Black Hat Europe 2021
53 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policyΒ recent).
Keynote: Clocking On
Securing the Public, who is in Charge?
Locknote: Conclusions and Key Takeaways from Black Hat Europe 2021
Keynote: Embedding a Human-Centric Approach Into a Global Cyber Security Program
Hardware Security Module - Executing Unsigned Code in HSM TEE
The Data Distribution Service (DDS) Protocol is Critical: Let's Use it Securely!
No Such Thing as a Stupid Question: Why Knowledge Shaming is Making Us Less Secure
Who Did It - How We Attributed Campaigns of a Cyber Mercenary
Practical Attacks Against Attribute-based Encryption
Hand in Your Pocket Without You Noticing: Current State of Mobile Wallet Security
One Glitch to Rule Them All: Fault Injection Attacks Against the AMD Secure Processor
APTs Go Teleworking: The Rise of VPN Exploits
The Art of Exploiting UAF by Ret2bpf in Android Kernel
A Deep Dive into Privacy Dashboard of Top Android Vendors
From Logic to Memory: Winning the Solitaire in Reparse Points
Exploiting CSP in WebKit to Break Authentication and Authorization
Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks
Lost in the Loader: The Many Faces of the Windows PE File Format
Picking Lockfiles: Attacking & Defending Your Supply Chain
They Hacked Thousands of Cloud Accounts Then Sent Us Weird GIFs
A Universal Way to Exploit Android PendingIntents in High-profile and System Apps
Owfuzz: WiFi Nightmare
ChaosDB: How We Hacked Databases of Thousands of Azure Customers
Skeletons in the App Sandbox: 5+ Ways to Escape
Achieving Linux Kernel Code Execution Through a Malicious USB Device
Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS and Beyond
2021: A Titan M Odyssey
Your Trash Kernel Bug, My Precious 0-day
Building Better CSIRTs Using Behavioral Psychology
How Your E-book Might Be Reading You: Exploiting EPUB Reading Systems
New Ways of IPV6 Scanning
How We Can Power Real Security Machine Learning Progress Through Open Algorithms and Benchmarks
The Black Hat Europe NOC (Network Operations Center) Report
Message in a Broken Bottle: Exploring the Linux IPC Attack Surface
Security Industry Call-to-Action: We Need a Cloud Vulnerability Database
Resting on Feet of Clay: Securely Bootstrapping OPC UA Deployments
ECMO: Rehost Embedded Linux Kernels via Peripheral Transplantation
BadMesher: New Attack Surfaces of Wi-Fi Mesh Network
A Universal Way to Exploit Android PendingIntents in High-profile and System Apps
Veni, No Vidi, No Vici: Attacks on ETW Blind EDR Sensors
Burning Bridges - Stopping Lateral Movement via the RPC Firewall
The Bad Guys Win β Analysis of 10,000 Magecart Vulnerabilities
"We Wait, Because We Know You" - Inside the Ransomware Negotiation Economics
AIModel-Mutator: Finding Vulnerabilities in TensorFlow
HTTP/2: The Sequel is Always Worse
Zen and the Art of Adversarial Machine Learning
Vulnerability Intelligence
Windows Defender - Demystifying and Bypassing ASR by Understanding the AV's Signatures
From Coordinated Disclosure to Cooperative Vulnerability When Dealing w/ Critical Software Stacks
ReCertifying Active Directory Certificate Services
TeamTNT: Explosive Cryptomining
Greetings from the '90s: Exploiting the Design of Industrial Controllers in Modern Settings
ChaosDB: How We Hacked Databases of Thousands of Azure Customers (rev)