Scaling Up - Automated Attack Surface Discovery with Intrigue Core
Explore automated attack surface discovery using Intrigue Core for efficient cybersecurity scaling. Learn techniques to identify vulnerabilities and enhance your security posture.
Finding 0days in Enterprise Web Applications
Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.
The Linux Kernel Hidden Inside Windows 10
Explore the Linux kernel in Windows 10, its implementation, security implications, and potential vulnerabilities. Learn about system calls, process management, and attack surfaces in this unique OS integration.
Understanding HL7 2.X Standards - Pen Testing - and Defending HL7 2.X Messages
Explore HL7 2.X standards in healthcare, learn pen testing techniques for medical systems, and discover strategies to secure HL7 2.X messages against potential vulnerabilities and attacks.
Managing Security with the OWASP Assimilation Project
Explore continuous discovery, scalability, and human monitoring in cybersecurity with the OWASP Assimilation Project. Learn about architecture, attack surface analysis, and practical demonstrations.
Hell of a Handshake - Abusing TCP for Reflective Amplification DDoS Attacks
Explores TCP-based amplification DDoS attacks, revealing vulnerabilities in the handshake process and identifying thousands of potential amplifiers through Internet-wide scans of common TCP protocols.
BLEEDINGBIT - Your APs Belong to Us
Explore zero-day vulnerabilities in BLE chips, allowing unauthenticated network penetration. Learn about BLEEDINGBIT, its impact on enterprise APs, and potential attack scenarios.
Reflections on Trusting TrustZone
Explore TrustZone security, vulnerabilities, and exploitation techniques in ARM devices. Gain insights into real-world implications and see a live demonstration of bootloader unlocking.
PinPadPwn
Explore vulnerabilities in payment terminals, including memory corruption issues and potential attack vectors. Learn about code execution risks and discuss profitable payloads for attackers.
Attacks are Forwarded - Breaking the Isolation of MicroVM-based Containers Through Operation Forwarding
Explores vulnerabilities in microVM-based containers, demonstrating operation forwarding attacks that can break isolation, exploit host kernel vulnerabilities, and exhaust resources on public cloud platforms.
Hacking Identity - A Pen Tester's Guide to IAM - Jerod Brennen
Comprehensive guide to identity and access management security, covering attack surfaces, pen testing processes, and best practices for securing user lifecycles and admin privileges.
PMFault - Voltage Fault Injection on Server Platforms Through the PMBus
Explore voltage fault injection attacks on server platforms via PMBus, revealing vulnerabilities in power management systems and discussing potential security implications for data centers.
Security and Microservices
Explore microservices security: defense in depth, distributed architecture protection, and strategies to enhance data safety while minimizing attack surfaces.
Securing Software Supply Chain - Problems, Solutions, and AI/ML Challenges
Explore software supply chain security, recent attacks, frameworks, and SBOM. Learn risk mitigation strategies and tackle AI/ML supply chain challenges in this comprehensive overview.
3D Printer Firmware Attacks on Fused Filament Fabrication - A Systematic Analysis
Explore firmware attack vulnerabilities in 3D printing systems, examining classification methods, attack vectors, and security implications for fused filament fabrication processes.
Black Hat USA 2025
Black Hat USA 2025