Black Hat Courses

Azure's Weakest Link - How API Connections Spill Secrets

Uncover critical Azure API Connection vulnerabilities that enable cross-tenant attacks and secret extraction with minimal privileges through Logic Apps and Power platforms.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Breaking Out of The AI Cage - Pwning AI Providers with NVIDIA Vulnerabilities

Uncover critical NVIDIA Container Toolkit vulnerabilities that enable container escapes and compromise AI infrastructure across major cloud platforms.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Autonomous Timeline Analysis and Threat Hunting - An AI Agent for Timesketch

Discover how AI agents autonomously analyze digital forensic timelines and hunt threats in massive log datasets, revolutionizing incident response efficiency.

• YouTube
• 37 minutes
• On-Demand
• Free Video

AI Enterprise Compromise - 0click Exploit Methods

Discover how AI assistants can be exploited for enterprise compromise through 0-click attacks, prompt injection vulnerabilities, and mitigation strategies using the GenAI Attack Matrix.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Vaulted Severance - Your Secrets Are Now Outies

Discover critical RCE vulnerabilities in HashiCorp Vault and CyberArk Conjur with live demonstrations of remote attacks on default configurations and learn detection/prevention methods.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Conjuring Hardware Failures to Breach CPU Privilege Boundaries

Discover how to exploit synthesized hardware failures to bypass CPU security boundaries and achieve privilege escalation through software-only attacks.

• YouTube
• 42 minutes
• On-Demand
• Free Video

From Slide Rules to GenAI - Musings of a Graybeard Public Servant on What's Changing, What's Not, and What Should

Explore cybersecurity evolution from analog to AI era, examining global digital vulnerabilities, supply chain risks, and strategies for building resilient infrastructure systems.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Enhancing Command Line Classification with Benign Anomalous Data

Discover how to revolutionize command line security by combining anomaly detection with LLMs to reduce false positives and enhance malicious command classification accuracy.

• YouTube
• 36 minutes
• On-Demand
• Free Video

FACADE - High-Precision Insider Threat Detection Using Contrastive Learning

Discover Google's FACADE AI system for detecting insider threats with 99.99% accuracy using contrastive learning and self-supervised ML on billions of daily events.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Consent and Compromise - Abusing Entra OAuth for Fun and Access to Internal Microsoft Applications

Discover critical OAuth misconfigurations in Microsoft Entra ID that enabled unauthorized access to 20+ internal Microsoft applications, exposing sensitive data and admin privileges.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Your Traffic Doesn't Lie - Unmasking Supply Chain Attacks via Application Behaviour

Discover BEAM, an open source tool that detects supply chain attacks through web traffic analysis, achieving 95%+ accuracy without endpoint agents or code changes.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange

Uncover critical vulnerabilities in HTTP/2 server push and signed HTTP exchange that bypass Same-Origin Policy protections, enabling cross-site scripting and cookie manipulation attacks.

• YouTube
• 25 minutes
• On-Demand
• Free Video

A Run a Day Won't Keep the Hacker Away - Inference Attacks in Fitness Tracking Social Networks

Explore inference attacks on fitness tracking social networks, revealing vulnerabilities in endpoint privacy zones and discussing implications for user privacy and location protection.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

A New Attack Interface in Java Applications

Explores a newly discovered attack surface in Java applications, focusing on JDBC vulnerabilities in cloud-native systems and customized database management services.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Alice in Kernel Land - Lessons Learned From the eBPF Rabbit Hole

Explore eBPF technology for kernel-level programming, runtime code loading, and performance optimization. Learn key concepts, security implications, and practical applications in this deep dive.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk