All Your Payment Tokens Are Mine - Vulnerabilities of Mobile Payment Systems
Uncover vulnerabilities in popular mobile payment systems, exploring offline schemes, practical attacks, and security flaws. Learn about potential risks and remedies in this eye-opening presentation.
Breach Detection at Scale with AWS Honey Tokens
Learn to detect breaches using AWS honey tokens, a scalable method to identify and respond to unauthorized access attempts in cloud infrastructure.
New Compat Vulnerabilities in Linux Device Drivers
Explore vulnerabilities in Linux device drivers due to compat system calls, focusing on security implications for 32-bit processes running on 64-bit systems.
Becoming You - A Glimpse Into Credential Abuse
Explore CDN-based techniques for detecting and mitigating credential abuse vulnerabilities, enhancing security protection during request flow without relying solely on origin servers.
A Universal Controller to Take Over a Z-Wave Network
Explore Z-Wave network vulnerabilities using auto-discovery and backup/restore features, demonstrating potential security risks in smart home systems.
Cyber Comrades - Alliance-Building in Cyberspace
Explore cyber diplomacy, international partnerships, and the evolving landscape of cybersecurity in a globalized world. Learn strategies for alliance-building and advancing cooperation in cyberspace.
Exposing Hidden Exploitable Behaviors in Programming Languages Using Differential Fuzzing
Uncover hidden vulnerabilities in programming languages through differential fuzzing. Learn to identify undocumented functions, exposed sensitive data, unexpected code execution, and potential security risks.
The Shadow Brokers - Cyber Fear Game-Changers
Explore the impact of The Shadow Brokers' leaks on cybersecurity, examining sophisticated nation-state tools and the evolving landscape of cyber fear as a geopolitical instrument.
Protecting Pentests - Recommendations for Performing More Secure Tests
Comprehensive recommendations for building secure penetration testing operations, including technical aspects, policies, procedures, and client communication strategies.
They're Coming for Your Tools - Exploiting Design Flaws for Active Intrusion Prevention
Explore design flaws in popular attack tools and techniques, and learn strategies for active intrusion prevention in this cybersecurity presentation from Black Hat.
Bridging the Gap Between Research and Practice in Intelligently Bypassing WAF
Explore AI-driven techniques for bypassing web application firewalls, addressing practical challenges in payload diversity and difficulty balancing. Learn innovative approaches to enhance cybersecurity defenses.
Event-based Fuzzing, Patch-based Research, and Comment Police - Finding Bugs Through a Bug
Discover innovative bug-hunting techniques: event-based fuzzing, patch analysis, and comment inspection. Learn to leverage known vulnerabilities for deeper security research in Chrome and Android.
Cross-Contract Ricochet Attacks - Off-Chain-On-Chain Manipulation of Billion Dollar NFT Collections
Explore innovative attack techniques on NFT collections, including cross-contract ricochet attacks and off-chain marketplace logic exploitation, revealing vulnerabilities in Ethereum's decentralized ecosystem.
Mobile Interconnect Threats - How Next-Gen Products May Be Already Outdated
Explore vulnerabilities in mobile networks, focusing on SS7 security flaws, potential attacks, and risks to subscriber privacy and communication integrity.
Fuzzing and Breaking Security Functions of SIMATIC PLCs
Explore techniques for cracking TLS protocols, conducting security protocol fuzzing, and analyzing vulnerabilities in Siemens S7-1500/S7-1200 PLCs, with practical demonstrations of exploiting and controlling these industrial devices.
JS-ON - Security-OFF - Abusing JSON-Based SQL Queries
Explore security risks in SQL databases with JSON features. Learn about potential vulnerabilities and hacking techniques for JSON-based queries in major database engines.
From Finding New Type of Logical Flaw at Linux Kernel to Developing New Heap Exploitation Technique
Discover Pspray, a novel Linux kernel exploitation technique enhancing reliability for targeted attacks. Learn about its effectiveness across various memory vulnerabilities and its impact on cybersecurity.
Demystifying AI and Machine Learning to Enhance SOC Detection
Demystifies AI and machine learning for SOC teams, focusing on practical applications like data leak prevention. Includes live demo and insights from Credit Agricole's SOC experience.
Human or Not - Can You Really Detect the Fake Voices?
Explore AI-synthesized speech detection techniques and their real-world effectiveness in combating voice cloning and fake audio. Uncover challenges and limitations in current approaches.
Is WebAssembly Really Safe? - Wasm VM Escape and RCE Vulnerabilities Have Been Found in New Way
Explore WebAssembly security vulnerabilities through a new fuzzing framework, focusing on VM escape and RCE risks in Wasm runtimes for edge computing and web applications.
AEPIC Leak - Architecturally Leaking Uninitialized Data from the Microarchitecture
Systematic analysis of CPU vulnerabilities, exploring root causes and connections between transient-execution attacks and architectural vulnerabilities. Identifies blank spots in CPU security research.