OT Security

During the first day of Pwn2Own Automotive 2026, security teams earned a total of $516,500 by exploiting 37 zero-day vulnerabilities.

The command injection vulnerability was discovered by Zoom's Offensive Security team within Zoom Node Multimedia Routers (MMRs) prior to version 5.2.1716.0.

The vulnerability, with a CVSS score of 8.7, allowed attackers on a local network to bypass authentication in the password recovery feature.

Infosecurity Magazine reports that industrial technology environments have been subjected to more cyberattacks amid a twofold increase in industrial control system vulnerability exploitation.

WhisperPair vulnerabilities stem from improper implementation of Google's Fast Pair protocol, which enables quick device connections.

Amplified cybersecurity threats against industrial systems' operational technology have been highlighted by a new advisory from the Cybersecurity and Infrastructure Security Agency, the FBI, the UK's National Cyber Security Centre, and other Five Eyes nations' cybersecurity agencies, according to The Record, a news site by cybersecurity firm Recorded Future.

The partnership will see Škoda Auto leverage Upstream's platform to unify cyberthreat intelligence, risk signals, and compliance data into a single environment.