Alle Storys
Keine Story von ONEKEY GmbH mehr verpassen.


ONEKEY announces automated detection of zero-day vulnerabilities

ONEKEY announces automated detection of zero-day vulnerabilities

New platform for automated discovery of unknown 0-day vulnerabilities for producers of connected devices and operators of industrial control systems

Düsseldorf/Germany, September 29, 2022 – For the first time, European IoT/OT security specialist ONEKEY is enabling software-based automated detection of previously unknown zero-day vulnerabilities in industrial products and control systems. This category poses one of the greatest risks to anything that uses software: "Zero-day attacks exploit security vulnerabilities that may have existed undetected for a long time and have not been detected by the producer of the devices and equipment. Therefore, there is no patch for the vulnerability and global attacks on affected devices can be devastating," says Jan Wendenburg, CEO of ONEKEY. Among hackers, these vulnerabilities are even traded; a 0-day gap in iOS, Windows or Android can easily achieve prices in the seven-digit range. What is already dangerous for PCs can have threatening effects, can even lead to bankruptcy, on networked and intelligent plants and infrastructures in industry. Today, finding unknown software vulnerabilities is an enormously costly task – many producers therefore even voluntarily pay high sums of money to hackers to identify and mitigate security risks before immense damage occurs.

Undetected vulnerabilities

Previous automated solutions, on the other hand, search for patterns and files that have already been recognized as potentially dangerous. "The supreme discipline of software security is to automatically find completely unknown vulnerabilities. This makes software significantly safer and better protected against attacks worldwide. In addition, development times are shortened in the long term because vulnerabilities can be detected and fixed at an early stage. The result: improved security and savings in the cost structure," explains Jan Wendenburg of ONEKEY. The company's innovative technology platform uses a completely new automated detection function that has already uncovered several critical 0-day vulnerabilities. All vulnerabilities found would have led to the execution of a remote code in IoT devices. All that was required was an upload of the firmware image to ONEKEY's analysis platform. Based on ONEKEY's Responsible Disclosure Policy directed to producers who do not work directly with ONEKEY yet, confidential information is initially provided. According to the industry standard period of 90 days, the results of the vulnerability analysis will be made available to the public in detailed security advisories.

Troubleshooting advice

ONEKEY's analysis platform automatically extracts the firmware, the attack surface is self-mapped and entry points for attackers are automatically identified. Dangerous functions that can be exploited by attackers are evaluated and verified, and only the truly relevant ones are highlighted. In addition to the rating of the actual threat, users also receive information on how to fix the vulnerability and indications on affected areas in the firmware application. "This new functionality – the automatic detection of 0-day vulnerabilities – marks the beginning of a new era in IoT/OT security. Therefore, we have registered as a CNA (CVE Numbering Authority) and are working with CISA to better coordinate responsible disclosure with vendors and increase the level of security of networked devices. Security in the Internet of Things is our mission!" emphasizes Jan Wendenburg, CEO of the security specialist ONEKEY.


ONEKEY is a leading European specialist for automatic security & compliance analyses for devices in industry (IIoT), production (OT) and the Internet of Things (IoT). ONEKEY autonomously analyzes firmware for critical security vulnerabilities and compliance violations via automatically generated "Digital Twins" and "Software Bill of Materials (SBOM)" of the devices, completely without source code, device, or network access. Vulnerabilities for attacks and security risks are identified in the shortest possible time and can thus be specifically fixed. Easily integrated into software development and procurement processes, the solution enables manufacturers, distributors, and users of IoT technology to check security and compliance quickly and automatically before use, 24/7 throughout the entire product lifecycle. Leading companies, such as SWISSCOM, VERBUND AG and ZYXEL, use this platform today – universities and research institutions can use the ONEKEY platform for study purposes free of charge.

Further Information: ONEKEY GmbH,  
Sara Fortmann, E-Mail:,
Kaiserswerther Straße 45, 40477 Düsseldorf, Germany,  
PR Agency: euromarcom public relations GmbH,
Mühlhohle 2, 65205 Wiesbaden, Germany,
Phone: +49 611 9731 50, E-Mail:,

- - - -

Weitere Storys: ONEKEY GmbH
Weitere Storys: ONEKEY GmbH
  • 15.09.2022 – 10:45

    ONEKEY is "Top Industrial IoT Solutions Provider in Europe"

    ONEKEY is "Top Industrial IoT Solutions Provider in Europe" Leading US magazine selects German company as one of the top IoT security providers Düsseldorf/Germany, September 15, 2022 – Software "Made in Germany" also enjoys an excellent reputation in the USA: last year, the US magazine "Manufacturing Technology Insights" selected solutions provided by Siemens, Software AG and Cap Gemini as top class in the field of ...

  • 07.09.2022 – 14:10

    Experts recommend: Managing Risks in the Software Supply Chain of Industrial Equipment & Products

    Experts recommend: Managing Risks in the Software Supply Chain of Industrial Equipment & Products New expert whitepaper on managing risks in the software supply chain using IEC 62443 and automated software BOMs now available! Düsseldorf/Germany, September 7, 2022 – With a new cybersecurity agenda, the German government wants to improve the security of industrial ...

  • 04.08.2022 – 14:05

    ONEKEY redefines IoT Security with UNBLOB

    ONEKEY redefines IoT Security with UNBLOB ONEKEY open sources its high-performance firmware extraction suite Düsseldorf/Germany, August 4, 2022 – With the open-source release of the new binary extraction suite "UNBLOB", ONEKEY provides a core component of its automated firmware security analysis platform to the infosec community. This will set a new milestone in the battle to raise security to a new level in the field ...