The Black Hat Europe NOC Report
Explore the evolution of Black Hat's Network Operations Center, adapting to virtual events while maintaining security. Learn about infrastructure, tools, and challenges in managing a notorious network.
Building Better CSIRTs Using Behavioral Psychology
Explore behavioral psychology insights to improve CSIRT effectiveness, addressing team dynamics, communication, and collaboration challenges for enhanced incident response.
Message in a Broken Bottle - Exploring the Linux IPC Attack Surface
Explore Linux's IPC attack surface, focusing on systemd and dbus-daemon. Discover vulnerabilities in system services and learn about potential security risks in Linux's userspace processes.
How We Can Power Real Security Machine Learning Progress Through Open Algorithms and Benchmarks
Explore the need for transparency in security machine learning, discussing challenges, benefits, and strategies for fostering openness to drive real progress in the field.
Exploiting CSP in WebKit to Break Authentication and Authorization
Uncover a critical WebKit vulnerability that compromises authentication and authorization in web applications, exposing weaknesses in browser security features and their implementation.
Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks
Explore new Active Directory protocol injection attacks, focusing on NTLM and Kerberos vulnerabilities. Learn about attack scenarios, mitigation strategies, and essential tips for defenders.
A Deep Dive into Privacy Dashboard of Top Android Vendors
Uncovers flaws in Android vendors' privacy dashboards, revealing how malicious apps can bypass monitoring and benign apps trigger false alarms. Explores implementation differences across top vendors.
ChaosDB - How We Hacked Databases of Thousands of Azure Customers
Uncover the critical ChaosDB vulnerability in Azure Cosmos DB, allowing unauthorized access to thousands of customer databases. Learn about the discovery, exploitation, and implications of this unprecedented cloud security flaw.
Picking Lockfiles - Attacking & Defending Your Supply Chain
Explore supply chain vulnerabilities in open source software, focusing on lockfile attacks. Learn offensive and defensive techniques to enhance project security.
No Such Thing as a Stupid Question - Why Knowledge Shaming is Making Us Less Secure
Explores how knowledge shaming hinders cybersecurity progress, offering guidelines for effective knowledge sharing and consumption to foster a more secure and collaborative industry environment.
Who Did It - How We Attributed Campaigns of a Cyber Mercenary
Uncover the tactics of a cyber mercenary operating in underground forums, exploring their global campaigns, targeting methods, and strategic operations from 2016-2021.
Practical Attacks Against Attribute-based Encryption
Explore practical attacks on attribute-based encryption, examining vulnerabilities in multi-authority schemes and their implications for cloud security and IoT applications.
Hardware Security Module - Executing Unsigned Code in HSM TEE
Explore a novel attack on HSM digital signature verification, enabling execution of unsigned code in protected environments. Insights applicable to similar systems.
A Survivor-Centric, Trauma-Informed Approach to Stalkerware
Comprehensive overview of stalkerware, its impact, and survivor-centric approaches to support victims, emphasizing trauma-informed practices and ethical considerations.
Action Bias and the Two Most Dangerous Words in Cybersecurity
Explore action bias in cybersecurity, examining when immediate responses are beneficial or counterproductive, and learn strategies for effective decision-making during crises.
Another Road Leads to the Host - From a Message to VM Escape on Nvidia vGPU
Explore vulnerabilities in NVIDIA vGPU, focusing on security risks in cloud infrastructures. Learn about potential VM escape techniques and their implications for AI, deep learning, and cloud gaming.
Fixing a Memory Forensics Blind Spot - Linux Kernel Tracing
Explore Linux kernel tracing infrastructure and its impact on memory forensics. Learn about blind spots in defensive research and strategies to enhance detection of sophisticated attackers.
Mobius Band - Explore Hyper-V Attack Interface through Vulnerabilities Internals
Explore Hyper-V vulnerabilities and attack interfaces, focusing on 3 RCE vulnerabilities in Microsoft's virtualization solution. Gain insights into cloud security and potential risks.
Government-Mandated Front Doors - A Global Assessment of Legalized Government Access to Data
Explore global trends in government-mandated data access, examining policies, tactics, and implications for privacy and intellectual property across various countries and regions.
MFA-ing the Un-MFA-ble - Protecting Auth Systems' Core Secrets
Explore advanced techniques for securing authentication systems against credential compromise, focusing on protecting core secrets and implementing multi-factor authentication for critical components.
Legal Pitfalls to Avoid in Security Incidents
Explore real-world examples of lawyer-security professional collaboration during security incidents, focusing on legal pitfalls and effective communication strategies.