Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration
Unveiling a stealthy data exfiltration method that bypasses TLS inspection security solutions. Learn about SNIcat and how it circumvents perimeter defenses, with insights on mitigation and detection strategies.
BinTyper - Type Confusion Detection for C++ Binaries
Explore a novel approach to detect type confusion vulnerabilities in C++ binaries, enhancing software security against malicious code execution attacks.
Jack-in-the-Cache - A New Code Injection Technique through Modifying X86-to-ARM Translation Cache
Explores a novel code injection technique for Windows 10 on ARM, exploiting vulnerabilities in x86-to-ARM translation cache to compromise system security on ARM-based laptops.
FPs Are Cheap - Show Me the CVEs
Evaluating SAST tools: Learn how to assess their effectiveness in finding real vulnerabilities using synthetic test suites and practical examples of CVEs.
Shield with Hole - New Security Mitigation Helps Us Escape Chrome Sandbox to Exfiltrate User Privacy
Explore how new security measures in Chrome can be exploited to bypass the sandbox and compromise user privacy, revealing potential vulnerabilities in browser protection mechanisms.
Graph Convolutional Network-Based Suspicious Communication Pair Estimation for Industrial Control Systems
Explore graph convolutional networks for detecting suspicious communication pairs in industrial control systems, enhancing security monitoring beyond traditional whitelisting methods.
The Subtle Art of Chaining Headers - IKEv2 Attack Surface Case Study
Explore IKEv2 attack surface through header chaining, uncovering vulnerabilities in IPsec VPNs. Learn techniques for identifying and exploiting weaknesses in Internet Key Exchange implementations.
Fingerprint-Jacking - Practical Fingerprint Authorization Hijacking in Android Apps
Practical exploration of fingerprint authorization vulnerabilities in Android apps, demonstrating attack techniques and suggesting mitigation strategies for developers.
Light Commands - Hacking Voice Assistants with Lasers
Explore how lasers can manipulate voice-activated IoT devices, revealing potential security vulnerabilities in smart home technology and microphone systems.
My Ticks Don't Lie - New Timing Attacks for Hypervisor Detection
Explore new timing attacks for hypervisor detection, crucial for sandbox evasion in malware analysis. Learn about hardware-assisted virtualization vulnerabilities and low-level measurement techniques.
It's Not Finished - The Evolving Maturity in Ransomware Operations
Explore the evolving sophistication of ransomware operations, focusing on European targets, attack strategies, and the lifecycle of Rival ransomware. Learn about emerging trends and future threats in cybersecurity.
Hermes Attack - Steal DNN Models in AI Privatization Deployment Scenarios
Unveils a novel attack exploiting PCIe bus vulnerabilities to reconstruct DNN models in AI privatization scenarios, discussing challenges, techniques, and countermeasures.
CDPwn - Taking Over Millions of Enterprise-Things with Layer 2 Zero-Days
Unveiling critical zero-day vulnerabilities in layer 2 protocols, demonstrating their impact on enterprise device and network security, and exploring potential exploitation techniques.
What the Log - So Many Events, So Little Time
Explore Windows Event Log for efficient adversary detection, leveraging automation and MITRE ATT&CK framework to enhance cybersecurity monitoring and response capabilities.
Conclusions and Key Takeaways from Day 1
Insightful discussion on pressing InfoSec issues, including COVID-19 impact, security breaches, misinformation, and digital asset protection, featuring Black Hat Review Board members.
Biometrics and Privacy - Time to Faceoff or is that FaceApp
Explore biometric data usage, privacy legislation, and implications in APAC and globally. Learn about government and private sector practices, legal frameworks, and individual rights regarding biometric information.
Attacking and Defending Machine Learning Applications of Public Cloud
Explore techniques for attacking and defending machine learning applications in public cloud environments, focusing on visual classification vulnerabilities and countermeasures.
Identifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale
Explore techniques for identifying vulnerabilities in embedded firmware, focusing on multi-binary analysis, dynamic and static approaches, and scalable solutions for IoT device security.
Cutting Edge - Microsoft Browser Security — From People Who Owned It
Deep dive into Microsoft Edge security architecture, exploring sandbox initialization, browser broker implementation, and renderer security isolation.
Real-Time Detection of Attacks Leveraging Domain Administrator Privilege
Discover a real-time method to detect attacks using Domain Administrator privileges, including Golden Tickets, through Domain Controller Event logs for immediate threat mitigation.
Network Defender Archeology - An NSM Case Study in Lateral Movement with DCOM
Explore DCOM as a lateral movement technique from attacker and defender perspectives, addressing knowledge gaps and providing methodical insights for network security professionals.