News
Tesla cybersecurity measures fail, hackers win Model 3 at hacking event
Tesla has been hacked at the Pwn2Own hacking event, and the hacking group has taken home a Tesla Model 3 and $100,000.
As electric vehicles and their significant amount of integrated software have become more common in everyday life, the security around them has become significantly more critical. In the worst-case scenario, a hacker could not only gain access to a car but could leak user data or even take control of the vehicle. Now, at the Pwn2Own hacking competition, a group of hackers successfully hacked a Tesla Model 3 and won the vehicle along with a $100,000 prize.
The successful hack completed by the group Synactiv was initially reported by the Zero Day Initiative Twitter account, revealing that the group had used a TOCTOU exploit to gain access to the vehicle.
One of the main highlights from Day One of #Pwn2Own Vancouver 2023: @Synacktiv vs the Tesla Model 3. Their successful demonstration earned them $100,000 and the car itself pic.twitter.com/d7TY5mKHxK
— Zero Day Initiative (@thezdi) March 23, 2023
CONFIRMED! @Synacktiv successfully executed a TOCTOU exploit against Tesla – Gateway. They earn $100,000 as well as 10 Master of Pwn points and this Tesla Model 3. #Pwn2Own #P2OVancouver pic.twitter.com/W61NasJPAl
— Zero Day Initiative (@thezdi) March 22, 2023
Thanks to the nature of the hacking competition, the details of how the hack was performed have not been made entirely public to avoid a security risk for Tesla owners. Still, the method the hackers used was relatively straightforward.
The TOCTOU (Time-Of-Check Time-Of-Use) exploit involves altering internal files to gain system access. In essence, the hackers are altering the files that a system will check to ensure someone actually should have access. This could, for example, involve changing login credentials to allow yourself access. However, as the name suggests, this is highly time-dependent, as it involves using the discrepancy of time between the system checking the files and a person actually being logged in.
Pwn2Own is one of the most famous hacking events in the world. It involves teams of hackers attempting to gain access to some of the most popular software available on the market. Each group of hackers and security researchers will be given a list of devices and software and a series of objectives to achieve. The first team to navigate through the list gains a cash prize. In this case, for completing this step of the competition quickest, the Synactive team won the Tesla Model 3 that they hacked.
With software becoming ever more interconnected with the vehicles we drive, focusing on keeping that software secure will only become more important as time passes. And with the increasing interconnectedness of these car systems, the consequences of not keeping these systems secure will only become more dire. Hopefully, automakers will take this threat seriously and continue to work to keep their items as safe and secure as possible.
What do you think of the article? Do you have any comments, questions, or concerns? Shoot me an email at william@teslarati.com. You can also reach me on Twitter @WilliamWritin. If you have news tips, email us at tips@teslarati.com!
News
Tesla seeks approval to test FSD Supervised in new Swedish city
Tesla has applied to conduct local Full Self-Driving (Supervised) testing in the city of Jönköping, Sweden.
Tesla has applied to conduct local Full Self-Driving (Supervised) testing in the city of Jönköping, Sweden.
As per local outlet Jönköpings-Posten, Tesla has contacted the municipality with a request to begin FSD (Supervised) tests in the city. The company has already received approval to test its Full Self-Driving (Supervised) software in several Swedish municipalities, as well as on the national road network.
Sofia Bennerstål, Tesla’s Head of Public Policy for Northern Europe, confirmed that an application has been submitted for FSD’s potential tests in Jönköping.
“I can confirm that we have submitted an application, but I cannot say much more about it,” Bennerstål told the news outlet. She also stated that Tesla is “satisfied with the tests” in the region so far.
The planned tests in Jönköping would involve a limited number of Tesla-owned vehicles. Trained Tesla safety drivers would remain behind the wheel and be prepared to intervene if necessary.
Tesla previously began testing in Nacka municipality after receiving local approval. At the time, the company stated that cooperation between authorities, municipalities, and industry enables technological progress and helps integrate future transport systems into real-world traffic conditions, as noted in an Allt Om Elbil report.
