Pwn2Own 2024: Tesla Hacks, Dozens of Zero-Days in Electrical Vehicles

**Executive summary:** At Pwn2Own 2024 in Tokyo researchers disclosed and demonstrated numerous zero-day vulnerabilities and multi-stage exploits affecting EV charging stations, vehicle operating systems, and Tesla components — including a GSM/BTS-based chain that gained root on a Tesla modem and pivoted to infotainment to control vehicle functions. The report highlights the expanding attack surface of modern cars, risks of infotainment-to-CAN-bus interaction, and the need for stronger separation, patching processes, and industry-wide security improvements.