Lawful Access Panel
Panel discussion on legal and technical challenges of secret surveillance orders, including National Security Letters and lawful intercepts. Experts explore risks, defenses, and experiences fighting invasive searches in networks.
OPSEC Failures of Spies
Revealing CIA's operational security failures in high-profile cases, highlighting the agency's technological naivety and its consequences for intelligence gathering and international relations.
Clickjacking Revisited - A Perceptual View of UI Security
Explores UI security vulnerabilities from a perceptual perspective, presenting novel attacks that bypass current defenses and discussing potential countermeasures and their limitations.
TLS Secrets
Exploring vulnerabilities in SSL/TLS standards, implementations, and configurations, with focus on lesser-known security flaws. Includes tool release for forensic plaintext recovery.
Java Every-Days - Exploiting Software Running on 3 Billion Devices
Explore Java vulnerabilities, exploitation trends, and security measures in this Black Hat talk. Gain insights into common weaknesses, attack surfaces, and Oracle's responses to protect 3 billion devices.
Multiplexed Wired Attack Surfaces
Explore techniques for accessing mobile device interfaces through multiplexed wired connections, including gaining shell access and using open-source tools for interface exploration.
SSL, Gone in 30 Seconds - A BREACH Beyond CRIME
Unveiling new techniques to extract encrypted secrets from HTTPS channels, demonstrating a practical attack against enterprise products and discussing mitigation strategies.
Press ROOT to Continue - Detecting OSX and Windows Bootkits with RDFU
Explore UEFI rootkit detection with RDFU framework. Learn about OSX bootkit functionality, including password sniffing and privilege escalation. Discover tools to combat emerging UEFI-based threats.
Bluetooth Smart - The Good, The Bad, The Ugly, and The Fix
Comprehensive exploration of Bluetooth Smart technology, covering its design, vulnerabilities, and proposed security enhancements, with live demonstrations and open-source tool implementations.
How CVSS is DOSsing Your Patching Policy - and Wasting Your Money
Explore the effectiveness of CVSS as a vulnerability risk metric, analyzing its impact on patching policies and resource allocation through real-world attack data and statistical analysis.
Buying into the Bias - Why Vulnerability Statistics Suck
Explores flaws in vulnerability statistics, revealing biases and misinterpretations. Provides insights on critically evaluating security studies and understanding limitations of vulnerability data for better decision-making.
I Can Hear You Now - Traffic Interception & Remote Mobile Phone Cloning
Explore femtocell vulnerabilities in cellular networks, demonstrating traffic interception, active attacks, and remote mobile device cloning without physical access.
A Tale of One Software Bypass of Windows 8 Secure Boot
Exploring vulnerabilities in Windows 8 Secure Boot, demonstrating a full software bypass, and discussing how to avoid security mistakes in UEFI-based platforms.
Funderbolt - Adventures in Thunderbolt DMA Attacks
Explore Thunderbolt technology's security risks through reverse engineering. Learn about DMA attack strategies and potential vulnerabilities in high-speed data transfer ports on modern computers.
All You Always Wanted to Know About Antiviruses
Demystifying antivirus software: internals, detection methods, and trade-offs. Explores AV engines, whitelists, signatures, real-time monitoring, and network inspection across Windows, Linux, and Android platforms.
Microsoft Office Password Protection System and Encryption Holes in MS Windows Applications
Explore vulnerabilities in Microsoft Office password protection and encryption systems, uncovering potential security risks in Windows applications.
Java & Java Virtual Machine Security Vulnerabilities & Exploitation Techniques
Explore Java and JVM security vulnerabilities, exploitation techniques, and potential risks in this comprehensive presentation by Last Stage of Delirium.
Top 25 Overlooked Security Configurations on Your Switches and Routers
Comprehensive guide to enhancing network security by addressing often-overlooked configurations on switches and routers, covering encryption, filtering, logging, and protocol-specific settings.
SQL Security Revisited
Explore SQL Server security, from authentication modes to vulnerabilities. Learn about target acquisition, privilege escalation, and SQL injection techniques for better defense strategies.
Computer Forensics - A Critical Process in Your Incident Response Plan
Explore computer forensics as a crucial component of incident response planning, enhancing cybersecurity preparedness and investigative capabilities.
Key Legal Implications of Computer Network Defense
Explore legal implications of computer network defense, focusing on key aspects and considerations for cybersecurity professionals and organizations.