MaginotDNS - Attacking the Boundary of DNS Caching Protection
Unveils MaginotDNS, a potent cache poisoning attack exploiting DNS server vulnerabilities. Demonstrates how attackers can compromise entire DNS zones, including top-level domains, surpassing previous attack capabilities.
Secrets of DNS
Explore DNS vulnerabilities, including cross-site scripting, SQL injection, and DNS rebinding. Learn about traffic forwarding, shellcode, and detection techniques in this security-focused talk.
The Domain Name System - DNS Operation and Security
Learn DNS operation, security, and advanced concepts like open resolvers, domain hijacking, and DNSSEC in this comprehensive overview of the Domain Name System.
DNSSec Explained
Explore DNSSec implementation, setup, frequency, and applications in national labs. Learn from expert insights and engage in Q&A on this crucial internet security protocol.
EDNS Client Subnet ECS DNS CDN Magic or Security
Explore EDNS Client Subnet (ECS) and its impact on DNS, CDNs, and security. Learn about the magic and potential risks of this technology in modern networking.
Mostly Free Defenses Against the Phishing Kill Chain
Learn practical, cost-effective strategies to combat phishing attacks across the kill chain. Explore email security, domain monitoring, malware prevention, and network protection techniques.
It's DNS, Jim, but Not as We Know It
Explore recent DNS advancements, including privacy features like DoT and DoH, and their impact on developers and systems. Learn about the latest technologies and navigating DNS RFCs.
Avoiding DNS Pain
Explore DNS maturity assessment and management improvement techniques using tools like DNSControl to enhance security, resilience, and operational efficiency of this critical system.
For Lack of a Better Name - DNS Explained
Explore DNS fundamentals, communication protocols, and Python integration. Learn how DNS works, its components, and how to interact with it using Python, including creating a simple DNS server.
CoreDNS for Hybrid and Multi-Cloud
Explore CoreDNS configurations for hybrid and multi-cloud environments, including cloud vendor integration, secure DNS protocols, and multi-cluster service discovery across clouds.
Post-Quantum Signatures in DNSSEC via Request-Based Fragmentation - Session 5
Explore post-quantum signatures in DNSSEC through request-based fragmentation, enhancing DNS security for the quantum era.
Navigating the Future: The Domain Name System's Next 40 Years
Delve into DNS evolution and future prospects with insights from its inventor Paul Mockapetris and Verisign's CTO, exploring key developments, security enhancements, and innovations shaping internet infrastructure.
The Death of a TLD - Understanding the Impact of .IO Domain Disappearance
Explore the potential impact of .io domain's disappearance from the internet, examining past TLD failures and modern solutions for preventing domain extinction in the digital age.
Block DNS Exfiltration with Dnsmasq Proxy
Explore DNS exfiltration techniques and learn to mitigate threats using dnsmasq sidecar. Discover how hackers exploit DNS for data theft and implement effective countermeasures to enhance network security.
Centralized Management and Distributed Enforcement - Understanding Cisco Secure Connect
Discover how Cisco Secure Connect unifies SASE architecture, combining Meraki SD-WAN and Umbrella to provide seamless branch connectivity, cloud security, and centralized policy management for enterprise networks.
WPAD Domain Exploitation: Understanding Man-in-the-Middle Attacks Through DNS
Uncover how a single domain purchase can exploit WPAD vulnerabilities, leading to massive-scale man-in-the-middle attacks and compromising hundreds of thousands of internet clients through DNS manipulation.
Retroactive Identification of Targeted Domain Hijacks - DNS Infrastructure Security
Explore advanced techniques for identifying and protecting against sophisticated domain hijacks that bypass traditional DNS security measures, with insights into nation-state tactics and infrastructure protection.
Rethinking the Security Threats of Stale DNS Glue Records
Explore the security vulnerabilities of DNS glue records, examining how outdated records and resolver behaviors create risks for domain hijacking and denial-of-service attacks across millions of domains.
Black Hat USA 2025
Black Hat USA 2025
Black Hat Europe 2023
Black Hat Europe 2023
Black Hat Asia 2025
Black Hat Asia 2025