍

Prix Entreprise 🏅 Bravo à l'équipe Synacktiv pour sa première place dans la catégorie entreprise !

Some of our ninjas are currently at #x33fcon! Come say hi 👋

Our storyteller Geoffrey B is back on stage to tell us about social engineering

Our ninja Lucas Georges was on stage today during REcon to talk about physical access control systems security 🔒

At the height of One Million Checkboxes's popularity I thought I'd been hacked. A few hours later I was tearing up, extraordinarily proud of some brilliant teens. A thread about my favorite story from running OMCB....

Worried about attackers sneakily spying on your optical fibers ? Learn with @r3n1k how they operate, and how you can defeat them - for cheaper than a flagship smartphone ! synacktiv.com/publications/d…

J'ai commencé à m'intéresser à la sécu en lisant MISCmag, et aujourd'hui j'ai la chance de voir mon travail publié dans leur hors-série. Merci à eux, et aussi à Synacktiv pour leur soutien 🥷

Update: Not onions