Black Hat
3152 videos enrolled · 1 in the catalog · 1 failed
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Its playlists 50
The channel's own playlists, each with its videos in its own order. 610 of the channel's 3152 videos are in none of them.
- Black Hat Asia 2014
- Black Hat Asia 2015
- Black Hat Asia 2016
- Black Hat Asia 2017
- Black Hat Asia 2018
- Black Hat Asia 2019
- Black Hat Asia 2020
- Black Hat Asia 2021
- Black Hat Asia 2022
- Black Hat Asia 2023
- Black Hat Asia 2024
- Black Hat Asia 2025
- Black Hat Asia 2026
- Black Hat Europe 2014
- Black Hat Europe 2015
- Black Hat Europe 2016
- Black Hat Europe 2017
- Black Hat Europe 2018
- Black Hat Europe 2019
- Black Hat Europe 2020
- Black Hat Europe 2021
- Black Hat Europe 2022
- Black Hat Europe 2023
- Black Hat Europe 2024
- Black Hat Europe 2025
- Black Hat Europe 2026
- Black Hat Fast Chats
- Black Hat Intercepted
- Black Hat Stories
- Black Hat USA 2013
- Black Hat USA 2014
- Black Hat USA 2015
- Black Hat USA 2016
- Black Hat USA 2017
- Black Hat USA 2018
- Black Hat USA 2019
- Black Hat USA 2020
- Black Hat USA 2021
- Black Hat USA 2022
- Black Hat USA 2023
- Black Hat USA 2024
- Black Hat USA 2025
- Black Hat USA 2026
- Black Hat Vault
- Black Hat Webcasts
- Executive Interviews
- SecTor 2024
- SecTor 2025
- SecTor 2026
- Speaker Spotlight Videos
Know Thy Enemy: The Taxonomies That Meta Uses to Map the Offensive Privacy Space
Lemons and Liability: Cyber Warranties as an Experiment in Software Regulation
Lessons Learned from the KA-SAT Cyberattack: Response, Mitigation and Information Sharing
Leverage and Demonstrate Value with your Cyber Insurance Renewal
Lifting the Fog of War - Monitoring, Identifying and Mitigating MS-RPC Based Threats
LinkDoor: A Hidden Attack Surface in the Android Netlink Kernel Modules
Living off Microsoft Copilot
Living off Microsoft Copilot- DEMO- invoice manipulation
LLM4Shell: Discovering and Exploiting RCE Vulnerabilities in Real-World LLM-Integrated Frameworks
LLMs at the Core: From Attention to Action in Scaling Security Teams
Locknote: Conclusions & Key Takeaways from Black Hat USA 2024
Locknote: Conclusions and Key Takeaways from Day 1
Locknote: Conclusions and Key Takeaways from Day 2
LogoFAIL: Security Implications of Image Parsing During System Boot
Lost Control-Breaking Hardware-Assisted Kernel Control-Flow Integrity with Page-Oriented Programming
Low-level RASP: Protecting Applications Implemented in High-level Programming Languages
Mac-ing Sense of the 3CX Supply Chain Attack: Analysis of the macOS Payloads
Magicdot: A Hacker's Magic Show of Disappearing Dots and Spaces
MaginotDNS: Attacking the Boundary of DNS Caching Protection
Main Stage: Let Me Tell You a Story: Technology and the 4 Vs
Make KSMA Great Again: The Art of Rooting Android Devices by GPU MMU Features
Making and Breaking NSA's Codebreaker Challenge
Me and My Evil Digital Twin: The Psychology of Human Exploitation by AI Assistants
Millions of Patient Records at Risk: The Perils of Legacy Protocols
Mirage: Cyber Deception Against Autonomous Cyber Attacks
MoustachedBouncer: AitM-Powered Surveillance via Belarus ISPs
mTLS: When Certificate Authentication is Done Wrong
My Invisible Adversary: Burnout
New Techniques for Split-Second DNS Rebinding
Nothing but Net: Leveraging macOS's Networking Frameworks to Heuristically Detect Malware
npm and Sigstore: Provenance Comes to the World's Largest OSS Ecosystem
ODDFuzz: Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing
Off The Record - Weaponizing DHCP DNS Dynamic Updates
One Drive, Double Agent: Clouded OneDrive Turns Sides
One Flip is All It Takes: Identifying Syscall-Guard Variables for Data-Only Attacks
One Million ASUS Routers Under Control: Exploiting ASUS DDNS to MITM Admin Credentials
Operation PoisonedApple: Tracing Credit Card Information Theft to Payment Fraud
Orchestrate This! Kubernetes Rootkit
Oven Repair (The Hardware Hacking Way)
Over the Air, Under the Radar: Attacking and Securing the Pixel Modem
Physical Attacks Against Smartphones
PKI-as-a-Service and the 411 on Certificates and Revocation
