Black Hat USA 2024
120 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Calling all Cybersecurity Pros! Join Us at Black Hat USA 2024 at the Mandalay Bay.
Black Hat USA 2024 - Short Reel
Black Hat USA 2024 - Vertical Reel
Startup Spotlight Competition at Black Hat
Practical LLM Security: Takeaways From a Year in the Trenches
Living off Microsoft Copilot
Keynote: Fireside Chat with Moxie Marlinspike
Locknote: Conclusions & Key Takeaways from Black Hat USA 2024
Project Zero: Ten Years of 'Make 0-Day Hard'
Black Hat USA 2024 Short Reel
Black Hat USA 2024 Highlights
Living off Microsoft Copilot- DEMO- invoice manipulation
Main Stage: Let Me Tell You a Story: Technology and the 4 Vs
A Framework for Evaluating National Cybersecurity Strategies
ACE Up the Sleeve: Hacking Into Apple's New USB-C Controller
Achilles' Heel of JS Engines: Exploiting Modern Browsers During WASM Execution
All Your Secrets Belong to Us: Leveraging Firmware Bugs to Break TEEs
Arbitrary Data Manipulation and Leakage with CPU Zero-Day Bugs on RISC-V
Are Your Backups Still Immutable, Even Though You Can't Access Them?
Attention Is All You Need for Semantics Detection: A Novel Transformer on Neural-Symbolic Approach
Becoming Cybersecurity Bilingual: Effective Communication for Hackers
Behind Enemy Lines: Engaging and Disrupting Ransomware Web Panels
Breaching AWS Accounts Through Shadow Resources
Break the Wall from Bottom: Automated Discovery of Protocol-Level Evasion Vulnerabilities
Bugs of Yore: A Bug Hunting Journey on VMware's Hypervisor
Bypassing ARM's Memory Tagging Extension with a Side-Channel Attack
Bytecode Jiu-Jitsu: Choking Interpreters to Force Execution of Malicious Bytecode
Compromising Confidential Compute, One Bug at a Time
Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!
Cracking the 5G Fortress: Peering Into 5G's Vulnerability Abyss
Crashing the Party: Vulnerabilities in RPKI Validation
Cyber Claims Outlook 2024: Trends, Threats, and Tomorrow's Challenges
Deep Backdoors in Deep Reinforcement Learning Agents
Driving Forces Behind Industry 4.0 and Digital Transformation for Critical Infrastructure
AI Safety and You: Perspectives on Evolving Risks and Impacts
Foreign Information Manipulation and Interference (Disinformation 2.0)
Flipping Bits: Your Credentials Are Certainly Mine
From Exploits to Forensics Evidence - Unraveling the Unitronics Attack
From HAL to HALT: Thwarting Skynet's Siblings in the GenAI Coding Era
From MLOps to MLOops - Exposing the Attack Surface of Machine Learning Platforms
From Weapon to Target: Quantum Computers Paradox
Gotta Cache Em All: Bending the Rules of Web Cache Exploitation
Hardening HSMs for Banking-Grade Crypto Wallets
Hook, Line and Sinker: Phishing Windows Hello for Business
ICS Risk: Strategies for Assessing Operational, Safety, Financial, and Cybersecurity Risks
Ignore Your Generative AI Safety Instructions. Violate the CFAA?
In Defense of Facts: Setting Standards Against Information Threats
Into the Inbox: Novel Email Spoofing Attack Patterns
Is Defense Winning?
Isolation or Hallucination? Hacking AI Infrastructure Providers for Fun and Weights
Keynote: Democracy's Biggest Year: The Fight for Secure Elections Around the World
Kicking in the Door to the Cloud: Exploiting Cloud Provider Vulnerabilities for Initial Access
Laser Beams & Light Streams: Building Affordable Light-Based Hardware Security Tooling
Let the Cache Cache and Let the WebAssembly Assemble: Knockin' on Chrome's Shell
Listen to the Whispers: Web Timing Attacks that Actually Work
Listen Up: Sonos Over-The-Air Remote Kernel Exploitation and Covert Wiretap
Living off Microsoft Copilot
Main Stage: From the Office of the CISO: Smarter, Faster, Stronger Security in the Age of AI
Main Stage: Solving the Cyber Hard Problems: A View into Problem Solving from the White House
Main Stage: Understanding and Reducing Supply Chain and Software Vulnerability Risks
Low Energy to High Energy: Hacking Nearby EV-Chargers Over Bluetooth
Locked Down but Not Out: Fighting the Hidden War in Your Bootloader
Moral Hazards and Ethical Considerations in Cyber-Insurance
Modern Anti-Abuse Mechanisms in Competitive Video Games
Modern Kill Chains: Real World SaaS Attacks and Mitigation Strategies
MaLDAPtive: Diving Deep Into LDAP Obfuscation, Deobfuscation & Detection
Microarchitecture Vulnerabilities: Past, Present, and Future
Navigating the Complex Challenges of Setting Up Efficient and Robust OT SOC Capabilities
Nope, S7ill Not Secure: Stealing Private Keys From S7 PLCs
One Hack to Rule Them All: Pervasive Account Takeovers in Integration Platforms
Ops! It is JTAG's Fault: Journey to Unlocking Automotive Grade IC
Overcoming State: Finding Baseband Vulnerabilities by Fuzzing Layer-2
OVPNX: 4 Zero-Days Leading to RCE, LPE and KCE (via BYOVD) Affecting Millions of OpenVPN Endpoints
PageJack: A Powerful Exploit Technique With Page-Level UAF
Predict, Prioritize, Patch: How Microsoft Harnesses LLMs for Security Response
Project 0xA11C: Deoxidizing the Rust Malware Ecosystem
PyLingual: A Python Decompilation Framework for Evolving Python Versions
Quantum Security: Myths, Facts, and Realities
Reinforcement Learning for Autonomous Resilient Cyber Defense
Relationships Matter: Reconstructing the Organizational and Social Structure of a Ransomware Gang
Remote, One-Click, Breaking through Smartphones via a Non Well-Known Remote Attack Surface
Secure Shells in Shambles
Securing Network Appliances: New Technologies and Old Challenges
Self-Hosted GitHub CI/CD Runners: Continuous Integration, Continuous Destruction
Skirting the Tornado: Essential Strategies for CISOs to Sidestep Government Fallout
SnailLoad: Anyone on the Internet Can Learn What You're Doing
Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls
Surveilling the Masses with Wi-Fi Positioning Systems
Surfacing a Hydra: Unveiling a Multi-Headed Chinese State-Sponsored Campaign
Super Hat Trick: Exploit Chrome and Firefox Four Times
Strengthen Cyber-security by Leveraging Cyber-Insurance
Stop! Sandboxing Exploitable Functions and Modules Using In-Kernel Machine Learning
Swipe Left for Identity Theft: An Analysis of User Data Privacy Risks on Location-based Dating Apps
Terrapin Attack: Breaking SSH Channel Integrity by Sequence Number Manipulation
That Gambling Site? It's Fueled by Chinese Organized Crime
The 10th Annual Black Hat USA Network Operations Center (NOC) Report
The Fundamentals of Cyber-Insurance
The Way to Android Root: Exploiting Your GPU on Smartphone
The Hidden Treasure of Crash Reports?
The GCP Jenga Tower: Hacking Millions of Google's Servers With a Single Package (and more)