Black Hat
3156 videos enrolled · 4 in the catalog · 2 failed
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Its playlists 50
The channel's own playlists, each with its videos in its own order. 610 of the channel's 3156 videos are in none of them.
- Black Hat Asia 2014
- Black Hat Asia 2015
- Black Hat Asia 2016
- Black Hat Asia 2017
- Black Hat Asia 2018
- Black Hat Asia 2019
- Black Hat Asia 2020
- Black Hat Asia 2021
- Black Hat Asia 2022
- Black Hat Asia 2023
- Black Hat Asia 2024
- Black Hat Asia 2025
- Black Hat Asia 2026
- Black Hat Europe 2014
- Black Hat Europe 2015
- Black Hat Europe 2016
- Black Hat Europe 2017
- Black Hat Europe 2018
- Black Hat Europe 2019
- Black Hat Europe 2020
- Black Hat Europe 2021
- Black Hat Europe 2022
- Black Hat Europe 2023
- Black Hat Europe 2024
- Black Hat Europe 2025
- Black Hat Europe 2026
- Black Hat Fast Chats
- Black Hat Intercepted
- Black Hat Stories
- Black Hat USA 2013
- Black Hat USA 2014
- Black Hat USA 2015
- Black Hat USA 2016
- Black Hat USA 2017
- Black Hat USA 2018
- Black Hat USA 2019
- Black Hat USA 2020
- Black Hat USA 2021
- Black Hat USA 2022
- Black Hat USA 2023
- Black Hat USA 2024
- Black Hat USA 2025
- Black Hat USA 2026
- Black Hat Vault
- Black Hat Webcasts
- Executive Interviews
- SecTor 2024
- SecTor 2025
- SecTor 2026
- Speaker Spotlight Videos
Locknote: Conclusions and Key Takeaways from Black Hat Asia 2022
Locknote: Conclusions and Key Takeaways from Black Hat Europe 2021
Lost in the Loader: The Many Faces of the Windows PE File Format
macOS Vulnerabilities Hiding in Plain Sight
Message in a Broken Bottle: Exploring the Linux IPC Attack Surface
MFA-ing the Un-MFA-ble: Protecting Auth Systems' Core Secrets
Mobius Band: Explore Hyper-V Attack Interface through Vulnerabilities Internals
New Ways of IPV6 Scanning
Next-Gen DFIR: Mass Exploits & Supplier Compromise
No Such Thing as a Stupid Question: Why Knowledge Shaming is Making Us Less Secure
Non-Intrusive Vulnerability Localization and Hotpatching for Industrial Control Systems
One Glitch to Rule Them All: Fault Injection Attacks Against the AMD Secure Processor
Over the Air Baseband Exploit: Gaining Remote Code Execution on 5G Smartphones
Owfuzz: WiFi Nightmare
Past as Prologue: What Users Can Except with 2022 Cyber Threats
PCIe Device Attacks: Beyond DMA. Exploiting PCIe Switches, Messages and Errors
Picking Lockfiles: Attacking & Defending Your Supply Chain
Practical Attacks Against Attribute-based Encryption
Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS and Beyond
President's Cup Cyber Competition: Finding the Best Cyber Talent in the US Government
ProxyLogon is Just the Tip of the Iceberg: A New Attack Surface on Microsoft Exchange Server!
Put in One Bug and Pop Out More: An Effective Way of Bug Hunting in Chrome
Qualcomm WiFi: Infinity War
ReCertifying Active Directory Certificate Services
Remote Memory-Deduplication Attacks
Resting on Feet of Clay: Securely Bootstrapping OPC UA Deployments
Reverse Engineering the M1
Rope: Bypassing Behavioral Detection of Malware with Distributed ROP-Driven Execution
Safeguarding UEFI Ecosystem: Firmware Supply Chain is Hard(coded)
Securing Open Source Software - End-to-end, At massive scale, Together
Securing the Public, who is in Charge?
Security Analysis of CHERI ISASecurity Analysis of CHERI ISA
Security Industry Call-to-Action: We Need a Cloud Vulnerability Database
SideWinder Uncoils to Strike
Skeletons in the App Sandbox: 5+ Ways to Escape
Sleight of ARM: Demystifying Intel Houdini
Smashing the ML Stack for Fun and Lawsuits
SMS PVA Services Fueled by Compromised Supply-Chain Mobile Botnets
Start Arbitrary Activity App Components as the System User Vulnerability Affecting Samsung Android
Symbexcel: Bringing the Power of Symbolic Execution to the Fight Against Malicious Excel 4 Macros
Taking Kernel Hardening to the Next Level
TeamTNT: Explosive Cryptomining
The Art of Exploiting UAF by Ret2bpf in Android Kernel
The Bad Guys Win – Analysis of 10,000 Magecart Vulnerabilities
The Black Hat Europe NOC (Network Operations Center) Report
The Case for a National Cybersecurity Safety Board
The Dark Age of Memory Corruption Mitigations in the Spectre Era
The Data Distribution Service (DDS) Protocol is Critical: Let's Use it Securely!
The Devil is in the GAN: Defending Deep Generative Models Against Adversarial Attacks
The Firmware Supply-Chain Security Is Broken: Can We Fix It?
The Hidden RCE Surfaces That Control the Droids
The Little Seal Bug Optical Sound Recovery from Lightweight Reflective Objects
The Little Seal Bug: Optical Sound Recovery from Lightweight Reflective Objects
The Mass Effect: How Opportunistic Workers Drift into Cybercrime
The Next Gen PlugX/ShadowPad? A Dive into the Emerging China-Nexus Modular Trojan, Pangolin8RAT
The Next Generation of Windows Exploitation: Attacking the Common Log File System
The Virtual Battlefield in 2022: Russia Ukraine War & Its Policy Implications
They Hacked Thousands of Cloud Accounts Then Sent Us Weird GIFs
Timeless Timing Attacks
To Loot or Not to Loot? That Is Not a Question When State Nexus APT Targets Online Entertainment
Typhoon Mangkhut: One-click Remote Universal Root Formed with Two Vulnerabilities
Uncovering Planned Obsolescence Practices in Robotics and What This Means for Cybersecurity
Unix Domain Socket: A Hidden Door Leading to Privilege Escalation in the Android Ecosystem
Using Zero to Attack Zero-Knowledge Proof (ZKP) PLONK
USMA: Share Kernel Code With Me
Veni, No Vidi, No Vici: Attacks on ETW Blind EDR Sensors
Vulnerability Intelligence
Who Did It - How We Attributed Campaigns of a Cyber Mercenary
Whoops, I Accidentally Helped Start the Offensive Intel Branch of a Foreign Intel Service
Why Asset Management Matters for Cybersecurity
Wibbly Wobbly, Timey Wimey – What's Really Inside Apple's U1 Chip
Windows Defender - Demystifying and Bypassing ASR by Understanding the AV's Signatures
Windows Heap-backed Pool: The Good, the Bad, and the Encoded
With Friends Like eBPF, Who Needs Enemies?
Your Software IS/NOT Vulnerable: CSAF, VEX, and the Future of Advisories
Your Trash Kernel Bug, My Precious 0-day
Zen and the Art of Adversarial Machine Learning
Zero - The Funniest Number in Cryptography
"We Are About to Land": How CloudDragon Turns a Nightmare Into Reality
(Un)protected Broadcasts in Android 9 and 10
3d Red Pill: A Guest-to-Host Escape on QEMU/KVM Virtio Device
A Decade After Stuxnet's Printer Vulnerability: Printing is Still the Stairway to Heaven
A Framework for Evaluating and Patching the Human Factor in Cybersecurity
A General Approach to Bypassing Many Kernel Protections and its Mitigation
A Hacker's Guide to Reducing Side-Channel Attack Surfaces Using Deep-Learning
A Little Less Speculation, a Little More Action: Deep Dive into Fuchsia's Mitigations for CPU Side..
A Look Ahead at Cyber Security in 2021
A Mirage of Safety: Bug Finding & Exploit Techniques of Top Android Vendor's Privacy Protection Apps
A New Era of One-Click Attacks: How to Break Install-Less Apps
A New Hope: The One Last Chance to Save Your SSD Data
A Walk Through Historical Correlations Between Vulnerabilities & Stock Prices
About Directed Fuzzing and Use-After-Free: How to Find Complex & Silent Bugs?
Active Directory Security in the Cloud Age
Adversary Detection Pipelines: Finally Making Your Threat Intel Useful
Alarm.DISARM - Remotely Exploiting & Disarming Popular Physical Security System from Public Internet
All You Ever Wanted to Know about the AMD Platform Security Processor and were Afraid to Emulate...
An Unauthenticated Journey to Root: Pwning Your Company's Enterprise Software Servers
Anti-Forensics: Reverse Engineering a Leading Phone Forensic Tool
Apple Neural Engine Internal: From ML Algorithm to HW Registers
Attacking and Defending Machine Learning Applications of Public Cloud