Skip to content

Black Hat

channel๐Ÿ›ก๏ธ Securityon YouTube โ†—

3151 videos enrolled ยท 1 in the catalog

Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policyย recent).

Its playlists 50

The channel's own playlists, each with its videos in its own order. 610 of the channel's 3151 videos are in none of them.

  1. A Security RISC? The State of Microarchitectural Attacks on RISC-VA Security RISC? The State of Microarchitectural Attacks on RISC-V28 Oct 202446:43not yet analysed
  2. A SSLippery Slope: Unraveling the Hidden Dangers of Certificate MisuseA SSLippery Slope: Unraveling the Hidden Dangers of Certificate Misuse28 Oct 202432:19not yet analysed
  3. A World-View of IP Spoofing in L4 Volumetric DoS Attacks - and a Call to Enable BCP38A World-View of IP Spoofing in L4 Volumetric DoS Attacks - and a Call to Enable BCP3828 Oct 202428:23not yet analysed
  4. AI Assisted Decision Making of Security Review Needs for New FeaturesAI Assisted Decision Making of Security Review Needs for New Features28 Oct 202436:53not yet analysed
  5. All Cops Are Broadcasting: Breaking TETRA After Decades in the ShadowsAll Cops Are Broadcasting: Breaking TETRA After Decades in the Shadows28 Oct 202437:07not yet analysed
  6. All You Need is GuestAll You Need is Guest28 Oct 202437:54not yet analysed
  7. Apple's Predicament: NSPredicate Exploits on iOS and macOSApple's Predicament: NSPredicate Exploits on iOS and macOS28 Oct 202436:07not yet analysed
  8. Attacking Debug Modules In The Android EcosystemAttacking Debug Modules In The Android Ecosystem28 Oct 202431:35not yet analysed
  9. Attacking NPUs of Multiple PlatformsAttacking NPUs of Multiple Platforms28 Oct 202436:35not yet analysed
  10. AutoSpill: Zero Effort Credential Stealing from Mobile Password ManagersAutoSpill: Zero Effort Credential Stealing from Mobile Password Managers28 Oct 202435:26not yet analysed
  11. Back to the Roots: Finding the Origin of CSP Security BugsBack to the Roots: Finding the Origin of CSP Security Bugs28 Oct 202426:01not yet analysed
  12. Bad io_uring: A New Era of Rooting for AndroidBad io_uring: A New Era of Rooting for Android28 Oct 202426:57not yet analysed
  13. Bad Randomness: Protecting Against Cryptography's Perfect CrimeBad Randomness: Protecting Against Cryptography's Perfect Crime28 Oct 202439:00not yet analysed
  14. Badge of Shame: Breaking into Secure Facilities with OSDPBadge of Shame: Breaking into Secure Facilities with OSDP28 Oct 202440:03not yet analysed
  15. Becoming a Dark Knight: Adversary Emulation Demonstration for ATT&CK EvaluationsBecoming a Dark Knight: Adversary Emulation Demonstration for ATT&CK Evaluations28 Oct 202442:54not yet analysed
  16. BingBang: Hacking Bing.com (and much more) with Azure Active DirectoryBingBang: Hacking Bing.com (and much more) with Azure Active Directory28 Oct 202434:26not yet analysed
  17. Black Hat Asia 2024 HighlightsBlack Hat Asia 2024 Highlights28 Oct 20242:47not yet analysed
  18. Black Hat Europe 2023 HighlightsBlack Hat Europe 2023 Highlights28 Oct 20240:44not yet analysed
  19. Black Hat Europe 2023 HighlightsBlack Hat Europe 2023 Highlights28 Oct 20242:38not yet analysed
  20. Black Hat Europe 2023: Why Attend the World's Premier Technical Cybersecurity ConferenceBlack Hat Europe 2023: Why Attend the World's Premier Technical Cybersecurity Conference28 Oct 20240:44not yet analysed
  21. Black Hat Europe 2024 at the ExCel, London December 9-12Black Hat Europe 2024 at the ExCel, London December 9-1228 Oct 20240:46not yet analysed
  22. Black Hat Europe 2024 at the ExCel, London December 9-12 Sizzle ReelBlack Hat Europe 2024 at the ExCel, London December 9-12 Sizzle Reel28 Oct 20240:23not yet analysed
  23. Black Hat USA 2024 - Short ReelBlack Hat USA 2024 - Short Reel28 Oct 20240:19not yet analysed
  24. Black Hat USA 2024 HighlightsBlack Hat USA 2024 Highlights28 Oct 20242:26not yet analysed
  25. Black Hat USA 2024 Short ReelBlack Hat USA 2024 Short Reel28 Oct 20240:41not yet analysed
  26. Breaching the Perimeter via Cloud Synchronized Browser SettingsBreaching the Perimeter via Cloud Synchronized Browser Settings28 Oct 202434:17not yet analysed
  27. Breaking Managed Identity Barriers In Azure ServicesBreaking Managed Identity Barriers In Azure Services28 Oct 202443:57not yet analysed
  28. Breaking Theoretical Limits: The Gap Between Virtual NICs and Physical Network CardsBreaking Theoretical Limits: The Gap Between Virtual NICs and Physical Network Cards28 Oct 202423:27not yet analysed
  29. Bridging Cyber and InsuranceBridging Cyber and Insurance28 Oct 202430:49not yet analysed
  30. BTD: Unleashing the Power of Decompilation for x86 Deep Neural Network ExecutablesBTD: Unleashing the Power of Decompilation for x86 Deep Neural Network Executables28 Oct 202423:47not yet analysed
  31. Bypassing Entra ID Conditional Access Like APT: A Deep Dive Into Device Authentication MechanismsBypassing Entra ID Conditional Access Like APT: A Deep Dive Into Device Authentication Mechanisms28 Oct 202431:13not yet analysed
  32. Calling all Cybersecurity Pros! Join Us at Black Hat USA 2024 at the Mandalay Bay.Calling all Cybersecurity Pros! Join Us at Black Hat USA 2024 at the Mandalay Bay.28 Oct 20240:42not yet analysed
  33. CertifiedDCOM: The Privilege Escalation Journey to Domain Admin with DCOMCertifiedDCOM: The Privilege Escalation Journey to Domain Admin with DCOM28 Oct 202426:46not yet analysed
  34. Chained to Hit: Discovering New Vectors to Gain Remote and Root Access in SAP Enterprise SoftwareChained to Hit: Discovering New Vectors to Gain Remote and Root Access in SAP Enterprise Software28 Oct 202436:09not yet analysed
  35. China's Military Cyber Operations: Has the Strategic Support Force Come of Age?China's Military Cyber Operations: Has the Strategic Support Force Come of Age?28 Oct 202441:05not yet analysed
  36. Chinese APT: A Master of Exploiting Edge DevicesChinese APT: A Master of Exploiting Edge Devices28 Oct 202432:09not yet analysed
  37. Civil Cyber Defense-Defend Non-Profits as They Combat Human Trafficking/Subvert Authoritarian RegimeCivil Cyber Defense-Defend Non-Profits as They Combat Human Trafficking/Subvert Authoritarian Regime28 Oct 202439:29not yet analysed
  38. Close Encounters of the Advanced Persistent Kind: Leveraging Rootkits for Post-ExploitationClose Encounters of the Advanced Persistent Kind: Leveraging Rootkits for Post-Exploitation28 Oct 202438:03not yet analysed
  39. Cloud Console Cartographer: Tapping Into Mapping- Slogging Thru LoggingCloud Console Cartographer: Tapping Into Mapping- Slogging Thru Logging28 Oct 202438:53not yet analysed
  40. CoDe16; 16 Zero-Day Vulnerabilities Affecting CODESYS Framework Leading to Remote Code ExecutionCoDe16; 16 Zero-Day Vulnerabilities Affecting CODESYS Framework Leading to Remote Code Execution28 Oct 202434:15not yet analysed
  41. CodeQL: Also a Powerful Binary Analysis EngineCodeQL: Also a Powerful Binary Analysis Engine28 Oct 202431:38not yet analysed
  42. Collide+Power: The Evolution of Software-based Power Side-Channels AttacksCollide+Power: The Evolution of Software-based Power Side-Channels Attacks28 Oct 202435:58not yet analysed
  43. Compromising LLMs: The Advent of AI MalwareCompromising LLMs: The Advent of AI Malware28 Oct 202436:29not yet analysed
  44. Confused Learning: Supply Chain Attacks through Machine Learning ModelsConfused Learning: Supply Chain Attacks through Machine Learning Models28 Oct 202440:34not yet analysed
  45. Cookie Crumbles: Unveiling Web Session Integrity VulnerabilitiesCookie Crumbles: Unveiling Web Session Integrity Vulnerabilities28 Oct 202428:17not yet analysed
  46. Core Escalation: Unleashing the Power of Cross-Core Attacks on Heterogeneous SystemCore Escalation: Unleashing the Power of Cross-Core Attacks on Heterogeneous System28 Oct 202433:59not yet analysed
  47. Debug7: Leveraging a Firmware Modification Attack for Remote Debugging of Siemens S7 PLCsDebug7: Leveraging a Firmware Modification Attack for Remote Debugging of Siemens S7 PLCs28 Oct 202437:23not yet analysed
  48. Defender-Pretender: When Windows Defender Updates Become a Security RiskDefender-Pretender: When Windows Defender Updates Become a Security Risk28 Oct 202438:55not yet analysed
  49. Deleting Your Domain? Preventing Data Leaks at TLD ScaleDeleting Your Domain? Preventing Data Leaks at TLD Scale28 Oct 202440:29not yet analysed
  50. Devising and Detecting Phishing: Large Language Models vs. Smaller Human ModelsDevising and Detecting Phishing: Large Language Models vs. Smaller Human Models28 Oct 202434:10not yet analysed
  51. Dismantling DDoS - Lessons in ScalingDismantling DDoS - Lessons in Scaling28 Oct 202456:12not yet analysed
  52. Dive into Apple UserFS (Userspace Filesystem)Dive into Apple UserFS (Userspace Filesystem)28 Oct 202425:48not yet analysed
  53. Diversity Microtalks: Perspectives on Creating ChangeDiversity Microtalks: Perspectives on Creating Change28 Oct 202440:26not yet analysed
  54. Diving into Windows Remote Access Service for Pre-Auth BugsDiving into Windows Remote Access Service for Pre-Auth Bugs28 Oct 202438:45not yet analysed
  55. Does Public Disclosure of Vulnerabilities Affect Hacker Participation in Bug Bounty Programs?Does Public Disclosure of Vulnerabilities Affect Hacker Participation in Bug Bounty Programs?28 Oct 202430:08not yet analysed
  56. EDR = Erase Data Remotely, By Cooking An Unforgettable (Byte) Signature DishEDR = Erase Data Remotely, By Cooking An Unforgettable (Byte) Signature Dish28 Oct 202439:15not yet analysed
  57. EDR Reloaded: Erase Data RemotelyEDR Reloaded: Erase Data Remotely28 Oct 202440:18not yet analysed
  58. Emerging Frontiers: Insights from the Black Hat Asia Review BoardEmerging Frontiers: Insights from the Black Hat Asia Review Board28 Oct 202443:00not yet analysed
  59. Endoscope: Unpacking Android Apps with VM-Based ObfuscationEndoscope: Unpacking Android Apps with VM-Based Obfuscation28 Oct 202429:15not yet analysed
  60. Entrepreneur's Dilemma: Managing Growth and Dedication to Product QualityEntrepreneur's Dilemma: Managing Growth and Dedication to Product Quality28 Oct 202442:27not yet analysed
  61. Evading Logging in the Cloud: Bypassing AWS CloudTrailEvading Logging in the Cloud: Bypassing AWS CloudTrail28 Oct 202426:02not yet analysed
  62. Evasive Maneuvers: Trends in Phishing Evasion & Anti-EvasionEvasive Maneuvers: Trends in Phishing Evasion & Anti-Evasion28 Oct 202429:57not yet analysed
  63. Evils in the Sparse Texture Memory: Exploit Kernel Based on Undefined Behaviors of Graphic APIsEvils in the Sparse Texture Memory: Exploit Kernel Based on Undefined Behaviors of Graphic APIs28 Oct 202440:10not yet analysed
  64. Exploiting OPC-UA in Every Possible Way: Practical Attacks Against Modern OPC-UA ArchitecturesExploiting OPC-UA in Every Possible Way: Practical Attacks Against Modern OPC-UA Architectures28 Oct 202439:58not yet analysed
  65. Fast, Ever-Evolving Defenders: The Resilience RevolutionFast, Ever-Evolving Defenders: The Resilience Revolution28 Oct 202445:04not yet analysed
  66. Faults in Our Bus: Novel Bus Fault Attack to Break Trusted Execution EnvironmentsFaults in Our Bus: Novel Bus Fault Attack to Break Trusted Execution Environments28 Oct 202431:35not yet analysed
  67. Fireside Chat: Jeff Moss and Ruimin HeFireside Chat: Jeff Moss and Ruimin He28 Oct 202453:03not yet analysed
  68. Forward Focus: Perspectives on AI, Hype, and SecurityForward Focus: Perspectives on AI, Hype, and Security28 Oct 202438:32not yet analysed
  69. From BYOVD to a 0-day: Unveiling Advanced Exploits in Cyber Recruiting ScamsFrom BYOVD to a 0-day: Unveiling Advanced Exploits in Cyber Recruiting Scams28 Oct 202437:27not yet analysed
  70. From Dead Data to Digestion: Extracting Windows Fibers for Your Digital Forensics DietFrom Dead Data to Digestion: Extracting Windows Fibers for Your Digital Forensics Diet28 Oct 202427:10not yet analysed
  71. Game of Cross Cache: Let's Win It in a More Effective Way!Game of Cross Cache: Let's Win It in a More Effective Way!28 Oct 202433:57not yet analysed
  72. Hacking Your Documentation: Who Should WTFM?Hacking Your Documentation: Who Should WTFM?28 Oct 202417:17not yet analysed
  73. HARry Parser and the Cursed Tracker: Breaking the Spell of Online Data CollectionHARry Parser and the Cursed Tracker: Breaking the Spell of Online Data Collection28 Oct 202432:00not yet analysed
  74. Hiding in the Clouds: Abusing Azure DevOps Services to Bypass Microsoft Sentinel Analytic RulesHiding in the Clouds: Abusing Azure DevOps Services to Bypass Microsoft Sentinel Analytic Rules28 Oct 202438:19not yet analysed
  75. HODOR: Reducing Attack Surface on Node.js via System Call LimitationHODOR: Reducing Attack Surface on Node.js via System Call Limitation28 Oct 202422:14not yet analysed
  76. Houston, We Have a Problem: Analyzing the Security of Low Earth Orbit SatellitesHouston, We Have a Problem: Analyzing the Security of Low Earth Orbit Satellites28 Oct 202439:44not yet analysed
  77. How I Learned to Stop Worrying and Build a Modern Detection & Response ProgramHow I Learned to Stop Worrying and Build a Modern Detection & Response Program28 Oct 202438:06not yet analysed
  78. How NOT to Train Your Hack Bot: Dos and Don'ts of Building Offensive GPTsHow NOT to Train Your Hack Bot: Dos and Don'ts of Building Offensive GPTs28 Oct 202436:15not yet analysed
  79. How to Make Hugging Face to Hug Worms: Discovering and Exploiting Unsafe Pickle.loadsHow to Make Hugging Face to Hug Worms: Discovering and Exploiting Unsafe Pickle.loads28 Oct 202441:01not yet analysed
  80. How We Taught ChatGPT-4 to Break mbedTLS AES With Side-Channel AttacksHow We Taught ChatGPT-4 to Break mbedTLS AES With Side-Channel Attacks28 Oct 202439:25not yet analysed
  81. I Was Tasked With Enrolling Millions of Developers in 2FA - Here's What HappenedI Was Tasked With Enrolling Millions of Developers in 2FA - Here's What Happened28 Oct 202437:31not yet analysed
