Myth and Truth About Hypervisor-Based Kernel Protector - The Reason Why You Need Shadow-Box
Explore hypervisor-based kernel protection, its limitations, and the need for higher-privilege solutions like Shadow-Box to combat rootkits and kernel exploits effectively.
Hack Microsoft Using Microsoft Signed Binaries
Explore advanced hacking techniques using Microsoft-signed tools, including PowerShell and debuggers, to achieve various attacks and persistence on Windows systems.
Never Let Your Guard Down - Finding Unguarded Gates to Bypass Control Flow Guard with Big Data
Explore techniques to bypass Control Flow Guard in Windows using big data analysis, focusing on unguarded gates and indirect branches for enhanced security understanding.
Betting Against the House - Security and Stability When the Odds are Against You
Insights on designing and securing enterprise networks under constraints, drawing from Black Hat's network experiences. Covers evolution, challenges, and future directions in network management.
MASHaBLE - Mobile Applications of Secret Handshakes Over Bluetooth LE
Explore cryptographic secret handshakes for mobile devices using Bluetooth LE, enabling mutual authentication between untrusted parties in virtual secret communities.
CTX - Eliminating BREACH with Context Hiding
Explore advanced techniques to mitigate BREACH attacks in web applications using compression and encryption. Learn about Context Hiding and its implementation in practical scenarios.
Delegate to the Top - Abusing Kerberos for Arbitrary Impersonations and RCE
Explore Kerberos delegation vulnerabilities in Windows networks, learning techniques for unauthorized impersonation and remote code execution. Gain insights into potential security risks and mitigation strategies.
Detach Me Not - DoS Attacks Against 4G Cellular Users Worldwide from Your Desk
Explores DoS attacks on 4G cellular networks, revealing vulnerabilities in mobile communication systems and their potential for user tracking and manipulation. Discusses implications for security and privacy in telecommunications.
Open Sourcing Automotive Diagnostics
Explore automotive diagnostic protocols, their applications in research and repair, and learn about open-source tools for interacting with vehicle systems.
Still Passing the Hash 15 Years Later - Using Keys to the Kingdom to Access Data
Explore Windows authentication vulnerabilities and learn how password hashes can be exploited to access sensitive data across various enterprise services, even 15 years after discovery.
Our Kryptonite - A Defendable Internet
Exploring the challenges and potential solutions for creating a defendable Internet, examining incentives, economics, and the balance between security and openness in the digital landscape.
How to Survive the Hardware Assisted Control-Flow Integrity Enforcement
Deep dive into Intel CET on Windows 10, exploring control-flow integrity enforcement and potential vulnerabilities. Includes demonstrations of attacks and ways to circumvent CET protection.
How Samsung Secures Your Wallet and How to Break It
Demystifying SamsungPay's implementation and security mechanisms, with insights on bypassing analysis obstacles. Explore the intricacies of this mobile payment service's architecture and potential vulnerabilities.
The Apple of Your EFI - An Updated Study of EFI Security
Comprehensive analysis of Apple's EFI security, examining updates across Mac models and OS versions. Explores EFI update mechanisms and controls, providing insights into Apple's security support practices.
Nation-State Moneymule's Hunting Season – APT Attacks Targeting Financial Institutions
Unveiling recent operations by North Korean APT groups Lazarus, Bluenoroff, and Andariel, focusing on cyber heists and attacks targeting financial institutions.
Diplomacy and Combating Evolving International Cyber Threats
Explore the evolving landscape of international cyber diplomacy, focusing on efforts to counter threats, promote norms, and address challenges in cyberspace from a policy perspective.
Stepping Up Our Game - Re-focusing the Security Community on Defense and Making Security Work for Everyone
Facebook CSO Alex Stamos discusses the evolving role of cybersecurity, emphasizing the need for a renewed focus on defense and making security accessible to all in an era of heightened digital risks and societal impact.
Domo Arigato, Mr. Roboto - Security Robots a la Unit-Testing
Explore security unit testing for custom code, focusing on inoculating applications, identifying endpoints, and addressing common vulnerabilities through automated testing frameworks.
Pre-Stuxnet, Post-Stuxnet - Everything Has Changed, Nothing Has Changed
Explore the impact of Stuxnet on cybersecurity, revealing vulnerabilities in critical infrastructure and the shift in focus from IT networks to operational systems and national security concerns.
Black Hat USA 2025
Black Hat USA 2025
Black Hat USA 2024
Black Hat USA 2024