Black Hat USA 2023
108 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Black Hat USA 2023 Highlights
Black Hat USA 2023 Preview Video
Chained to Hit: Discovering New Vectors to Gain Remote and Root Access in SAP Enterprise Software
Zero-Touch-Pwn: Abusing Zoom's Zero Touch Provisioning for Remote Attacks on Desk Phones
ODDFuzz: Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing
Reflections on Trust in the Software Supply Chain
Dismantling DDoS - Lessons in Scaling
Single Instruction Multiple Data Leaks in Cutting-edge CPUs, AKA Downfall
Exploiting OPC-UA in Every Possible Way: Practical Attacks Against Modern OPC-UA Architectures
A Pain in the NAS: Exploiting Cloud Connectivity to PWN Your NAS
Devising and Detecting Phishing: Large Language Models vs. Smaller Human Models
Core Escalation: Unleashing the Power of Cross-Core Attacks on Heterogeneous System
Three New Attacks Against JSON Web Tokens
CoDe16; 16 Zero-Day Vulnerabilities Affecting CODESYS Framework Leading to Remote Code Execution
The Hat Trick: Exploit Chrome Twice from Runtime to JIT
Smashing the State Machine: The True Potential of Web Race Conditions
Weaponizing Plain Text: ANSI Escape Sequences as a Forensic Nightmare
Shuffle Up and Deal: Analyzing the Security of Automated Card Shufflers
All Cops Are Broadcasting: Breaking TETRA After Decades in the Shadows
MoustachedBouncer: AitM-Powered Surveillance via Belarus ISPs
MaginotDNS: Attacking the Boundary of DNS Caching Protection
AI Assisted Decision Making of Security Review Needs for New Features
Diving into Windows Remote Access Service for Pre-Auth Bugs
CodeQL: Also a Powerful Binary Analysis Engine
Oven Repair (The Hardware Hacking Way)
Lost Control-Breaking Hardware-Assisted Kernel Control-Flow Integrity with Page-Oriented Programming
Video-Based Cryptanalysis: Recovering Cryptographic Keys from Device Using Video of Power LED
Lemons and Liability: Cyber Warranties as an Experiment in Software Regulation
The Living Dead: Hacking Mobile Face Recognition SDKs with Non-Deepfake Attacks
Poisoning Web-Scale Training Datasets is Practical
Second Breakfast: Implicit and Mutation-Based Serialization Vulnerabilities in .NET
Evasive Maneuvers: Trends in Phishing Evasion & Anti-Evasion
Make KSMA Great Again: The Art of Rooting Android Devices by GPU MMU Features
Bad io_uring: A New Era of Rooting for Android
Small Leaks, Billions Of Dollars: Practical Cryptographic Exploits That Undermine Crypto Wallets
Route to Bugs: Analyzing the Security of BGP Message Parsing
Civil Cyber Defense-Defend Non-Profits as They Combat Human Trafficking/Subvert Authoritarian Regime
Input Output + Syslog (iO+S): Obtaining Data From Locked iOS Devices via Live Monitoring
HARry Parser and the Cursed Tracker: Breaking the Spell of Online Data Collection
Apple's Predicament: NSPredicate Exploits on iOS and macOS
Physical Attacks Against Smartphones
Mac-ing Sense of the 3CX Supply Chain Attack: Analysis of the macOS Payloads
Becoming a Dark Knight: Adversary Emulation Demonstration for ATT&CK Evaluations
Over the Air, Under the Radar: Attacking and Securing the Pixel Modem
What Does an LLM-Powered Threat Intelligence Program Look Like?
