Black Hat Courses

Illegitimate Data Protection Requests - To Delete or Address?

Explore innovative cyber-attacks exploiting data protection requests. Learn about a new approach using malware disguised as legitimate requests, its potential impact, and strategies for organizations to address this emerging threat.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Breaking Theoretical Limits - The Gap Between Virtual NICs and Physical Network Cards

Explore vulnerabilities in virtual NICs by breaking IP packet length limits, comparing with physical network cards, and uncovering security gaps in Hyper-V's network modules.

• YouTube
• 23 minutes
• On-Demand
• Free Video

TrustZone-M Security Vulnerabilities in Microcontroller TEEs - Lessons Learned

Explore TrustZone-M security vulnerabilities in Arm Cortex-M MCUs. Uncover isolation weaknesses, bypass techniques, and potential exploits in microcontroller Trusted Execution Environments.

• YouTube
• 39 minutes
• On-Demand
• Free Video

The Hack@DAC Story - Learnings from Organizing the World's Largest Hardware Hacking Competition

Explore insights from organizing Hack@DAC, the world's largest hardware hacking competition. Learn about unique aspects, value for the security community, and key takeaways for industry, academia, and researchers.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Privacy Detective - Sniffing Out Your Data Leaks for Android

Discover techniques to detect privacy-infringing behaviors in Android apps. Learn about hooking system functions, decrypting TLS traffic, and automating privacy data transmission analysis.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Debug7 - Leveraging a Firmware Modification Attack for Remote Debugging of Siemens S7 PLCs

Explore a novel method for debugging Siemens S7 PLC firmware, exploiting vulnerabilities to modify and control the SWCPU remotely. Gain insights into potential security risks and future research implications.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Bypassing macOS Privacy Mechanisms - The Final Chapter

Explore macOS privacy vulnerabilities, bypass techniques, and Apple's security improvements. Learn about new exploits and mitigations in recent macOS versions through demos and expert insights.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Identifying Syscall-Guard Variables for Data-Only Attacks

Innovative technique for detecting critical variables in programs, enabling identification of potential data-only attack vulnerabilities and enhancing cybersecurity defenses against sophisticated threats.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Faults in Our Bus - Novel Bus Fault Attack to Break Trusted Execution Environments in Embedded Systems

Uncover novel bus fault attacks on Trusted Execution Environments in embedded systems, exploring vulnerabilities in SoC system buses and their implications for IoT security and TEE implementations.

• YouTube
• 32 minutes
• On-Demand
• Free Video

You Shall Not PASS - Analyzing an NSO iOS Spyware Sample

Dive into the analysis of NSO's BLASTPASS iOS spyware, exploring its exploitation of PassKit files and iMessage vulnerabilities. Learn about advanced malware techniques and their impact on device security.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Voice Phishing Syndicates Unmasked - An In-Depth Investigation and Exposure

Investigación detallada sobre sindicatos de estafa telefónica en Corea del Sur, analizando sus tácticas, malware y métodos de ataque evolucionados para exponer sus operaciones sofisticadas.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Millions of Patient Records at Risk - The Perils of Legacy Protocols

Explore DICOM protocol vulnerabilities, their impact on patient data security, and methods to bypass controls, based on internet-wide research and vendor statements.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

A Security RISC? The State of Microarchitectural Attacks on RISC-V

Systematic investigation of microarchitectural attack surface on 64-bit RISC-V CPUs, exploring vulnerabilities and security implications as RISC-V architecture gains popularity in commercial processors.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

How I Learned to Stop Worrying and Build a Modern Detection & Response Program

Discover a framework for building effective, modern detection and response programs. Learn key capabilities and strategies to enhance your cybersecurity approach.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Security Through Transparency - Scaling Your Customer Trust Program

Discover how transparency can scale your Customer Trust Program, enhancing security assurance and sales cycles with limited resources through public wikis, document bundling, and Q&A databases.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk