Black Hat Courses

Secure Shell Protocol Vulnerabilities and Novel Attacks

Dive into SSH protocol vulnerabilities and novel attacks, exploring implementation flaws and security risks through practical demonstrations with the sshamble open-source tool.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Securing Network Appliances - New Technologies and Old Challenges

Explore network appliance security evolution, from traditional Linux-based systems to modern approaches using Docker and Golang, while examining vulnerabilities and best practices for robust firmware protection.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Self-Hosted GitHub CI/CD Runners - Understanding Pipeline Security and Attack Prevention

Discover critical security vulnerabilities in self-hosted GitHub CI/CD runners and learn defensive strategies against pipeline poisoning attacks that could compromise entire software supply chains.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Remote One-Click Breaking Through Smartphones via Non Well-Known Attack Surface

Uncover critical vulnerabilities in carrier-based video calling systems that enable remote smartphone exploitation, focusing on attack surfaces and security implications for mobile communications.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Relationships Matter: Reconstructing the Organizational and Social Structure of a Ransomware Gang

Explore the organizational dynamics of the Conti ransomware group through economic and complex systems theories. Discover how chat log analysis reveals hierarchical structures, relationships, and resilience factors within this Russian cybercriminal organ…

• YouTube
• 27 minutes
• On-Demand
• Free Video

Reinforcement Learning for Autonomous Resilient Cyber Defense

Explore UK Defence research on Reinforcement Learning for automated cyber defense decision-making, including Multi-Agent RL approaches and deep RL with Graph Neural Networks for resilient defense against sophisticated machine-speed attacks.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Threat Modeling and Constitutional Law

Explore how constitutional law fails at threat modeling, examining legal system vulnerabilities and civil liberty implications in today's evolving political landscape.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Chasing Shadows - Chronicles of Counter-Intelligence from the Citizen Lab

Discover how Citizen Lab exposed global surveillance campaigns targeting journalists and activists, revealing state cyber espionage and mercenary spyware operations worldwide.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Securing America - Readiness, Response, and Resilience for Critical Infrastructure Defense

Discover CISA's operational approach to cybersecurity as national security, exploring critical infrastructure protection strategies and collaborative defense methods.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Advanced Active Directory to Entra ID Lateral Movement Techniques

Explore advanced lateral movement techniques from Active Directory to Entra ID, bypassing authentication and MFA in hybrid environments with undocumented methods.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Exploiting DNS for Stealthy User Tracking

Discover how statistical analysis of DNS traffic enables precise device tracking and user fingerprinting across networks, plus learn defensive countermeasures.

• YouTube
• 28 minutes
• On-Demand
• Free Video

From Prompts to Pwns - Exploiting and Securing AI Agents

Explore AI agent security vulnerabilities through real-world exploits and learn defensive strategies for enterprise agentic systems from NVIDIA's AI Red Team experts.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Safe Harbor or Hostile Waters - Unveiling the Hidden Perils of the TorchScript Engine in PyTorch

Uncover critical security vulnerabilities in PyTorch's TorchScript engine that challenge the safety of weights_only=True, revealing RCE risks in AI applications.

• YouTube
• 37 minutes
• On-Demand
• Free Video

QUACK - Hindering Deserialization Attacks via Static Duck Typing

Discover QUACK, a framework that automatically protects applications from deserialization attacks using static duck typing to limit exploitable code gadgets by 97%.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Out of Control - How KCFG and KCET Redefine Control Flow Integrity in the Windows Kernel

Explore how KCFG and KCET revolutionize Windows kernel security through hypervisor-based control flow integrity, reshaping exploitation techniques and defensive strategies.

• YouTube
• 38 minutes
• On-Demand
• Free Video