Whoops, I Accidentally Helped Start the Offensive Intel Branch of a Foreign Intel Service
Insider's cautionary tale about inadvertently aiding a foreign intelligence service. Explores red flags missed and offers guidance for intelligence professionals transitioning to civilian roles.
Clocking On
Explore the fascinating world of securing time distribution on the Internet, delving into atomic clocks and the challenges of maintaining a consensus on "current" time.
Lessons From 11 Billion Breached Records
Insights from analyzing 11 billion breached records, revealing causes and ongoing impacts of data breaches. An eye-opening look at cybersecurity challenges and their far-reaching consequences.
Investigating and Breaking Widevine on QTEE
Explore vulnerabilities in Widevine DRM on Qualcomm's QTEE, uncovering security flaws and exploiting them to extract sensitive data from trusted storage. Learn advanced techniques in reverse engineering and exploit development.
Hiding Objects from Computer Vision by Exploiting Correlation Biases
Exploiting correlation biases in computer vision systems to create adversarial images that hide objects from detection, using examples like dogs and frisbees vs. stop signs and pizza.
X-in-the-Middle - Attacking Fast Charging Piles and Electric Vehicles
Explore security vulnerabilities in DC fast charging protocols for electric vehicles, uncovering potential risks and attack vectors in the rapidly evolving EV charging infrastructure.
Apple Neural Engine Internal - From ML Algorithm to HW Registers
Explore the inner workings of Apple's Neural Engine, from machine learning algorithms to hardware registers, with insights into FaceID's neural network and SEP firmware security.
How Did the Adversaries Abusing the Bitcoin Blockchain Evade Our Takeover
Explore how cybercriminals leverage Bitcoin blockchain for C&C communication, evading traditional defenses. Learn about this innovative malware tactic and its implications for cybersecurity.
A New Era of One-Click Attacks - How to Break Install-Less Apps
Explore novel attack methods against Install-Less apps, including vulnerabilities in Apple App Clips, Google PWA, Google Instant App, and QuickApp. Learn about emerging security risks in this new app paradigm.
Mem2Img - Memory-Resident Malware Detection via Convolution Neural Network
Innovative framework using convolutional neural networks to detect memory-resident malware, overcoming limitations of traditional antivirus software and handcrafted feature-based approaches.
Anti-Forensics - Reverse Engineering a Leading Phone Forensic Tool
Explore vulnerabilities in Cellebrite UFED through reverse engineering, uncovering potential impacts on court cases and discussing the ethical implications of forensic software flaws.
Scavenger - Misuse Error Handling Leading to Qemu - KVM Escape
Explore how mishandled error codes in hypervisors can lead to security vulnerabilities, including guest-to-host escape exploits in Qemu/KVM environments.
Mining and Exploiting Mobile Payment Credential Leaks in the Wild
Explores prevalence and security impacts of payment credential leaks from mobile apps, revealing vulnerabilities in third-party payment systems serving billions of users globally.
The Rise of Potatoes - Privilege Escalations in Windows Services
Explore recent privilege escalation techniques in Windows services, focusing on methods attackers use to gain full system control from lower-privileged access.
A General Approach to Bypassing Many Kernel Protections and Its Mitigation
Explore a novel exploit technique using elastic objects to bypass kernel protections like KASLR. Learn about this general approach, its implications, and potential mitigation strategies.
Hacking the Cybersecurity Puzzle
Visionary approach to cybersecurity: collaboration between hackers, government, and private sector to tackle threats. Insights on infrastructure protection, information sharing, and workforce development.
The Kitten that Charmed Me - The 9 Lives of a Nation State Attacker
Uncover how operational security errors of a state-sponsored threat group revealed details of their entire operation, targeting high-profile individuals and compromising sensitive information.
Can You Hear Me Now? Remote Eavesdropping Vulnerabilities in Mobile Messaging Applications
Explore remote eavesdropping vulnerabilities in mobile messaging apps, focusing on the Group FaceTime bug and its implications for user privacy and application security.
Insights and Predictions - What's Next in InfoSec
Explore pressing InfoSec issues and future trends with Black Hat Review Board members in this insightful panel discussion, offering key takeaways for shaping future security strategies.
The Ripple Effect - Building a Diverse Security Research Team
Strategies for building a diverse and inclusive security research team, highlighting successful approaches to gender equality and representation in the hacking industry.
Portable Data exFiltration - XSS for PDFs
Explore PDF vulnerabilities and learn how a single HTTP link can compromise PDF contents, exposing security risks in widely-used document formats and generators.