Poisoning Web-Scale Training Datasets is Practical
Practical LLM Security: Takeaways From a Year in the Trenches
Privacy Detective: Sniffing Out Your Data Leaks for Android
Project Zero: Ten Years of 'Make 0-Day Hard'
Radiation Spikes Detected in Chernobyl During Russian Invasion Show Possible Evidence of Fabrication
REDIScovering HeadCrab - A Technical Analysis of a Novel Malware and the Mind Behind It
Reflections on Trust in the Software Supply Chain
Reverse Engineering the Customized Pointer Authentication Hardware Implementation on Apple M1
Reviving JIT Vulnerabilities: Unleashing the Power of Maglev Compiler Bugs on Chrome Browser
Risks of AI Risk Policy: Five Lessons
Route to Bugs: Analyzing the Security of BGP Message Parsing
Second Breakfast: Implicit and Mutation-Based Serialization Vulnerabilities in .NET
Security Through Transparency: Scaling Your Customer Trust Program
Shuffle Up and Deal: Analyzing the Security of Automated Card Shufflers
Single Instruction Multiple Data Leaks in Cutting-edge CPUs, AKA Downfall
Small Leaks, Billions Of Dollars: Practical Cryptographic Exploits That Undermine Crypto Wallets
Smashing the State Machine: The True Potential of Web Race Conditions
Something Rotten in the State of Data Centers
Startup Spotlight Competition at Black Hat
Sure, Let Business Users Build Their Own. What Could Go Wrong?
Sweet QuaDreams or Nightmare Before Christmas? Dissecting an iOS 0-Day
Synthetic Trust: Exploiting Biases at Scale
SystemUI As EvilPiP: The Hijacking Attacks on Modern Mobile Devices
The 9th Annual Black Hat USA Network Operations Center (NOC) Report
The Accidental Discovery of a New Vulnerability in Google's OAuth Implementation
The Black Hat Asia Network Operations Center (NOC) Report
The Black Hat Europe Network Operations Center (NOC) Report
The Dark Side of EDR: Repurpose EDR as an Offensive Tool
The Fault in Our Metrics: Rethinking How We Measure Detection & Response
The Final Chapter: Unlimited ways to bypass your macOS privacy mechanisms
The Hack@DAC Story: Learnings from Organizing the World's Largest Hardware Hacking Competition
The Hat Trick: Exploit Chrome Twice from Runtime to JIT
The Hole in Sandbox: Escape Modern Web-Based App Sandbox From Site-Isolation Perspective
The Integration Cyber Security and Insurance: The Journey of Cysurance
The Key to Remote Vehicle Control: Autonomous Driving Domain Controller
The Living Dead: Hacking Mobile Face Recognition SDKs with Non-Deepfake Attacks
The Magnetic Pull of Mutable Protection: Worked Examples in Cryptographic Agility
The Most Dangerous Codec in the World: Finding and Exploiting Vulnerabilities in H.264 Decoders
The Pool Party You Will Never Forget: New Process Injection Techniques Using Windows Thread Pools
The Yandex Leak: How a Russian Search Giant Uses Consumer Data
Three New Attacks Against JSON Web Tokens
Through the Looking Glass: How Open Source Projects See Vulnerability Disclosure
TSSHOCK: Breaking MPC Wallets and Digital Custodians for $BILLION$ Profit
TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers
TunnelCrack: Leaking VPN Traffic by Manipulating Routing Tables
Uncovering Azure's Silent Threats: A Journey into Cloud Vulnerabilities
Unmasking APTs: An Automated Approach for Real-World Threat Attribution
Unsafe At Any Speed: CISA's Plan to Foster Tech Ecosystem Security
Unveiling the Cracks in Virtualization, Mastering the Host System--VMware Workstation Escape
URB Excalibur: The New VMware All-Platform VM Escapes
Video-Based Cryptanalysis: Recovering Cryptographic Keys from Device Using Video of Power LED
VoBERT: Unstable Log Sequence Anomaly Detection: Introducing Vocabulary-Free BERT
Voice Phishing Syndicates Unmasked: An In-Depth Investigation and Exposure
Vulnerabilities in Old Third-Party Software Components- Importance of Having SBoM for IoT/OT Devices
Weaponizing Plain Text: ANSI Escape Sequences as a Forensic Nightmare
What Does an LLM-Powered Threat Intelligence Program Look Like?
What the TrustZone-M Doesn't See, the MCU Does Grieve Over: Lessons Learned
What We Can Learn from Ukraine's Cyber Defenders about Building a More Resilient Future