All You Ever Wanted to Know about the AMD Platform Security Processor and Were Afraid to Emulate - Inside a Deeply Embedded Security Processor
Explore AMD's Platform Security Processor: its role in system bootstrapping, security features, and proprietary nature. Gain insights into this embedded ARM core within x86 CPUs.
Black-Box Laser Fault Injection on a Secure Memory
Explore vulnerability research on the Microchip ATECC508A secure memory, examining laser fault injection techniques to bypass cryptographic authentication in IoT devices.
Escaping Virtualized Containers
Explore container escape techniques and new sandboxing tools using unikernels, lightweight VMs, and userspace-kernels to enhance isolation between host and container OS.
Portable Document Flaws 101
Dive deep into PDF's insecure features and vulnerabilities, exploring malicious capabilities affecting major viewers through systematic analysis and in-depth examination.
Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities
Explore a Safari exploit chaining six vulnerabilities to compromise the macOS kernel. Learn about offensive security research and browser-based kernel exploitation techniques.
Breaking Samsung's Root of Trust - Exploiting Samsung S10 Secure Boot
Exploración de vulnerabilidades en el arranque seguro de Samsung S10, analizando el manejo de solicitudes USB en S-Boot y sus implicaciones para la seguridad del dispositivo.
Lamphone - Real-Time Passive Reconstruction of Speech Using Light Emitted from Lamps
Explore a novel eavesdropping technique using light bulb vibrations to reconstruct speech in real-time, overcoming limitations of previous side-channel attacks for audio surveillance.
Hacking Public Opinion
Explore tactics of modern information operations, their impact on public opinion, and how to defend against them in the context of upcoming elections.
Stress Testing Democracy - Election Integrity During a Global Pandemic
Explore challenges in maintaining election integrity amid a pandemic, focusing on secure voting technology and protecting voter health. Learn about scaling up safer, accessible voting mechanisms.
Black Hat Fast Chat
Insights into Black Hat Briefings review process, Malware Track leadership, and community development initiatives from cybersecurity expert Matt Suiche, founder of Comae Technologies.
A Surprise Trip to Zero-Trust Land
Explore zero-trust security's benefits in addressing current and future challenges beyond attacks, with insights from industry experts on implementation and design patterns.
Simple Spyware - Androids Invisible Foreground Services and How to Abuse Them
Explore Android's permission vulnerabilities, invisible foreground services, and spyware risks. Learn detection methods and protective measures for enhanced mobile security.
Inside Out - The Cloud Has Never Been So Close
Explore a novel graph-based approach to cloud infrastructure attacks, revealing vulnerabilities in resource relationships and demonstrating potential privilege escalation techniques.
Breaking Bootloaders on the Cheap
Reverse-engineering bootloaders of popular microcontrollers to assess vulnerabilities in readout protection, focusing on software-based attacks and critical flaws in specific chip families.
Trust in Apple's Secret Garden - Exploring and Reversing Apple's Continuity Protocol
Explore Apple's Continuity protocol, examining privacy and security implications of seamless device communication. Uncover potential vulnerabilities in AirDrop, iMessage, and other features within Apple's ecosystem.
BlueMaster - Bypassing and Fixing Bluetooth-Based Proximity Authentication
Explore security vulnerabilities in Bluetooth proximity authentication, including new attacks on Android Smart Lock and Windows Dynamic Lock, and learn potential fixes for these issues.
OEM Finder - Hunting Vulnerable OEM IoT Devices at Scale
Discover a tool for identifying vulnerable OEM IoT devices across thousands of images, revealing security risks in both supplier and vendor firmware distributions.
New Exploit Technique in Java Deserialization Attack
Unveiling advanced Java deserialization vulnerabilities: analysis of 10,000+ libraries, new exploit techniques, and their profound impact on Java security. Enhances attack vectors beyond deserialization.
Side Channel Attacks in 4G and 5G Cellular Networks
Explore vulnerabilities in 4G/5G networks, focusing on the ToRPEDO attack that exploits paging occasions to compromise user privacy and security.
Bring Your Own Token to Replace the Traditional Smartcards for Strong Authentication and Signing
Explore Cisco's innovative BYOT solution replacing traditional smartcards, enabling self-provisioned digital identities for enhanced authentication and cryptographic functions using USB tokens.
Detecting -Un-Intentionally Hidden Injected Code by Examining Page Table Entries
Explore techniques for detecting hidden injected code through page table entry analysis, covering both intentional malware concealment and unintentional OS paging mechanisms.