A Manufacturer's Post-Shipment Approach to Fend-Off IoT Malware in Home Appliances
Windows Agentless C2: (Ab)using the MDM Client Stack
Cookie Crumbles: Unveiling Web Session Integrity Vulnerabilities
Nothing but Net: Leveraging macOS's Networking Frameworks to Heuristically Detect Malware
Risks of AI Risk Policy: Five Lessons
EDR = Erase Data Remotely, By Cooking An Unforgettable (Byte) Signature Dish
Jailbreaking an Electric Vehicle in 2023 or What It Means to Hotwire Tesla's x86-Based Seat Heater
All You Need is Guest
Low-level RASP: Protecting Applications Implemented in High-level Programming Languages
Me and My Evil Digital Twin: The Psychology of Human Exploitation by AI Assistants
One Drive, Double Agent: Clouded OneDrive Turns Sides
Defender-Pretender: When Windows Defender Updates Become a Security Risk
Kill Latest MPU-based Protections in Just One Shot: Targeting All Commodity RTOSes
Evading Logging in the Cloud: Bypassing AWS CloudTrail
Fast, Ever-Evolving Defenders: The Resilience Revolution
Badge of Shame: Breaking into Secure Facilities with OSDP
How NOT to Train Your Hack Bot: Dos and Don'ts of Building Offensive GPTs
Lifting the Fog of War - Monitoring, Identifying and Mitigating MS-RPC Based Threats
Dive into Apple UserFS (Userspace Filesystem)
Reverse Engineering the Customized Pointer Authentication Hardware Implementation on Apple M1
Synthetic Trust: Exploiting Biases at Scale
From Dead Data to Digestion: Extracting Windows Fibers for Your Digital Forensics Diet
npm and Sigstore: Provenance Comes to the World's Largest OSS Ecosystem
Making and Breaking NSA's Codebreaker Challenge
Close Encounters of the Advanced Persistent Kind: Leveraging Rootkits for Post-Exploitation
Does Public Disclosure of Vulnerabilities Affect Hacker Participation in Bug Bounty Programs?
I Was Tasked With Enrolling Millions of Developers in 2FA - Here's What Happened
Radiation Spikes Detected in Chernobyl During Russian Invasion Show Possible Evidence of Fabrication
The Accidental Discovery of a New Vulnerability in Google's OAuth Implementation
When a Zero Day and Access Keys Collide in the Cloud: Responding to the SugarCRM 0-Day Vulnerability
Identifying and Reducing Permission Explosion in AWS: A Graph-Based and Analytical Approach
BTD: Unleashing the Power of Decompilation for x86 Deep Neural Network Executables
IRonMAN: InterpRetable Incident Inspector Based ON Large-Scale Language Model and Association miNing
Uncovering Azure's Silent Threats: A Journey into Cloud Vulnerabilities
Compromising LLMs: The Advent of AI Malware
I Watched You Roll the Die: Unparalleled RDP Monitoring Reveal Attackers' Tradecraft
Endoscope: Unpacking Android Apps with VM-Based Obfuscation
Unsafe At Any Speed: CISA's Plan to Foster Tech Ecosystem Security
mTLS: When Certificate Authentication is Done Wrong
BingBang: Hacking Bing.com (and much more) with Azure Active Directory
Know Thy Enemy: The Taxonomies That Meta Uses to Map the Offensive Privacy Space
Mirage: Cyber Deception Against Autonomous Cyber Attacks
The Most Dangerous Codec in the World: Finding and Exploiting Vulnerabilities in H.264 Decoders
The Yandex Leak: How a Russian Search Giant Uses Consumer Data
TSSHOCK: Breaking MPC Wallets and Digital Custodians for $BILLION$ Profit
A SSLippery Slope: Unraveling the Hidden Dangers of Certificate Misuse
International Threat Actors are Targeting Children to Steal Money from Banks & Major Corporations
Diversity Microtalks: Perspectives on Creating Change
34231 WhyCyberInsuranceShouldbeYourSOCsNewBestFriend v2
The Integration Cyber Security and Insurance: The Journey of Cysurance
Bridging Cyber and Insurance
Leverage and Demonstrate Value with your Cyber Insurance Renewal
The 9th Annual Black Hat USA Network Operations Center (NOC) Report
Lessons Learned from the KA-SAT Cyberattack: Response, Mitigation and Information Sharing
A Q&A with a16z's Zane Lackey: Unlocking the Secrets of Cybersecurity Entrepreneurship