  82. I Watched You Roll the Die: Unparalleled RDP Monitoring Reveal Attackers' TradecraftI Watched You Roll the Die: Unparalleled RDP Monitoring Reveal Attackers' Tradecraft28 Oct 202439:24not yet analysed
  83. Idea to Realization: Cybersecurity EntrepreneurshipIdea to Realization: Cybersecurity Entrepreneurship28 Oct 202439:27not yet analysed
  84. Identifying and Reducing Permission Explosion in AWS: A Graph-Based and Analytical ApproachIdentifying and Reducing Permission Explosion in AWS: A Graph-Based and Analytical Approach28 Oct 202424:52not yet analysed
  85. Illegitimate Data Protection Requests - To Delete or to Address?Illegitimate Data Protection Requests - To Delete or to Address?28 Oct 202441:00not yet analysed
  86. Immoral Fiber: Unlocking & Discovering New Offensive Capabilities of FibersImmoral Fiber: Unlocking & Discovering New Offensive Capabilities of Fibers28 Oct 202428:31not yet analysed
  87. Indirect Prompt Injection Into LLMs Using Images and SoundsIndirect Prompt Injection Into LLMs Using Images and Sounds28 Oct 202428:21not yet analysed
  88. Input Output + Syslog (iO+S): Obtaining Data From Locked iOS Devices via Live MonitoringInput Output + Syslog (iO+S): Obtaining Data From Locked iOS Devices via Live Monitoring28 Oct 202434:49not yet analysed
  89. International Threat Actors are Targeting Children to Steal Money from Banks & Major CorporationsInternational Threat Actors are Targeting Children to Steal Money from Banks & Major Corporations28 Oct 202442:06not yet analysed
  90. IRonMAN: InterpRetable Incident Inspector Based ON Large-Scale Language Model and Association miNingIRonMAN: InterpRetable Incident Inspector Based ON Large-Scale Language Model and Association miNing28 Oct 202440:13not yet analysed
  91. Is your PKlaaS crypto resilient in the new age of quantum computers?Is your PKlaaS crypto resilient in the new age of quantum computers?28 Oct 20240:31not yet analysed
  92. Jailbreaking an Electric Vehicle in 2023 or What It Means to Hotwire Tesla's x86-Based Seat HeaterJailbreaking an Electric Vehicle in 2023 or What It Means to Hotwire Tesla's x86-Based Seat Heater28 Oct 202441:03not yet analysed
  93. Kemba Walden Discusses the National Cybersecurity Strategy and Workforce EffortsKemba Walden Discusses the National Cybersecurity Strategy and Workforce Efforts28 Oct 20241:00:52not yet analysed
  94. Keynote - Securing Our Cyberspace TogetherKeynote - Securing Our Cyberspace Together28 Oct 20241:02:26not yet analysed
  95. Keynote: Fireside Chat with Moxie MarlinspikeKeynote: Fireside Chat with Moxie Marlinspike28 Oct 202453:30not yet analysed
  96. Keynote: Guardians of the AI Era: Navigating the Cybersecurity Landscape of TomorrowKeynote: Guardians of the AI Era: Navigating the Cybersecurity Landscape of Tomorrow28 Oct 20241:01:26not yet analysed
  97. Keynote: Industrialising Cyber Defence in an Asymmetric WorldKeynote: Industrialising Cyber Defence in an Asymmetric World28 Oct 202441:02not yet analysed
  98. Keynote: My Lessons from the Uber CaseKeynote: My Lessons from the Uber Case28 Oct 20241:05:00not yet analysed
  99. Kidnapping Without Hostages: Virtual Kidnapping and the Dark Road AheadKidnapping Without Hostages: Virtual Kidnapping and the Dark Road Ahead28 Oct 202429:33not yet analysed
  100. Kill Latest MPU-based Protections in Just One Shot: Targeting All Commodity RTOSesKill Latest MPU-based Protections in Just One Shot: Targeting All Commodity RTOSes28 Oct 202425:23not yet analysed