Printer Hacking Adventures - Exploiting Network Vulnerabilities
Explore printer vulnerabilities and exploit chains for Canon and Lexmark models. Learn about firmware analysis, debugging closed systems, and network security implications of office printers.
Developing Secure Software with GitHub - Automated Security Checks and Tools
Learn to leverage GitHub for automated security checks, including static application security testing and software composition analysis, to enhance your application's security posture with minimal effort.
How Samsung Secures Your Wallet and How to Break It
Demystifying SamsungPay's implementation and security mechanisms, with insights on bypassing analysis obstacles. Explore the intricacies of this mobile payment service's architecture and potential vulnerabilities.
Leave Home Safe App Security Assessment - The Good, the Bad, the Ugly
Explore security vulnerabilities in Hong Kong's LeaveHomeSafe app, from assessment techniques to disclosure challenges. Gain insights on securing contact tracing apps and improving data privacy.
O-RAN Threat Modelling: Security Analysis and Risk Assessment in Open Radio Access Networks
Explore essential threat modeling techniques for O-RAN architectures, focusing on vulnerability assessment, risk mitigation, and security enhancement in multi-vendor network environments.
Practical Vulnerability Analysis for Development Teams
Discover effective vulnerability analysis techniques and best practices for development teams, focusing on identifying and mitigating security risks in software development.
Understanding Page Spray in Linux Kernel Exploitation
Dive into an advanced analysis of Page Spray exploitation in Linux kernel security, exploring root causes, exploitation models, and mitigation strategies for enhanced system protection.
Practical Data-Only Attack Generation Using Einstein - A Dynamic Taint Analysis Approach
Discover how Einstein pipeline uses dynamic taint analysis to generate data-only attacks, scan vulnerable system calls, and create exploits that bypass modern security mitigations in server applications.
Exploiting Android's Hardened Memory Allocator - Security Analysis and Exploitation Techniques
Discover techniques for exploiting Scudo, Android's memory allocator, through an analysis of security measures and demonstration of new exploitation methods for gaining arbitrary memory write access.
Not Quite Write: On the Effectiveness of Store-Only Bounds Checking
Explore the security limitations of store-only bounds checking in C/C++ code, examining bypass vulnerabilities and potential defenses for compiler-based memory safety enforcement.
Achilles Heel in Secure Boot: Breaking RSA Authentication and Bitstream Recovery from Zynq-7000 SoC
Uncover critical security vulnerabilities in Zynq-7000 SoC's secure boot implementation, exploring RSA authentication bypass and practical 'Starbleed' attacks for bitstream recovery.
ShadowRay: First Known Attack Campaign Targeting AI Workloads Actively Exploited in the Wild
Discover how attackers exploit AI infrastructure through the ShadowRay campaign, examining real-world cases, attack techniques, and critical security lessons for protecting AI workloads.
Black Hat USA 2025
Black Hat USA 2025
Black Hat Europe 2023
Black Hat Europe 2023
Black Hat Europe 2024
Black Hat Europe 2024