Black Hat Asia 2023
45 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Black Hat Asia 2023 Highlights
A New Attack Interface in Java Applications
A Run a Day Won't Keep the Hacker Away: Inference Attacks in Fitness Tracking Social Networks
Abusing Azure Active Directory: From MFA Bypass to Listing Global Administrators
Alice in Kernel Land: Lessons Learned From the eBPF Rabbit Hole
Attacking the WebAssembly Compiler of WebKit
Behind the Scenes: How Criminal Enterprises Pre-infect Millions of Mobile Devices
Breaking Managed Data Services in the Cloud
Breaking the Chain: An Attacker's Perspective on Supply Chain Vulnerabilities and Flaws
Bypassing Anti-Cheats & Hacking Competitive Games
Cloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions
Dilemma in IoT Access Control: Revealing Novel Attacks and Design Challenges in Mobile-as-a-Gateway
Dirty Bin Cache: A New Code Injection Poisoning Binary Translation Cache
Dirty Stream Attack, Turning Android Share Targets Into Attack Vectors
E-Meet (or Emit?) My Keystrokes: How Benign Screen-sharing Meetings Could Leak Typing Behaviors
Engaging the Next Generation of Cybersecurity Professionals: The Power of Security Zines
Fireside Chat: Jeff Moss and Gaurav Keerthi
firmWar: An Imminent Threat to the Foundation of Computing
Forward Focus – The Impact of Artificial Intelligence
Fuzzing the Native NTFS Read-Write Driver (NTFS3) in the Linux Kernel
Grand Theft House: RF Lock Pick Tool to Unlock Smart Door Lock
Hacked on National Television
Hand Me Your SECRET, MCU! Microarchitectural Timing Attacks on Microcontrollers are Practical
Insider Threats Packing Their Bags With Corporate Data
Keynote - Preparing the Long Journey for Data Security
Leveraging Streaming-Based Outlier Detection and SliceLine to Stop Heavily Distributed Bot Attacks
Nakatomi Space: Lateral Movement as L1 Post-exploitation in OT
New Wine in an Old Bottle: Attacking Chrome WebSQL
Operation Clairvoyance: How APT Groups Spy on the Media Industry
Phoenix Domain Attack: Vulnerable Links in Domain Name Delegation and Revocation
PMFault: Voltage Fault Injection on Server Platforms Through the PMBus
PPLdump Is Dead. Long Live PPLdump!
Prototype Pollution Leads to RCE: Gadgets Everywhere
Revisiting Stealthy Sensitive Information Collection from Android Apps
Security Advocacy Shouldn't Be for Security Professionals: How the Industry Misses the Mark...
Stealing With Style: Using CSS to Exploit ProtonMail & Friends
Sweet Dreams: Abusing Sleep Mode to Break Wi-Fi Encryption and Disrupt WPA2/3 Networks
The Black Hat Asia NOC Report
The Various Shades of Supply Chain: SBOM, N-Days and Zero Trust
Trends and Top Takeaways from Black Hat Asia
Deception at Scale: How Malware Abuses Trust
Two Bugs With One PoC: Rooting Pixel 6 From Android 12 to Android 13
Weaponizing Mobile Infrastructure: Are Politically Motivated Cyber Attacks a Threat to Democracy?
When Knowledge Graph Meets TTPs: Automated & Adaptive Executable TTP Intelligence for Security
You Can Run, but You Can't Hide - Finding the Footprints of Hidden Shellcode