{"id":3589,"date":"2022-05-21T09:07:52","date_gmt":"2022-05-21T03:37:52","guid":{"rendered":"https:\/\/techcontrol.in\/tesla-microsoft-and-ubuntu-bugs-found-during-pwn2own-hacking-competition\/"},"modified":"2022-05-21T09:07:52","modified_gmt":"2022-05-21T03:37:52","slug":"tesla-microsoft-and-ubuntu-bugs-discovered-throughout-pwn2own-hacking-competitors","status":"publish","type":"post","link":"https:\/\/techcontrol.in\/index.php\/2022\/05\/21\/tesla-microsoft-and-ubuntu-bugs-discovered-throughout-pwn2own-hacking-competitors\/","title":{"rendered":"Tesla, Microsoft and Ubuntu bugs discovered throughout Pwn2Own hacking competitors"},"content":{"rendered":"

<\/p>\n

\n

A number of bugs in Microsoft, Ubuntu and Tesla merchandise had been discovered and exploited through the three-day Pwn2Own hacking convention in Vancouver this week.<\/p>\n

The convention \u2013 organized by Development Micro\u2019s Zero Day Initiative \u2013 provides hackers an opportunity to earn cash in alternate for locating and exploiting vulnerabilities in fashionable merchandise.\u00a0<\/p>\n

By the top of day two on Thursday, the convention had paid out $945,000 in rewards, together with $75,000 to hackers with offensive safety firm Synacktiv<\/a> for 2 distinctive bugs discovered within the Tesla Mannequin 3 Infotainment System.<\/p>\n

\n

The bugs allowed hackers to take over a number of the automobile\u2019s techniques. <\/p>\n

The Zero Day Initiative additionally ended up buying a vulnerability within the Tesla Mannequin 3 Diagnostic Ethernet and disclosing it to the automobile producer.\u00a0<\/p>\n

A safety engineer at Sea Safety Response, Bien Pham, and a crew from Northwestern College demonstrated<\/a> two \u2018Use After Free\u2019 elevation of privilege vulnerabilities on Ubuntu Desktops. Use After Free bugs are vulnerabilities that happen due to points with how functions handle their reminiscence. The reminiscence corruption bugs are usually used to assault and exploit browsers.\u00a0<\/p>\n

\"\"
The Northwestern College crew. Picture: The Zero Day Initiative<\/figcaption><\/figure>\n

One other Use After Free bug was present in Ubuntu on day three of the competitors alongside different Microsoft Home windows 11 vulnerabilities.\u00a0<\/p>\n

The primary day of the occasion noticed 16 zero-day bugs exploited in Ubuntu Desktop, Apple Safari, Oracle Virtualbox, Mozilla Firefox, in addition to Microsoft\u2019s Home windows 11 and Groups.\u00a0<\/p>\n

Greater than $800,000 was awarded for the 16 zero-days exploited.\u00a0<\/p>\n

The competitors, which marked its fifteenth anniversary this 12 months, featured 17 contestants from dozens of cybersecurity corporations focusing on 21 totally different merchandise throughout a number of classes. STAR Labs led the best way on the finish of the second day with whole earnings of $270,000.\u00a0<\/p>\n

Distributors have 90 days to provide a repair for all vulnerabilities disclosed through the competitors.\u00a0<\/p>\n

\n
\n
\n
\n

Jonathan has labored throughout the globe as a journalist since 2014. Earlier than transferring again to New York Metropolis, he labored for information retailers in South Africa, Jordan and Cambodia. He beforehand lined cybersecurity at ZDNet and TechRepublic.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n