|
@
thezdi
Austin, Texas
|
|
Trend Micro’s Zero Day Initiative (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
|
|
|
1.844
Tweetovi
|
18
Pratim
|
38.708
Osobe koje vas prate
|
| Tweetovi |
|
Zero Day Initiative
@thezdi
|
15 h |
|
Tried to reverse a wireless router only to be thwarted by encrypted firmware? @trendytofu shows methods for overcoming this roadblock in his latest #MindShaRE blog. zerodayinitiative.com/blog/2020/2/6/…
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
30. sij |
|
Taking a look at what we published in 2019. What was the most popular vendor? The most common #CWE? All this and more in our 2019 retrospective. bit.ly/2Odao7x
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
24. sij |
|
For complete details on the results #Pwn2Own Miami and links to all the videos, check out our blog at zerodayinitiative.com/blog/2020/1/21… #P2OMiami #S4x20
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
24. sij |
|
The first-ever Pwn2Own Miami has come to a close. Watch to see the final day of ICS exploitation, hear from the contestants themselves, and learn who was crowned Master of Pwn. youtu.be/Frd1LVgjXas #P2OMiami #S4x20
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
The final count is in, and with 92.5 points total, @steventseeley and @mufinnnnnnn are crowned Master of Pwn! Congratulations to everyone who participated. We'll have a full wrap video with all the results available tomorrow morning. We'll see you in Vancouver. #P2OMiami pic.twitter.com/I9GSnPQom9
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
We have confirmed the bug used by Lucas had been previously reported. This counts as a partial win. He earns 12.5 points toward Master of Pwn.
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
Congrats to Inductive Automation for addressing the RCEs reported through #Pwn2Own Miami. The fixes are in the early access builds and is already referenced in their change logs. The fixes will also be available in 8.0.8. forum.inductiveautomation.com/t/nightly-chan… #P2OMiami
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
We're wrapping up #Pwn2Own Miami with one last attempt. Lucas Georges of Synacktiv (@Synacktiv) targets the Rockwell Automation FactoryTalk View SE with an RCE. #P2OMiami #S4x20
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
Inside the World's Highest-Stakes Industrial Hacking Contest wired.com/story/pwn2own-… via @wired
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
Confirmed! @ScepticCtf, @brymko, and @bl4ckic3 used a couple of bugs to get code execution on the Triangle Microworks SCADA Data Gateway. They earn $25,000 and 25 Master of Pwn points. That puts them in 2nd place with 87.5 total. #P2OMiami #S4x20 pic.twitter.com/1viIWpPeKM
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
Success! The team of @ScepticCtf, @brymko, and @bl4ckic3 needed little time to demo their RCE against the Triangle Microworks SCADA Data Gateway in the DNP3 category. They're off to the disclosure room with all the details. #P2OMiami #S4x20
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
Coming up at 2pm, @ScepticCtf, @brymko, and @bl4ckic3 will be targeting a remote code execution with continuation against the Triangle Microworks SCADA Data Gateway in the DNP3 category. This could be the most exciting demo of the contest. #P2OMiami #S4x20
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
Didn't find a glow in the dark #P2OMiami coin yesterday? You'll have another chance today at 3 ET in our trivia challenge. Check back for a chance to win! #S4x20 pic.twitter.com/APler1QxZI
|
||
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
|
||
|
Zero Day Initiative
@thezdi
|
23. sij |
|
|
||