Uploaded March 2025 | Updated September 2026, 1 week ago
The OT version of Pwn2Own was held at S4x20, S4x22 and S4x23. There have been mobile Pwn2Own, automotive Pwn2Own, IIoT Pwn2Own and more. The research team at Claroty won a lot of money at the OT and other versions.
In this session Vera pulls together the lessons learned from the OT 0day vulnerabilities they found at Pwn2Own. What were the common techniques that worked across multiple systems? What targets were harder and why? How chaining together techniques can allow attackers to succeed when the direct approach fails. And more.
The OT version of Pwn2Own was held at S4x20, S4x22 and S4x23. There have been mobile Pwn2Own, automotive Pwn2Own, IIoT Pwn2Own and more. The research team at Claroty won a lot of money at the OT and other versions.
In this session Vera pulls together the lessons learned from the OT 0day vulnerabilities they found at Pwn2Own. What were the common techniques that worked across multiple systems? What targets were harder and why? How chaining together techniques can allow attackers to succeed when the direct approach fails. And more.
