Hacking Public Opinion
Explore tactics of modern information operations, their impact on public opinion, and how to defend against them in the context of upcoming elections.
Stress Testing Democracy - Election Integrity During a Global Pandemic
Explore challenges in maintaining election integrity amid a pandemic, focusing on secure voting technology and protecting voter health. Learn about scaling up safer, accessible voting mechanisms.
Black Hat Fast Chat
Insights into Black Hat Briefings review process, Malware Track leadership, and community development initiatives from cybersecurity expert Matt Suiche, founder of Comae Technologies.
A Surprise Trip to Zero-Trust Land
Explore zero-trust security's benefits in addressing current and future challenges beyond attacks, with insights from industry experts on implementation and design patterns.
Simple Spyware - Androids Invisible Foreground Services and How to Abuse Them
Explore Android's permission vulnerabilities, invisible foreground services, and spyware risks. Learn detection methods and protective measures for enhanced mobile security.
Inside Out - The Cloud Has Never Been So Close
Explore a novel graph-based approach to cloud infrastructure attacks, revealing vulnerabilities in resource relationships and demonstrating potential privilege escalation techniques.
Breaking Bootloaders on the Cheap
Reverse-engineering bootloaders of popular microcontrollers to assess vulnerabilities in readout protection, focusing on software-based attacks and critical flaws in specific chip families.
Trust in Apple's Secret Garden - Exploring and Reversing Apple's Continuity Protocol
Explore Apple's Continuity protocol, examining privacy and security implications of seamless device communication. Uncover potential vulnerabilities in AirDrop, iMessage, and other features within Apple's ecosystem.
BlueMaster - Bypassing and Fixing Bluetooth-Based Proximity Authentication
Explore security vulnerabilities in Bluetooth proximity authentication, including new attacks on Android Smart Lock and Windows Dynamic Lock, and learn potential fixes for these issues.
OEM Finder - Hunting Vulnerable OEM IoT Devices at Scale
Discover a tool for identifying vulnerable OEM IoT devices across thousands of images, revealing security risks in both supplier and vendor firmware distributions.
New Exploit Technique in Java Deserialization Attack
Unveiling advanced Java deserialization vulnerabilities: analysis of 10,000+ libraries, new exploit techniques, and their profound impact on Java security. Enhances attack vectors beyond deserialization.
Side Channel Attacks in 4G and 5G Cellular Networks
Explore vulnerabilities in 4G/5G networks, focusing on the ToRPEDO attack that exploits paging occasions to compromise user privacy and security.
Bring Your Own Token to Replace the Traditional Smartcards for Strong Authentication and Signing
Explore Cisco's innovative BYOT solution replacing traditional smartcards, enabling self-provisioned digital identities for enhanced authentication and cryptographic functions using USB tokens.
Detecting -Un-Intentionally Hidden Injected Code by Examining Page Table Entries
Explore techniques for detecting hidden injected code through page table entry analysis, covering both intentional malware concealment and unintentional OS paging mechanisms.
Fuzzing and Exploiting Virtual Channels in Microsoft Remote Desktop Protocol for Fun and Profit
Explore coverage-based fuzzing of RDP client virtual channels, targeting complex functionalities like Sound, Graphics, USB, and Filesystem to uncover potential vulnerabilities and crashes.
Booting the iOS Kernel to an Interactive Bash Shell on QEMU
Explore iOS kernel emulation on QEMU, achieving interactive bash shell and live kernel debugging. Discover groundbreaking research towards a full open-source iOS system emulator.
Lessons and Lulz - The 5th Annual Black Hat USA NOC Report
Insights and humor from Black Hat's Network Operations Center, revealing security professionals' behavior on open WiFi and discussing network setup, security, and improvements.
Project Zero - Five Years of Make 0Day Hard
Explore Project Zero's impact on cybersecurity, its core principles, and the need for such initiatives in the tech industry. Gain insights into vulnerability research and mitigation strategies.
Chain of Fools - An Exploration of Certificate Chain Validation Mishaps
Explore implications of poor cryptographic API design, insecure certificate chain validation, and widespread usage of APIs like Android SafetyNet. Recommendations for implementers and API authors are proposed.
Everybody Be Cool, This Is a Robbery!
Explore attack paths on a major bank HSM, including unauthenticated methods for full control, in this technical presentation targeting high-security solutions.
Shifting Knowledge Left - Keeping up with Modern Application Security
Explore modern application security challenges in DevSecOps, including evolving web technologies, persistent vulnerabilities, and emerging framework defenses against common threats.