Last Call for SATCOM Security
Explore vulnerabilities in satellite communication systems, including potential cyber-physical attacks on maritime, aviation, and military sectors. Learn about security flaws and their real-world implications.
DeepLocker - Concealing Targeted Attacks with AI Locksmithing
DeepLocker: AI-powered targeted attacks using deep neural networks for evasive malware. Explores mechanisms, implications, and defenses against AI-weaponized cybercrime.
SDL That Won't Break the Bank
Learn cost-effective strategies for implementing a secure development lifecycle in smaller organizations, addressing unique challenges and leveraging available resources.
Automated Discovery of Deserialization Gadget Chains
Explore automated discovery of deserialization gadget chains, understanding vulnerabilities, and learning techniques to find and mitigate exploits in Java libraries and applications.
Outsmarting the Smart City
Explore vulnerabilities in smart city tech, privacy implications, and future trends. Learn to identify city systems and understand attack consequences.
Catch Me, Yes We Can - Pwning Social Engineers Using Natural Language Processing Techniques in Real-Time
Explore techniques to detect and prevent social engineering attacks across various communication channels using content-based analysis and natural language processing.
Lessons and Lulz - The Annual Black Hat USA NOC Report
Insights into setting up, stabilizing, and securing the Black Hat conference network. Learn about tools, techniques, and improvements made by the NOC team to enhance network operations and security.
The Science of Hiring and Retaining Female Cybersecurity Engineers
Explore latest strategies for recruiting and retaining women in cybersecurity, addressing barriers, debunking myths, and implementing effective frameworks for diversity and inclusion.
From Workstation to Domain Admin - Why Secure Administration Isn't Secure and How to Fix It
Explore secure administration challenges, vulnerabilities in password vaults, and effective strategies for protecting administrative credentials in enterprise environments.
Stop That Release, There's a Vulnerability!
Explore BlackBerry's software defect tracking system and risk-based release evaluation process for effective security gating in product development.
Pestilential Protocol - How Unsecure HL7 Messages Threaten Patient Lives
Explore healthcare cybersecurity risks, focusing on vulnerabilities in medical devices and HL7 messaging protocols that could potentially endanger patient safety and compromise sensitive medical data.
Black Box is Dead - Long Live Black Box!
Explore the evolution of ATM security against logic attacks, focusing on black box devices and encryption measures implemented to protect cash dispensers.
Back to the Future - A Radical Insecure Design of KVM on ARM
Explore ARM architecture vulnerabilities in KVM, focusing on privilege escalation through exception-generating instructions and hypervisor calls. Learn about potential security risks in virtualization.
AFL's Blindspot and How to Resist AFL Fuzzing for Arbitrary ELF Binaries
Explore AFL fuzzing limitations, its blindspot impact on bug detection, and techniques to resist fuzzing for ELF binaries. Learn about AFL's challenges with symbolic execution seeds.
Every ROSE Has Its Thorn - The Dark Art of Remote Online Social Engineering
Explore the methodology of Remote Online Social Engineering campaigns, from target selection to exit strategies, with insights on defense, detection, and counterattacks against online deception.
Efail - Breaking S-MIME and OpenPGP Email Encryption Using Exfiltration Channels
Explore vulnerabilities in S/MIME and OpenPGP email encryption standards, focusing on outdated cryptographic primitives and potential attack vectors using exfiltration channels.
ZEROing Trust - Do Zero Trust Approaches Deliver Real Security?
Analyze effectiveness of zero trust security across modern OS platforms, examining measurable properties to establish trust in various threat scenarios.
Squeezing a Key through a Carry Bit
Explore a practical key recovery attack on Go's P-256 elliptic curve implementation, targeting JSON Web Encryption through a subtle carry bit bug.
Your Voice is My Passport
Explore machine learning's impact on voice authentication security, including synthetic audio generation and potential vulnerabilities in financial and home automation systems.
Are You Trading Stocks Securely? Exposing Security Flaws in Trading Technologies
Exposing security vulnerabilities in electronic trading platforms, highlighting risks in mobile, desktop, and web applications for investors of all levels.
ARTist - A Novel Instrumentation Framework for Reversing and Analyzing Android Apps and the Middleware
Explore Android Runtime security with ARTist, a novel instrumentation framework for analyzing apps and middleware. Learn deployment, modules, and creation techniques.