Signing Into One Billion Mobile App Accounts Effortlessly with OAuth2.0
Explore vulnerabilities in OAuth2.0 protocol when used for mobile app authentication, uncovering potential security risks in Single-Sign-On services for billions of users.
AI Based Antivirus - Can AlphaAV Win the Battle in Which Man Has Failed?
Explore deep learning-based antivirus technology with low false positive and negative rates, already in production since 2016. Learn about AI's potential to revolutionize cybersecurity.
Dig Into the Attack Surface of PDF and Gain 100+ CVEs in 1 Year
Explore PDF vulnerabilities, efficient fuzzing techniques, and attack surface analysis to uncover 100+ CVEs in a year, with statistical insights on security weaknesses.
Hacking HTTP/2 - New Attacks on the Internet's Next Generation Foundation
Explore new attacks on HTTP/2, the emerging Internet protocol. Learn about vulnerabilities, implementation flaws, and potential mitigations in this cutting-edge cybersecurity analysis.
I Know What You Saw Last Minute - The Chrome Browser Case
Explore HTTP Adaptive Streaming vulnerabilities in Chrome, focusing on YouTube's DASH implementation and potential privacy risks through traffic analysis and machine learning techniques.
All Your Payment Tokens Are Mine - Vulnerabilities of Mobile Payment Systems
Uncover vulnerabilities in popular mobile payment systems, exploring offline schemes, practical attacks, and security flaws. Learn about potential risks and remedies in this eye-opening presentation.
Breach Detection at Scale with AWS Honey Tokens
Learn to detect breaches using AWS honey tokens, a scalable method to identify and respond to unauthorized access attempts in cloud infrastructure.
New Compat Vulnerabilities in Linux Device Drivers
Explore vulnerabilities in Linux device drivers due to compat system calls, focusing on security implications for 32-bit processes running on 64-bit systems.
Becoming You - A Glimpse Into Credential Abuse
Explore CDN-based techniques for detecting and mitigating credential abuse vulnerabilities, enhancing security protection during request flow without relying solely on origin servers.
A Universal Controller to Take Over a Z-Wave Network
Explore Z-Wave network vulnerabilities using auto-discovery and backup/restore features, demonstrating potential security risks in smart home systems.
Cyber Comrades - Alliance-Building in Cyberspace
Explore cyber diplomacy, international partnerships, and the evolving landscape of cybersecurity in a globalized world. Learn strategies for alliance-building and advancing cooperation in cyberspace.
Exposing Hidden Exploitable Behaviors in Programming Languages Using Differential Fuzzing
Uncover hidden vulnerabilities in programming languages through differential fuzzing. Learn to identify undocumented functions, exposed sensitive data, unexpected code execution, and potential security risks.
The Shadow Brokers - Cyber Fear Game-Changers
Explore the impact of The Shadow Brokers' leaks on cybersecurity, examining sophisticated nation-state tools and the evolving landscape of cyber fear as a geopolitical instrument.
Protecting Pentests - Recommendations for Performing More Secure Tests
Comprehensive recommendations for building secure penetration testing operations, including technical aspects, policies, procedures, and client communication strategies.
They're Coming for Your Tools - Exploiting Design Flaws for Active Intrusion Prevention
Explore design flaws in popular attack tools and techniques, and learn strategies for active intrusion prevention in this cybersecurity presentation from Black Hat.
Bridging the Gap Between Research and Practice in Intelligently Bypassing WAF
Explore AI-driven techniques for bypassing web application firewalls, addressing practical challenges in payload diversity and difficulty balancing. Learn innovative approaches to enhance cybersecurity defenses.
Event-based Fuzzing, Patch-based Research, and Comment Police - Finding Bugs Through a Bug
Discover innovative bug-hunting techniques: event-based fuzzing, patch analysis, and comment inspection. Learn to leverage known vulnerabilities for deeper security research in Chrome and Android.
Cross-Contract Ricochet Attacks - Off-Chain-On-Chain Manipulation of Billion Dollar NFT Collections
Explore innovative attack techniques on NFT collections, including cross-contract ricochet attacks and off-chain marketplace logic exploitation, revealing vulnerabilities in Ethereum's decentralized ecosystem.
Mobile Interconnect Threats - How Next-Gen Products May Be Already Outdated
Explore vulnerabilities in mobile networks, focusing on SS7 security flaws, potential attacks, and risks to subscriber privacy and communication integrity.
Fuzzing and Breaking Security Functions of SIMATIC PLCs
Explore techniques for cracking TLS protocols, conducting security protocol fuzzing, and analyzing vulnerabilities in Siemens S7-1500/S7-1200 PLCs, with practical demonstrations of exploiting and controlling these industrial devices.
JS-ON - Security-OFF - Abusing JSON-Based SQL Queries
Explore security risks in SQL databases with JSON features. Learn about potential vulnerabilities and hacking techniques for JSON-based queries in major database engines.