How Did the Adversaries Abusing the Bitcoin Blockchain Evade Our Takeover
Explore how cybercriminals leverage Bitcoin blockchain for C&C communication, evading traditional defenses. Learn about this innovative malware tactic and its implications for cybersecurity.
A New Era of One-Click Attacks - How to Break Install-Less Apps
Explore novel attack methods against Install-Less apps, including vulnerabilities in Apple App Clips, Google PWA, Google Instant App, and QuickApp. Learn about emerging security risks in this new app paradigm.
Mem2Img - Memory-Resident Malware Detection via Convolution Neural Network
Innovative framework using convolutional neural networks to detect memory-resident malware, overcoming limitations of traditional antivirus software and handcrafted feature-based approaches.
Anti-Forensics - Reverse Engineering a Leading Phone Forensic Tool
Explore vulnerabilities in Cellebrite UFED through reverse engineering, uncovering potential impacts on court cases and discussing the ethical implications of forensic software flaws.
Scavenger - Misuse Error Handling Leading to Qemu - KVM Escape
Explore how mishandled error codes in hypervisors can lead to security vulnerabilities, including guest-to-host escape exploits in Qemu/KVM environments.
Mining and Exploiting Mobile Payment Credential Leaks in the Wild
Explores prevalence and security impacts of payment credential leaks from mobile apps, revealing vulnerabilities in third-party payment systems serving billions of users globally.
The Rise of Potatoes - Privilege Escalations in Windows Services
Explore recent privilege escalation techniques in Windows services, focusing on methods attackers use to gain full system control from lower-privileged access.
A General Approach to Bypassing Many Kernel Protections and Its Mitigation
Explore a novel exploit technique using elastic objects to bypass kernel protections like KASLR. Learn about this general approach, its implications, and potential mitigation strategies.
Hacking the Cybersecurity Puzzle
Visionary approach to cybersecurity: collaboration between hackers, government, and private sector to tackle threats. Insights on infrastructure protection, information sharing, and workforce development.
The Kitten that Charmed Me - The 9 Lives of a Nation State Attacker
Uncover how operational security errors of a state-sponsored threat group revealed details of their entire operation, targeting high-profile individuals and compromising sensitive information.
Can You Hear Me Now? Remote Eavesdropping Vulnerabilities in Mobile Messaging Applications
Explore remote eavesdropping vulnerabilities in mobile messaging apps, focusing on the Group FaceTime bug and its implications for user privacy and application security.
Insights and Predictions - What's Next in InfoSec
Explore pressing InfoSec issues and future trends with Black Hat Review Board members in this insightful panel discussion, offering key takeaways for shaping future security strategies.
The Ripple Effect - Building a Diverse Security Research Team
Strategies for building a diverse and inclusive security research team, highlighting successful approaches to gender equality and representation in the hacking industry.
Portable Data exFiltration - XSS for PDFs
Explore PDF vulnerabilities and learn how a single HTTP link can compromise PDF contents, exposing security risks in widely-used document formats and generators.
Debug Resurrection on Nordic nRF52 Series
Uncover vulnerabilities in Nordic nRF52 SoCs through debug resurrection techniques. Learn about IoT security implications and potential exploits in these widely-used platforms.
This is for the Pwners - Exploiting a WebKit 0-day in PlayStation 4
Explore WebKit exploitation techniques for PlayStation 4, focusing on browser vulnerabilities as entry points for full-chain attacks. Learn about hardening challenges and cutting-edge exploit development.
How to Better Fuzz Windows 10 DirectX Kernel at Present
Explore advanced techniques for fuzzing Windows 10 DirectX kernel, uncovering new attack methods and vulnerabilities in the rendering engine that powers the Windows platform.
Permission Mining in GCP
Explore effective permissions and identity assumption in Google Cloud Platform to enhance security and prevent privilege escalation risks.
Finding Bugs Compiler Knows but Doesn't Tell You - Dissecting Undefined Behavior Optimizations in LLVM
Explore LLVM compiler optimizations for undefined behavior, uncovering hidden bugs and security vulnerabilities in C/C++ programs through advanced static analysis techniques.
IAM Concerned - OAuth Token Hijacking in Google Cloud
Explore OAuth token hijacking vulnerabilities in Google Cloud, understanding attack vectors and mitigation strategies for enhanced GCP environment security.
Discovering 20 Year Old Vulnerabilities in Modern Windows Kernel
Explore how legacy components in Windows 10 can harbor decades-old vulnerabilities, focusing on printer drivers and their potential security implications.