PCAutomotive’s Post

Counting down the days until we see you in Munich at Auto-ISAC European Cybersecurity Summit. Stop by our booth #7 to see our latest advancements in automotive penetration testing and cybersecurity monitoring services. Meet out team at the booth Konstantin Matiukin, EMBA Gianfranco Vinucci and Danila Parnishchev to discuss latest innovations. Learn more:https://pcautomotive.com/ #cybersecurity #automotive #penetration #test

We are happy to announce the opening of our new office in Munich! PCAutomotive has expanded its presence to a strategically important new location. Germany, one of the leading automotive markets in the world, is a focal point for our expansion efforts as our operations continue to grow in the DACH region. Our new office will enable PCAutomotive to collaborate more closely with our clients and partners, enhancing our ability to serve and innovate in this key market. We're thrilled to share our expertise in automotive cybersecurity, penetration testing and cybersecurity monitoring and can’t wait to meet our clients and partners at our new office as we embark on this journey of growth together. Find out more about our solutions:https://pcautomotive.com/ #officeopening #automotive #cybersecurity #pentesting #growth #munich #success

Looking forward to seeing you at the Auto-ISAC European Cybersecurity Summit 2024 at BMW Welt, Munich on June 11-13.  Join us at our booth 7 to see our exclusive demo. Drop by to meet our team and have an informal discussion about Automotive Cybersecurity.  Or pre-arrange a meeting with us here, using “Contact us” form: https://pcautomotive.com/ #automotive #cybersecurity #vehiclethreat #penetrationtest #AutoISAC 

As AutoSec & China Automotive Cybersecurity and Data Security Summit 2024 comes to an end, we’d like to thank everyone who came to meet us. We are proud to be sponsoring one of the biggest cybersecurity event in China in automotive industry. More than thousand attendees, valuable discussions on Vehicle threat Intelligence, VSOC and Penetration tests marked this year's event in China. We’re looking forward to seeing you soon! Until then, feel free to explore our solutions and capabilities for cybersecurity: https://lnkd.in/djnZi6-b #automotive #cybersecurity #vehiclethreat #penetrationtest #AutoSec

𝐉𝐨𝐢𝐧 𝐏𝐂𝐀𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞 𝐚𝐭 𝐭𝐡𝐞 2024 𝐀𝐮𝐭𝐨-𝐈𝐒𝐀𝐂 𝐄𝐮𝐫𝐨𝐩𝐞𝐚𝐧 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐒𝐮𝐦𝐦𝐢𝐭 📍 BMW Welt, Munich, Germany | 📅 June 11-13, 2024 We are pleased to announce that PCAutomotive is sponsoring one of the key events for all professionals in automotive cybersecurity throughout the year in Europe – the Auto-ISAC European Cybersecurity Summit 2024. This year, the event will take place at the iconic BMW Welt in Munich, Germany, from June 11th to 13th. The agenda of the summit is filled with exciting presentations from leading players in the automotive and cybersecurity sectors: BMW Group, BSI, Continental, Bosch, and Daimler Trucks. The PCAutomotive team will present its exclusive demo at the booth during the summit. We look forward to the Summit, its insightful presentations, and the exceptional networking opportunities with industry professionals.

𝐏𝐂𝐀𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞 𝐬𝐩𝐨𝐧𝐬𝐨𝐫𝐬 𝐀𝐮𝐭𝐨𝐒𝐞𝐜 𝐂𝐡𝐢𝐧𝐚 PCAutomotive 赞助第八届中国汽车网络安全与数据安全合规峰会（2024）。 PCAutomotive is pleased to announce that the company is sponsoring the upcoming 8th AutoSec & China Automotive Cybersecurity and Data Security Summit 2024. The summit will take place in Shanghai, China, on April 11th-12th, 2024. Organized by Taas Labs, AutoSec China is the most influential event for companies in the automotive cybersecurity market in China. This year, the summit is expected to be attended by over 1,300 industry experts and more than 50 top industry speakers. It will gather government officials, OEM security experts, Tier 1 & Tier 2 leaders, and researchers to present the industry's latest research, practices, and developments in the Cyber and Data security ecosystem of intelligent vehicles. At the summit, PCAutomotive will showcase its complete portfolio of cybersecurity assessment and penetration testing services for the automotive industry, along with the latest offerings of Vehicle Threat Intelligence (VTI) and Vehicle Security Operations Center (VSOC).