If approved, Jönköping would become the latest Swedish municipality to allow local Full Self-Driving (Supervised) testing.
Tesla’s Swedish testing program is part of the company’s efforts to validate its supervised autonomous driving software in everyday traffic environments. Municipal approvals allow Tesla to gather data in urban settings that include roundabouts, complex intersections, and mixed traffic conditions.
Sweden has become an increasingly active testing ground for Tesla’s driver-assistance software in Europe, with regulatory coordination between local authorities and national agencies enabling structured pilot programs.
Elon Musk
Microsoft partners with Starlink to expand rural internet access worldwide
The update was shared ahead of Mobile World Congress.
Microsoft has announced a new collaboration with Starlink as part of its expanding digital access strategy, following the company’s claim that it has extended internet connectivity coverage to more than 299 million people worldwide.
The update was shared ahead of Mobile World Congress, where Microsoft detailed how it surpassed its original goal of bringing internet access to 250 million people by the end of 2025.
In a blog post, Microsoft confirmed that it is now working with Starlink to expand connectivity in rural and hard-to-reach regions.
“Through our collaboration with Starlink, Microsoft is combining low-Earth orbit satellite connectivity with community-based deployment models and local ecosystem partnerships,” the company wrote.
The partnership is designed to complement Microsoft’s existing work with local internet providers and infrastructure companies across Africa, Latin America, and India, among other areas. Microsoft noted that traditional infrastructure alone cannot meet demand in some regions, making low-Earth orbit satellite connectivity an important addition.
Kenya was cited as an early example. Working with Starlink and local provider Mawingu Networks, Microsoft is supporting connectivity for 450 community hubs in rural and underserved areas. These hubs include farmer cooperatives, aggregation centers, and digital access facilities intended to support agricultural productivity and AI-enabled services.
Microsoft stated that 2.2 billion people globally remain offline, and that connectivity gaps risk widening as AI adoption accelerates.
Starlink’s expanding constellation, now numbering more than 9,700 satellites in orbit, provides near-global coverage, making it one of the few systems capable of delivering broadband to remote regions without relying on terrestrial infrastructure.
Starlink is expected to grow even more in the coming years as well, especially as SpaceX transitions its fleet to Starship, which is capable of carrying significantly larger payloads compared to its current workhorse, the Falcon 9.
Elon Musk
Tesla expands US LFP battery supply with LG Energy Solution deal: report
The report was initially published by TheElec, citing industry sources.
LG Energy Solution (LGES) will manufacture lithium iron phosphate (LFP) energy storage system (ESS) batteries for Tesla at its Lansing, Michigan facility.
The report was initially published by TheElec, citing industry sources.
LG Energy Solution’s Lansing plant, formerly known as Ultium Cells 3, was previously operated as a joint venture with General Motors. LGES acquired GM’s stake in May 2025 and now fully owns the site. With a production capacity of 50 GWh per year, it is one of the company’s largest facilities in North America.
LG Energy Solution is converting part of the Lansing factory to produce LFP batteries for energy storage systems. Equipment orders for the new lines have already been placed, and mass production is reportedly expected to begin in the second half of next year.
Last July, LG Energy Solution disclosed a 5.94 trillion won battery supply agreement running from August 2027 to July 2030. While the company did not name the customer, industry sources pointed to Tesla as the buyer.
Tesla has primarily used CATL’s prismatic batteries for its Megapack systems. The move to source prismatic LFP cells from LG Energy Solution’s U.S. plant could then be seen as part of Tesla’s efforts to bolster its North American supply base for its energy storage business.
For the Lansing conversion, LG Energy Solution reportedly plans to use electrode equipment originally ordered under its Ultium Cells venture with General Motors. Suppliers reportedly include CIS and Hirano Tecseed for electrode systems, TSI for mixing equipment, CK Solution for heat exhaust systems, A-Pro for formation equipment, and Shinjin Mtech for assembly kits.
Tesla currently manufactures energy storage products at facilities in California and Shanghai, though another Megafactory that produces the Megapack is also expected to be built in Texas. As per recent reports, the Texas Megafactory recently advanced with a major property sale.