Andy Greenberg / Wired
Andy Greenberg / Wired
Researchers at First Pwn2Own Event Focusing on Industrial Control Security Take Home $280,000, Incite Team Top Winner
Researchers who took part this week in the Zero Day Initiative’s Pwn2Own Miami hacking competition, which for the first time focused on industrial control at the S4 industrial control system security conference, have earned a total of $280,000 for exploits targeting industrial control systems (ICS) and associated protocols. Participants were given three months to study the industrial control system software that would serve as the contest’s targets, developing their hacking techniques ahead of the competition. Over the three-day competition, contestants successfully hacked every one of the eight industrial control system applications put before them, with hackers offered as much as $25,000 if they could exploit the target software to achieve remote code execution on the victim machines. The winner of this event was the Incite Team, whose members were researchers Steven Seeley and Chris Anastasio. They earned a total of $80,000 for exploits targeting the Triangle Microworks SCADA Data Gateway, Inductive Automation Ignition, Rockwell Automation Studio 5000, the OPC Foundation’s OPC UA .NET standard, and Iconics Genesis64.
Related: SecurityWeek, Zero Day Initiative
MoreSecurityWeek: Researchers Earn $280,000 for Hacking Industrial Systems at Pwn2Own Miami
Zero Day Initiative: PWN2OWN MIAMI 2020 – SCHEDULE AND LIVE RESULTS
@Wired: Pwn2Own is the world's biggest hacking competition. For the first time it focused exclusively on industrial control software. Every target was an application that touches physical machinery and the compromises could in many cases have catastrophic effects.