𝐎𝐮𝐫 𝐈𝐧𝐬𝐢𝐠𝐡𝐭𝐬 𝐟𝐫𝐨𝐦 𝐏𝐰𝐧2𝐎𝐰𝐧 𝐀𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞, 𝐓𝐨𝐤𝐲𝐨 2024 𝐈𝐧𝐭𝐫𝐨𝐝𝐮𝐜𝐭𝐢𝐨𝐧: The first-ever Pwn2Own Automotive event, co-hosted by VicOne and Trend Micro Zero Day Initiative, marked a significant milestone in the cybersecurity landscape of the automotive industry. This event attracted 17 𝐭𝐞𝐚𝐦𝐬 𝐚𝐧𝐝 𝐢𝐧𝐝𝐢𝐯𝐢𝐝𝐮𝐚𝐥𝐬 𝐟𝐫𝐨𝐦 𝐚𝐫𝐨𝐮𝐧𝐝 𝐭𝐡𝐞 𝐰𝐨𝐫𝐥𝐝 to expose vulnerabilities in automotive systems, advocating for enhanced security measures across the industry. 𝐊𝐞𝐲 𝐅𝐢𝐧𝐝𝐢𝐧𝐠𝐬: The competition targeted key areas including Tesla Systems, Operating Systems, In-Vehicle Infotainment (IVI) Systems, and Electric Vehicle (EV) Chargers over an intense three-day period. The discovery of 49 𝐮𝐧𝐢𝐪𝐮𝐞 𝐳𝐞𝐫𝐨-𝐝𝐚𝐲 𝐯𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬 highlighted the pressing need for more robust security protocols within the automotive sector. 𝐇𝐢𝐠𝐡-𝐋𝐞𝐯𝐞𝐥 𝐓𝐫𝐞𝐧𝐝𝐬: The event confirmed two critical trends impacting the automotive industry with regard to cybersecurity: 𝐓𝐫𝐞𝐧𝐝 1: We observe increasing competitiveness in the EV market, which is largely driven by advancements in new technologies, supported significantly by both software and hardware development. For automakers to remain competitive, it is crucial to invest in these advancements, ensuring developments occur within the shortest possible time to market. 𝐓𝐫𝐞𝐧𝐝 2: There is an increasing sophistication of automotive systems, which broadens the potential landscape for attacks. This complexity introduces new vulnerabilities to cyberattacks. Developers are pressured to bring these advanced systems to market swiftly, and as observed at Pwn2Own, not all vendors prioritize security. The participation of automakers like Tesla in Pwn2Own is commendable, and it would be beneficial to see more automotive OEMs and Tier 1 suppliers participating in future events. 𝐎𝐮𝐫 𝐏𝐚𝐫𝐭𝐢𝐜𝐢𝐩𝐚𝐭𝐢𝐨𝐧: PCAutomotive actively participated in this significant event, with a particular focus on IVI system vulnerabilities. Our team's efforts led to recognition with a $40,000 𝐩𝐫𝐢𝐳𝐞 𝐟𝐨𝐫 𝐞𝐱𝐩𝐥𝐨𝐢𝐭𝐢𝐧𝐠 𝐚 𝐔𝐬𝐞-𝐀𝐟𝐭𝐞𝐫-𝐅𝐫𝐞𝐞 (𝐔𝐀𝐅) 𝐯𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐲, showcasing our commitment to and expertise in automotive cybersecurity. 𝐂𝐨𝐧𝐜𝐥𝐮𝐬𝐢𝐨𝐧 𝐁𝐞𝐲𝐨𝐧𝐝 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞: Simply meeting existing standards does not adequately counter the swiftly evolving landscape of threats. 𝐂𝐨𝐧𝐭𝐢𝐧𝐮𝐨𝐮𝐬 𝐓𝐞𝐬𝐭𝐢𝐧𝐠: A continuous, hands-on testing approach is crucial for effectively identifying and mitigating vulnerabilities. 𝐂𝐮𝐥𝐭𝐮𝐫𝐞 𝐨𝐟 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐰𝐚𝐫𝐞𝐧𝐞𝐬𝐬: Fostering a strong culture of security awareness is vital for the automotive sector to stay ahead of potential threats. 𝘕𝘰𝘵𝘦: 𝘖𝘯 𝘱𝘩𝘰𝘵𝘰𝘴 - 𝘗𝘊𝘈𝘶𝘵𝘰𝘮𝘰𝘵𝘪𝘷𝘦 𝘢𝘵 𝘗𝘸𝘯2𝘖𝘸𝘯 𝘈𝘶𝘵𝘰𝘮𝘰𝘵𝘪𝘷𝘦.

🏆 𝐆𝐫𝐞𝐚𝐭 𝐧𝐞𝐰𝐬 𝐟𝐫𝐨𝐦 𝐓𝐨𝐤𝐲𝐨! We are thrilled to announce that our team has been awarded a $40,000 prize at the 𝐏𝐰𝐧2𝐎𝐰𝐧 𝐀𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞 competition, which took place in Tokyo from January 23-25, 2024. The PCAutomotive Team successfully leveraged a Use-After-Free (UAF) exploit against the Alpine Halo9 iLX-F509, showcasing our expertise and commitment to advancing cybersecurity in the automotive sector. We are incredibly proud of our team's accomplishment, which underscores PCAutomotive's position as a leading provider of high-quality penetration testing services for the automotive industry. Congrats to the team Mikhail E., Polina Smirnova, Radu Motspan and Danila Parnishchev! A warm thank you to the Trend Micro Zero Day Initiative for organizing such a remarkable contest. Your efforts in bringing together the brightest minds in cybersecurity are invaluable to the community. #Pwn2Own #P2OAuto

𝐏𝐂𝐀𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞 𝐔𝐧𝐯𝐞𝐢𝐥𝐬 7 𝐍𝐞𝐰𝐥𝐲 𝐏𝐮𝐛𝐥𝐢𝐬𝐡𝐞𝐝 𝐀𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐕𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬 PCAutomotive has identified and disclosed seven critical vulnerabilities in the automotive sector, ranging from CVE-2023-28895 to CVE-2023-28901. These vulnerabilities include hard-coded passwords in power controller chip memory and UDS services, weak password encoding in UDS services, Denial-of-Service vulnerability in MIB3 Head Unit via Apple CarPlay, and in other ECUs via OBD, as well as data disclosure issues on backend automotive servers. In collaboration with the Automotive Security Research Group (ASRG), these vulnerabilities have been responsibly published, offering invaluable insights for enhancing automotive system security. Links to the CVEs: https://lnkd.in/dGZmnbyy https://lnkd.in/d-Z9u_AF https://lnkd.in/dFmNMvfJ https://lnkd.in/dsf9vZMH https://lnkd.in/d9kafFe2 https://lnkd.in/dfDaJD9X https://lnkd.in/dQ-sM6dA 𝐓𝐡𝐢𝐬 𝐢𝐧𝐢𝐭𝐢𝐚𝐭𝐢𝐯𝐞 𝐡𝐢𝐠𝐡𝐥𝐢𝐠𝐡𝐭𝐬 𝐏𝐂𝐀𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞'𝐬 𝐞𝐱𝐜𝐞𝐩𝐭𝐢𝐨𝐧𝐚𝐥 𝐞𝐱𝐩𝐞𝐫𝐭𝐢𝐬𝐞 𝐚𝐧𝐝 𝐝𝐞𝐝𝐢𝐜𝐚𝐭𝐢𝐨𝐧 𝐭𝐨 𝐞𝐧𝐬𝐮𝐫𝐢𝐧𝐠 𝐭𝐡𝐞 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐨𝐟 𝐦𝐨𝐝𝐞𝐫𝐧 𝐯𝐞𝐡𝐢𝐜𝐥𝐞 𝐬𝐲𝐬𝐭𝐞𝐦𝐬. The PCAutomotive research team would like to thank Automotive Security Research Group (ASRG) for their strong dedication to improving automotive safety and security.