Complex Paths and Derelict Sentinels - Software Engineering Underpinnings of NTP Vulnerabilities
Explore software engineering choices behind recent NTP vulnerabilities, focusing on packet consistency checks, ephemeral associations, and spoofing in this IEEE conference talk.
Automotive Security - Trends, Problems, Solutions, and Future Work
Explore automotive cybersecurity trends, challenges, and solutions. Learn about car hacking, attack surfaces, network vulnerabilities, and protective measures for safer connected vehicles.
Introduction to Risk Analysis and Management in Security - Lecture 7
Comprehensive overview of risk analysis, management, and security incident taxonomy in cybersecurity, covering eavesdropping, denial of service, and cloud computing concepts.
Introduction to Risk Analysis in Security and Network Forensics - Chapter 7
Explore risk analysis, management methodologies, and security incident taxonomy. Learn about various cyber threats and attack types, as well as cloud computing concepts and services.
Attacking NextGen Roaming Networks
Explore vulnerabilities in Diameter-based networks, including tracking subscribers, billing fraud, and denial of service attacks. Learn about security risks and recommendations for next-generation roaming networks.
Stupid RedTeamer Tricks
Discover simple yet effective red teaming tricks to enhance assessments, including improved USB key drops, C&C concealment, and social engineering techniques using Outlook.
Harry Potter and the Not-So-Smart Proxy War
Análisis técnico y de seguridad de Protego, un supuesto sistema de control de armas de la CIA para fuerzas proxy. Explora su funcionamiento, vulnerabilidades potenciales e implicaciones más amplias.
Attack Vectors in Biometric Recognition Systems - Mobile Authentication Use Case, Blockchain, and More
Explore vulnerabilities in biometric recognition systems, including mobile authentication, spoofing techniques, and emerging technologies like blockchain, with insights on future developments and security challenges.
Spread Spectrum Satcom Hacking - Attacking The Globalstar Simplex Data Service
Explore reverse engineering and exploitation of GlobalStar's simplex satcom protocol, uncovering vulnerabilities in satellite communications and demonstrating interception and spoofing capabilities.
Brute-Forcing Lockdown Harddrive Pin Codes
Explore techniques for bypassing AES-256 encrypted hard drive security through front-panel keyboard spoofing and internal design analysis, building on previous research.
Out of Control - Demonstrating SCADA Device Exploitation
Explore SCADA device exploitation in oil and gas pipelines, examining control systems, vulnerabilities, and potential consequences of security breaches in critical infrastructure.
Building a Blind IP Spoofed Portscanning Tool
Explore techniques for building a blind IP spoofed portscanning tool, covering TCP/IP basics, traditional scanning methods, and advanced concepts like raw sockets and stateful firewalls.
Breaking NBAD & UEBA Detection
Explore techniques to bypass Network Behavior Anomaly Detection (NBAD) and User Entity Behavior Analytics (UEBA), covering data poisoning, exfiltration, and various attack methods with live demonstrations.
Secure Coding Best Practices - Threat Hunting
Explore threat modeling and secure coding practices in C++, focusing on identifying attack surfaces, analyzing vulnerabilities, and implementing effective defense strategies for robust software design.
Threat Modeling
Analyze system design to identify security weaknesses and missing controls. Learn techniques to uncover threats in your systems through threat modeling.
Cybersecurity Vulnerabilities in Precision Time Protocol - Attacks and Mitigations
Explore critical cybersecurity vulnerabilities in IEEE 1588's Precision Time Protocol through experimental findings, including spoofing, DoS attacks, data injection, and covert channels, with proposed mitigation strategies.
Black Hat Europe 2023
Black Hat Europe 2023
Black Hat USA 2023
Black Hat USA 2023
Black Hat Asia 2025
Black Hat Asia 2025