Black Hat Courses

A Broken Chain - Discovering OPC UA Attack Surface and Exploiting the Supply Chain

Examine OPC UA attack surfaces, exploit parser and object-setter flaws in industrial SDKs, and trace their impact across connected control systems.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Can You Roll Your Own SIEM

A case study of building a cloud-native SIEM with batch and streaming log ingestion, near-real-time alerting, SQL search, and lower operating costs.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

5G IMSI Catchers Mirage

Investigates whether 5G security eliminates IMSI catcher attacks through protocol analysis and experiments revealing remaining tracking and downgrade vulnerabilities.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Electromagnetic Fault Injection & Automotive Systems

A live demonstration of electromagnetic fault injection to bypass bootloader security on an automotive ECU.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Embedding a Human-Centric Approach Into a Global Cyber Security Program

A human-centric cybersecurity keynote that challenges the weakest-link myth and reframes training, systems design, and incident learning around how people behave.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Come to the Dark Side, We Have Apples - Turning macOS Management Evil

Explores how attackers abuse macOS MDM and Jamf management platforms for command and control, persistence, and credential theft.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Hacking a Capsule Hotel - Ghost in the Bedrooms

A case study of chaining six vulnerabilities in a capsule hotel's connected bedroom system to control beds, lights, fans, and multiple rooms.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Deepfake Social Engineering - Creating a Framework for Synthetic Media Social Engineering

A framework for understanding deepfake-enabled social engineering attacks and building human-centric enterprise countermeasures.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

IPvSeeYou - Exploiting Leaked Identifiers in IPv6 for Street-Level Geolocation

Learn how IPv6 EUI-64 identifiers and Wi-Fi MAC-address data can be fused to geolocate residential routers at street-level precision.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

FragAttacks - Breaking Wi-Fi through Fragmentation and Aggregation

A technical presentation on FragAttacks, showing how Wi-Fi fragmentation, aggregation, and implementation flaws enable packet injection and frame exfiltration.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Generating YARA Rules by Classifying Malicious Byte Sequences

An interpretable convolutional model turns malicious byte sequences into YARA rules with optimized detection and low false positives.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Applying AI as a Service to Targeted Phishing and Defending Against AI Generated Attacks

Examines how AI-as-a-service enables convincing targeted phishing and explores technical and policy defenses against AI-generated attacks.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Zero - The Funniest Number in Cryptography

An examination of how zero values create BLS signature verification bugs and enable splitting-zero attacks across cryptographic libraries.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Timeless Timing Attacks

Learn how timeless timing attacks overcome network jitter to extract secrets remotely through concurrent requests, including cross-site web and Wi-Fi authentication scenarios.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Securing the Public - Who Is in Charge?

Examines cybersecurity as a public responsibility through transparency, accountability, regulation, safer systems, procurement, and democratic oversight.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk