Shulou(Shulou.com)11/24 Report--

CTOnews.com, March 25, Pwn2Own 2023 is currently being held in Vancouver, showing security experts from various countries and regions around the world. On the first day of the opening, security experts have successfully broken Win11, macOS and other systems by making use of undiscovered zero-day vulnerabilities or combination of vulnerabilities.

Haboob SA's Abdul Aziz Hariri took advantage of the vulnerability chain to successfully escape from Abdul Aziz Hariri of macOS and bypass the API blacklist to achieve intrusion. His discovery won a reward of $50, 000 (CTOnews.com Note: currently about 344000 yuan).

The STAR Labs team successfully invaded SharePoint through a zero-day leak chain and received a reward of $100000 (CTOnews.com Note: currently about 687000 yuan). The team received an additional reward of $15000 (CTOnews.com Note: currently about 103000 yuan) for discovering another vulnerability in Ubuntu.

Security experts successfully hacked into a Tesla Model 3 by carrying out a time-of-check to time-of-use (TOCTOU) attack and received a reward of $100000 (CTOnews.com Note: currently about 687000 yuan). The team also used TOCTOU to hack into macOS and received a reward of $40, 000 (CTOnews.com Note: currently about 275000 yuan).

Marcin Wi Verification zowski used the zero-day vulnerability of input validation to elevate the privileges of Win11 and received a bonus of $30,000 (CTOnews.com Note: currently about 206000 yuan).

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.