By Tomas Foltyn, security writer at ESET<\/p>\n
A duo of white-hat hackers have earned themselves a brand new Tesla Model 3 after exposing a vulnerability in the car\u2019s integrated browser.<\/p>\n
Richard Zhu and Amat Cam, aka team \u2018Fluoroacetate\u2019, managed to break into the electric sedan via its infotainment system at the Pwn2Own hacking contest in Vancouver, Canada. They exploited a JIT (or \u2018just-in-time\u2019) bug in the browser renderer process to display a message on the infotainment system.<\/p>\n
In addition to walking away with the car, Zhu and Cam received US$35,000 for discovering the bug, reads a\u00a0Zero Day Initiative report. It\u2019s worth noting that the flaw didn\u2019t enable the ethical hackers to take control of the vehicle itself.<\/p>\n
We reported in January\u00a0that Tesla had decided to put up one of its models as a target at the event that took place between March 20-22.<\/p>\n
The duo had a pretty good few days at the event, having\u00a0scooped $375,000 in prize money\u00a0in total, including for finding flaws in Apple Safari, Microsoft Edge, VMware Workstation, Oracle Virtualbox, and Windows 10.<\/p>\n
In its statement after Zhu and Cam\u2019s find, the electric automaker said that a fix for the vulnerability (classified as\u00a0CVE-2019-9977) was on its way.<\/p>\n
\u201cIn the coming days we will release a software update that addresses this research,\u201d reads a\u00a0statement from Tesla on ZDNet\u00a0last Friday. \u201cWe understand that this demonstration took an extraordinary amount of effort and skill, and we thank these researchers for their work to help us continue to ensure our cars are the most secure on the road today.\u201d<\/p>\n
Tesla\u00a0launched its own bug bounty program\u00a0in 2014 and has since given away\u00a0hundreds of thousands of US dollars\u00a0in rewards for reporting vulnerabilities in its vehicle systems.\u00a0According to Teslarati, last year saw the company extend the program to its energy products.<\/p>\n","protected":false},"excerpt":{"rendered":"
By Tomas Foltyn, security writer at ESET A duo of white-hat hackers have earned themselves a brand new Tesla Model 3 after exposing a vulnerability in the car\u2019s integrated browser. Richard Zhu and Amat Cam, aka team \u2018Fluoroacetate\u2019, managed to break into the electric sedan via its infotainment system at the Pwn2Own hacking contest in […]<\/p>\n","protected":false},"author":13,"featured_media":10352,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_meta-robots-noindex":"","_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_pr_autopilot_social_copy":"","_yoast_wpseo_opengraph_title":"","_yoast_wpseo_opengraph_description":"","_yoast_wpseo_opengraph_image":"","_yoast_wpseo_opengraph_image_id":0,"_yoast_wpseo_twitter_title":"","_yoast_wpseo_twitter_description":"","_yoast_wpseo_twitter_image":"","_yoast_wpseo_twitter_image_id":0,"_yoast_wpseo_primary_category":0,"_extra_hide_author_box":"","_extra_featured_post":"","_partner_post_id":0,"footnotes":""},"categories":[439],"tags":[],"class_list":["post-10353","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","et-has-post-format-content","et_post_format-et-post-format-standard"],"yoast_head":"\n