The Zero Day Initiative drives vulnerability research in critical IIoT targets

DALLAS–(BUSINESS WIRE)–Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global leader in cybersecurity solutions, today announced a new vulnerability research competition, Pwn2Own Miami, run by Trend Micro’s Zero Day Initiative™ (ZDI). The first of its kind contest will challenge participants to find vulnerabilities in a range of popular industrial control system (ICS) software and protocols.

Over the past 12 years, Pwn2Own has encouraged vulnerability research in the most critical platforms for enterprises globally. In 2018, the ZDI purchased 224% more zero-day vulnerabilities in ICS software compared to the previous year. This growth is sustaining in 2019 so far, which proves the increasing need to identify vulnerabilities and harden these systems before they are exploited.

“As IT and OT converge under Industry 4.0 and digital transformation initiatives, security gaps are emerging that can be exploited to sabotage key production processes and steal sensitive intellectual property,” said Brian Gorenc, senior director of vulnerability research for Trend Micro. “By expanding our long-running Pwn2Own competition, we hope to raise awareness about the importance of protecting these environments and provide actionable insight for ICS vendors and customers to help improve their security.”

The ZDI is working with ICS vendors through the contest by responsibly disclosing the identified vulnerabilities and encouraging the timely release of patches. Collaborating with IIoT vendors through the ZDI program has led to stronger patch management processes, which help improve security for everyone.

“Being in ICS security for 20+ years, I have worked closely with vendors and the security community to protect the critical assets that live within industrial systems and vulnerabilities are an ongoing part of this work,” said Dale Peterson, founder and program chair of S4 Events. “Finding and patching bugs in these platforms isn’t easy. I’m excited to have the ZDI pointing their skilled community toward these targets at Pwn2Own Miami, to help expose these flaws so they can be properly addressed.”

Pwn2Own Miami will take place at the S4 conference in Miami South Beach on January 21-23, 2020. It will run across five categories with full cash payouts for successful entries, and over $250,000 in cash prizes available to contestants. Points will also be awarded to determine the overall competition winner, or Master of Pwn. The winner will also receive an additional 65,000 ZDI reward points, which earns them instant Platinum status in the ZDI rewards program.

For more information and the complete contest rules, please visit: https://www.zerodayinitiative.com/blog/2019/10/28/pwn2own-miami-bringing-ics-into-the-pwn2own-world.