We're Struggling to Keep Up
Explore browser security challenges in modern web apps, covering current models, recent features, and potential enhancements, with insights on bypassing security mechanisms.
Browser Security in 2017
Explore modern browser security challenges and solutions in this insightful talk on web vulnerabilities, attack vectors, and protective measures for developers.
I'm Pwned. You're Pwned. We're All Pwned.
Explore modern security challenges, common attacks, and evolving defense strategies in the era of data breaches. Learn practical approaches to protect yourself and your organization online.
Tick Tock - Building Browser Red Pills from Timing Side Channels
Exploring browser-based red pills to detect virtual environments, their impact on web malware scanners, and potential mitigations for enhanced cybersecurity.
Clocks Have Ears - Timing and Browser-Based Local Network Port Scanner
Discover how browser-based timing attacks can be used for local network port scanning, exploring innovative security techniques and network vulnerability assessment methods.
Exploiting Localhost APIs From The Browser - Zero-Day Vulnerability and Attack Techniques
Discover how browser-based attacks exploit localhost services through a zero-day vulnerability, featuring live demonstrations of remote code execution and novel attack techniques targeting developers behind firewalls.
Relative Path File Injection: The Next Evolution in RPO
Discover how Relative Path File Injection attacks can turn trusted websites into malware delivery platforms, exploring detection methods and real-world implementations through practical demonstrations.
Browser Security and HTTP Headers - Attacks and Protections in Action
Explore browser vulnerabilities and learn to mitigate attacks using HTTP security headers like CSP, HSTS, and CORS through live demonstrations and practical examples.
Novel Sandboxing Techniques for Open Source Libraries Using eBPF and KRSI
Discover how to implement advanced sandboxing techniques for open source libraries using eBPF and KRSI technologies to enhance security and protect against vulnerabilities and exploits.
Rise of Inspectron: Automated Black-box Auditing of Cross-platform Electron Applications
Discover how Inspectron framework automates security vulnerability detection in Electron apps, exploring common risks and developer practices for cross-platform application security.
Web Platform Threats: Automated Detection of Web Security Issues with WPT
Discover how automated detection frameworks identify security flaws in web browser mechanisms, exploring practical approaches to validate web invariants and detect vulnerabilities across major browsers.
El arte de ser invisible | Daniel Aranda | TEDxManzanares
En la actualidad, gran parte de nuestra vida transcurre en Internet: nos comunicamos, trabajamos, compramos y compartimos información personal a diario. Por ello, la privacidad online se ha convertido en un aspecto fundamental de la seguridad digital. Proteger nuestros datos no solo implica evitar r
Black Hat Europe 2023
Black Hat Europe 2023
Black Hat Asia 2025
Black Hat Asia 2025
Black Hat Europe 2024
Black Hat Europe 2024