Viettel’s Cybersecurity Team Triumphs at Pwn2Own 2024

In a remarkable display of skill and expertise, Viettel’s cybersecurity team has emerged as champions at the prestigious Pwn2Own 2024 competition. This victory marks the second consecutive year that the team has claimed the top spot in one of the world’s largest and most respected cybersecurity contests.

What is Pwn2Own?

Pwn2Own, organized by the Zero Day Initiative (ZDI), has been a cornerstone of the cybersecurity landscape since its inception in 2007. The competition invites teams of white hat hackers and security researchers from around the globe to identify and exploit zero-day vulnerabilities—previously unknown security flaws—in widely used devices and software. Participants target a range of products, including smartphones, security cameras, office equipment, and various software applications, all in the name of enhancing cybersecurity.

Viettel’s Outstanding Performance

This year, Viettel’s cybersecurity team showcased their prowess by discovering and exploiting an impressive nine zero-day vulnerabilities across products from major manufacturers such as HP, Canon, Synology, and QNAP Systems. Their remarkable performance earned them a total of 33 points, nearly doubling the score of the second-placed team, Team Cluck from the United States, which managed to secure only 2 points.

Following Viettel and Team Cluck were other notable competitors, including Midnight Blue from Europe, Neodyme from Germany, and DEVCORE from Taiwan (China). Each of these teams has a history of high achievements in Pwn2Own and other cybersecurity competitions, making Viettel’s victory even more significant.

Financial Rewards and Impact

The stakes at Pwn2Own are high, with each discovered vulnerability earning participants between $20,000 and $50,000. The total prize pool for the competition is approximately $1 million, and Viettel’s cybersecurity team walked away with over $200,000 for their efforts. However, the financial rewards are just one aspect of their achievement; the vulnerabilities they identified will also play a crucial role in helping manufacturers enhance the security of their devices. This proactive approach helps protect the sensitive data and privacy of individuals and businesses that rely on these technologies.

The Role of the Zero Day Initiative

The Zero Day Initiative (ZDI) was founded by Trend Micro in 2005 to promote the discovery and responsible disclosure of zero-day vulnerabilities. When a vulnerability is reported through ZDI, the program collaborates with device and software developers to ensure timely fixes are implemented, thereby safeguarding users from potential threats. This initiative not only fosters a culture of security awareness but also encourages researchers to contribute to the overall safety of the digital landscape.

Conclusion

Viettel’s victory at Pwn2Own 2024 is a testament to the team’s dedication, expertise, and innovative spirit in the field of cybersecurity. Their success not only highlights the growing capabilities of Vietnamese cybersecurity professionals on the global stage but also underscores the importance of collaborative efforts in identifying and mitigating security vulnerabilities. As cyber threats continue to evolve, competitions like Pwn2Own play a vital role in enhancing the security of devices and software, ultimately benefiting users worldwide.

As the digital landscape becomes increasingly complex, the contributions of teams like Viettel’s are essential in ensuring a safer online environment for everyone. Their achievements inspire future generations of cybersecurity experts and reinforce the importance of vigilance in the face of ever-evolving cyber threats.

Written by Thu Hang