Black Hat Europe 2023
47 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Black Hat Europe 2023: Why Attend the World's Premier Technical Cybersecurity Conference
Black Hat Europe 2023 Highlights
Black Hat Europe 2023 Highlights
A Security RISC? The State of Microarchitectural Attacks on RISC-V
REDIScovering HeadCrab - A Technical Analysis of a Novel Malware and the Mind Behind It
TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers
Millions of Patient Records at Risk: The Perils of Legacy Protocols
Security Through Transparency: Scaling Your Customer Trust Program
How I Learned to Stop Worrying and Build a Modern Detection & Response Program
AutoSpill: Zero Effort Credential Stealing from Mobile Password Managers
Orchestrate This! Kubernetes Rootkit
Hacking Your Documentation: Who Should WTFM?
Reviving JIT Vulnerabilities: Unleashing the Power of Maglev Compiler Bugs on Chrome Browser
Attacking NPUs of Multiple Platforms
TunnelCrack: Leaking VPN Traffic by Manipulating Routing Tables
LogoFAIL: Security Implications of Image Parsing During System Boot
Evils in the Sparse Texture Memory: Exploit Kernel Based on Undefined Behaviors of Graphic APIs
A Decade After Stuxnet: How Siemens S7 is Still an Attacker's Heaven
Deleting Your Domain? Preventing Data Leaks at TLD Scale
Breaking Theoretical Limits: The Gap Between Virtual NICs and Physical Network Cards
Illegitimate Data Protection Requests - To Delete or to Address?
Unmasking APTs: An Automated Approach for Real-World Threat Attribution
How We Taught ChatGPT-4 to Break mbedTLS AES With Side-Channel Attacks
HODOR: Reducing Attack Surface on Node.js via System Call Limitation
VoBERT: Unstable Log Sequence Anomaly Detection: Introducing Vocabulary-Free BERT
Indirect Prompt Injection Into LLMs Using Images and Sounds
Hiding in the Clouds: Abusing Azure DevOps Services to Bypass Microsoft Sentinel Analytic Rules
Sweet QuaDreams or Nightmare Before Christmas? Dissecting an iOS 0-Day
Vulnerabilities in Old Third-Party Software Components- Importance of Having SBoM for IoT/OT Devices
Breaching the Perimeter via Cloud Synchronized Browser Settings
Off The Record - Weaponizing DHCP DNS Dynamic Updates
One Million ASUS Routers Under Control: Exploiting ASUS DDNS to MITM Admin Credentials
Kidnapping Without Hostages: Virtual Kidnapping and the Dark Road Ahead
When The Front Door Becomes a Backdoor: The Security Paradox of OSDP
Something Rotten in the State of Data Centers
The Pool Party You Will Never Forget: New Process Injection Techniques Using Windows Thread Pools
Through the Looking Glass: How Open Source Projects See Vulnerability Disclosure
New Techniques for Split-Second DNS Rebinding
Collide+Power: The Evolution of Software-based Power Side-Channels Attacks
A World-View of IP Spoofing in L4 Volumetric DoS Attacks - and a Call to Enable BCP38
The Magnetic Pull of Mutable Protection: Worked Examples in Cryptographic Agility
My Invisible Adversary: Burnout
The Black Hat Europe Network Operations Center (NOC) Report
Keynote: Industrialising Cyber Defence in an Asymmetric World
Keynote: My Lessons from the Uber Case
Locknote: Conclusions and Key Takeaways from Day 1
Locknote: Conclusions and Key Takeaways from Day 2