Free courses from frontend to fullstack and AI
Learn AI, Data Science & Business — Earn Certificates That Get You Hired
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore a groundbreaking security presentation that delves into a novel attack surface in Safari, focusing on vulnerabilities in system libraries like audio, video, and font. Learn how researchers have discovered a way to exploit a single Web Audio vulnerability to gain control over Safari, bypassing traditional security measures. Understand the challenges posed by Safari's built-in heap isolation mechanism and how it affects the exploitation of out-of-bounds writing vulnerabilities in system modules. Gain insights into the innovative techniques used to overcome these obstacles and the potential implications for web browser security. Presented by JunDong Xie at Black Hat Asia, this 27-minute talk offers a deep dive into cutting-edge browser exploitation research that could reshape our understanding of Safari's attack surface.
Syllabus
New Attack Surface in Safari: Using Just One Web Audio Vulnerability to Rule Safari
Taught by
Black Hat