With #Pwn2Own Miami less than a week away, current ZDI analyst and former Pwn2Own winner @chudypb details how he exploited #Inductive Automation #Ignition at last year's event with a custom deserialization issue. His detailed write-up includes root cause analysis and a video demo. Check it out at https://www.zerodayinitiative.com/blog/2023/2/6/pwn2owning-two-hosts-at-the-same-time-abusing-inductive-automation-ignitions-custom-deserialization