
Explore challenges in maintaining election integrity amid a pandemic, focusing on secure voting technology and protecting voter health. Learn about scaling up safer, accessible voting mechanisms.

Insights into Black Hat Briefings review process, Malware Track leadership, and community development initiatives from cybersecurity expert Matt Suiche, founder of Comae Technologies.

Explore zero-trust security's benefits in addressing current and future challenges beyond attacks, with insights from industry experts on implementation and design patterns.

Explore Android's permission vulnerabilities, invisible foreground services, and spyware risks. Learn detection methods and protective measures for enhanced mobile security.

Explore a novel graph-based approach to cloud infrastructure attacks, revealing vulnerabilities in resource relationships and demonstrating potential privilege escalation techniques.

Reverse-engineering bootloaders of popular microcontrollers to assess vulnerabilities in readout protection, focusing on software-based attacks and critical flaws in specific chip families.

Explore Apple's Continuity protocol, examining privacy and security implications of seamless device communication. Uncover potential vulnerabilities in AirDrop, iMessage, and other features within Apple's ecosystem.

Explore security vulnerabilities in Bluetooth proximity authentication, including new attacks on Android Smart Lock and Windows Dynamic Lock, and learn potential fixes for these issues.

Discover a tool for identifying vulnerable OEM IoT devices across thousands of images, revealing security risks in both supplier and vendor firmware distributions.

Unveiling advanced Java deserialization vulnerabilities: analysis of 10,000+ libraries, new exploit techniques, and their profound impact on Java security. Enhances attack vectors beyond deserialization.

Explore vulnerabilities in 4G/5G networks, focusing on the ToRPEDO attack that exploits paging occasions to compromise user privacy and security.

Explore Cisco's innovative BYOT solution replacing traditional smartcards, enabling self-provisioned digital identities for enhanced authentication and cryptographic functions using USB tokens.

Explore techniques for detecting hidden injected code through page table entry analysis, covering both intentional malware concealment and unintentional OS paging mechanisms.

Explore coverage-based fuzzing of RDP client virtual channels, targeting complex functionalities like Sound, Graphics, USB, and Filesystem to uncover potential vulnerabilities and crashes.

Explore Project Zero's impact on cybersecurity, its core principles, and the need for such initiatives in the tech industry. Gain insights into vulnerability research and mitigation strategies.

Explore implications of poor cryptographic API design, insecure certificate chain validation, and widespread usage of APIs like Android SafetyNet. Recommendations for implementers and API authors are proposed.

Explore attack paths on a major bank HSM, including unauthenticated methods for full control, in this technical presentation targeting high-security solutions.

Explore modern application security challenges in DevSecOps, including evolving web technologies, persistent vulnerabilities, and emerging framework defenses against common threats.

Explore techniques for injecting malicious payloads into microcontrollers, from basic to advanced methods, to create hardware backdoors. Learn about firmware entry points and payload execution.

Explore vulnerabilities in connected BMW cars' infotainment and telematics systems, including 0-day exploits, and learn about mitigation strategies for enhanced automotive cybersecurity.

Uncover vulnerabilities in Windows Hello for Business and learn to scan and secure corporate environments with a new toolset for enhanced Active Directory visibility.