Reuel Magistrado
Auto Threat Researcher, VicOne
Actions
Reuel Magistrado spends his days finding ways into cars that weren't meant to be found. As an Automotive Security Researcher at VicOne, he focuses on vulnerability research across automotive operating systems (QNX, AGL, and Android Automotive) and investigates RF and physical-layer attack surfaces threatening modern vehicles.
Before moving into automotive security, Reuel built his offensive security foundation at NCC Group, where he conducted penetration tests and vulnerability assessments across a wide range of client environments, and at iZOOlogic, where he led threat intelligence monitoring and incident response operations.
His competition record backs up his research: 3rd place at the SpiritCyber Automotive CTF in Singapore, and a speaker slot at ROOTCON 19 where he presented on connected car attack surface mapping.
Connected Car Attack Surface Mapping: OSINT Techniques for Automotive Threat Intelligence
Modern vehicles have evolved into sophisticated, internet-connected computing platforms with attack surfaces spanning cloud infrastructure, telematics systems, and over-the-air update mechanisms. With the automotive industry generating over $11 billion in cyberattack losses in 2023 alone, security researchers struggle to comprehensively map connected vehicle ecosystems using traditional OSINT methodologies that lack automotive-specific knowledge. This presentation introduces a systematic OSINT methodology designed for automotive threat intelligence, combining conventional reconnaissance techniques with automotive-focused discovery methods to identify exposed automotive APIs, misconfigured cloud infrastructure, vulnerable telematics endpoints, and supply chain weaknesses that standard assessments typically miss. Through live demonstrations using real automotive manufacturer targets, attendees will learn to adapt existing OSINT tools like Shodan, Censys, and certificate transparency logs with automotive-focused data sources to build complete attack surface maps of connected vehicle ecosystems. Participants will gain practical skills for discovering OTA update infrastructure, fleet management systems, and connected vehicle APIs while learning to transform raw reconnaissance data into actionable automotive threat intelligence that can be immediately applied whether entering the automotive security space or expanding traditional pentesting expertise into the rapidly growing connected vehicle market.
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top