Black Hat Europe 2024
51 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
WorstFit: Unveiling Hidden Transformers in Windows ANSI!
WiFi Calling: Revealing Downgrade Attacks and Not-so-private private Keys
The CVSS Deception: How We've Been Misled on Vulnerability Severity
The Bugs in Your Bootloaders: Embedded Device Secure Boot Fails and How to Fix Them
The Double (AI) Agent: Flipping a GenAI Agent Behavior
Unmasking State-Sponsored Mobile Surveillance Malware from Russia, China, and North Korea
UNC1860 and The Temple of Oats - Iran's hidden hand in Middle Eastern Networks
When (Remote) Shells Fall Into The Same Hole: Rooting DrayTek Routers Before Attackers Can
Vulnerabilities in the eSIM download protocol
The Black Hat Europe Network Operations Center (NOC) Report
Security analysis of Residential Gateways and ISPs: global network domination is (sneakily) possible
Redefining the Origin of Secrecy in a Post-Quantum World
Reasonable Regs vs Red Tape: How Should Governments Tackle the Cyber Intrusion Market
Parse Me, Baby, One More Time: Bypassing HTML Sanitizer via Parsing Differentials
Over the Air: Compromise of Modern Volkswagen Group Vehicles
Operation MIDAS - Tracking Fraudulent Financial Program Organizations
Mind the Data Gap: Privacy Challenges in Autonomous AI Agents
Main Stage: Understanding and Reducing Supply Chain and Software Vulnerability Risks
Locknote: Conclusions and Key Takeaways from Black Hat Europe 2024
LLMbotomy: Shutting the Trojan Backdoors
Keynote: Frédérick Douzet
Keynote: Fighting Cybercrime in 2024
Is Your Memory Protected? Uncovering Hidden Vulnerabilities in Automotive MPU Mechanisms
Is JavaScript Trustworthy in Cloud Computing?
Infusing AI in Cybersecurity: The Times They Are AI-Changin'
Improving Side-Channel Protections for Intel TDX
How the Internet Dodged a Bullet: The KeyTrap Denial-of-Service Attacks against DNSSEC
Enhancing Automatic Vulnerability Discovery for Windows RPC/COM in New Ways
Guest Revolution: Chaining 3-bugs to compromise the Windows kernel from the VMware guest
From Pass-the-Hash to Code Execution on Schneider Electric M340 PLCs
Diving into Spooler: Discovering LPE and RCE Vulnerabilities in Windows Printer Driver
Defending off the land: Agentless defenses available today
Decoding EM-FI Attacks: Lessons Learned from Glitching the GigaDevice GD32F407
CodeCloak: A DRL-Based Method for Mitigating Code Leakage by LLM Code Assistants
Breaking Matter: Vulnerabilities in the Matter Protocol
Blast-RADIUS: Breaking RADIUS, the de facto standard protocol for authentication, authorization...
AML Injection Attacks on Confidential VMs
Unveiling the Power of Intune: Leveraging Intune for Breaking Into Your Cloud and On-Premise
The Insecure IoT Cloud Strikes Again: RCE on all Ruijie Cloud-Connected Devices
The Devil is in the (Micro-) Architectures: Uncovering New Side-Channel and Bit-Flip Attack Surfaces
SysBumps: Exploiting Speculative Execution in System Calls for Breaking KASLR
SpAIware & More: Advanced Prompt Injection Exploits in LLM Applications
My other ClassLoader is your ClassLoader: Creating evil twin instances of a class
Heartbeat Havoc: Unveiling Remote Vulnerabilities in Windows Network Load Balancing
Exposing the dark corners of SAP: 4-Years of Threat Intelligence data analyzed
Apple Disk-O Party
A Novel Attack Surface: Java Authentication and Authorization Service (JAAS)
Black Hat EU 2024 Speaker Orientation (Meeting Recording)
Black Hat Europe '24 Speaker Coaching Program Orientation Call
Black Hat Europe 2024 at the ExCel, London December 9-12 Sizzle Reel
Black Hat Europe 2024 at the ExCel, London December 9-12