Black Hat Courses

Safeguarding UEFI Ecosystem - Firmware Supply Chain is Hardcoded

Explore UEFI ecosystem complexities, supply chain vulnerabilities, and challenges in firmware security. Learn about patch cycles, fix verification, and the impact of vulnerabilities on the entire ecosystem.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

The Mass Effect - How Opportunistic Workers Drift into Cybercrime

Explores the impact of large groups supporting cybercrime, focusing on an informal online market. Analyzes behaviors, motivations, and challenges of actors involved in botnet operations and their drift into criminal activities.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Qualcomm WiFi - Infinity War

Explore critical security vulnerabilities in Qualcomm WiFi chips, focusing on 0-click remote attacks and their potential impact on millions of smartphone users worldwide.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Security Analysis of CHERI ISA

Explore CHERI ISA's memory-protection features for C/C++, its security guarantees, and how it enhances memory safety in legacy code through architectural and compiler innovations.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Reverse Engineering the M1

Explore Apple's M1 chip architecture, including ARM variant quirks, memory access issues, and the AMX vector instruction set. Gain insights into reverse engineering proprietary hardware.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Whoops, I Accidentally Helped Start the Offensive Intel Branch of a Foreign Intel Service

Insider's cautionary tale about inadvertently aiding a foreign intelligence service. Explores red flags missed and offers guidance for intelligence professionals transitioning to civilian roles.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Clocking On

Explore the fascinating world of securing time distribution on the Internet, delving into atomic clocks and the challenges of maintaining a consensus on "current" time.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Lessons From 11 Billion Breached Records

Insights from analyzing 11 billion breached records, revealing causes and ongoing impacts of data breaches. An eye-opening look at cybersecurity challenges and their far-reaching consequences.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Investigating and Breaking Widevine on QTEE

Explore vulnerabilities in Widevine DRM on Qualcomm's QTEE, uncovering security flaws and exploiting them to extract sensitive data from trusted storage. Learn advanced techniques in reverse engineering and exploit development.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Hiding Objects from Computer Vision by Exploiting Correlation Biases

Exploiting correlation biases in computer vision systems to create adversarial images that hide objects from detection, using examples like dogs and frisbees vs. stop signs and pizza.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

X-in-the-Middle - Attacking Fast Charging Piles and Electric Vehicles

Explore security vulnerabilities in DC fast charging protocols for electric vehicles, uncovering potential risks and attack vectors in the rapidly evolving EV charging infrastructure.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Apple Neural Engine Internal - From ML Algorithm to HW Registers

Explore the inner workings of Apple's Neural Engine, from machine learning algorithms to hardware registers, with insights into FaceID's neural network and SEP firmware security.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

How Did the Adversaries Abusing the Bitcoin Blockchain Evade Our Takeover

Explore how cybercriminals leverage Bitcoin blockchain for C&C communication, evading traditional defenses. Learn about this innovative malware tactic and its implications for cybersecurity.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

A New Era of One-Click Attacks - How to Break Install-Less Apps

Explore novel attack methods against Install-Less apps, including vulnerabilities in Apple App Clips, Google PWA, Google Instant App, and QuickApp. Learn about emerging security risks in this new app paradigm.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Mem2Img - Memory-Resident Malware Detection via Convolution Neural Network

Innovative framework using convolutional neural networks to detect memory-resident malware, overcoming limitations of traditional antivirus software and handcrafted feature-based approaches.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk