Black Hat Courses

Your Traffic Doesn't Lie - Unmasking Supply Chain Attacks via Application Behaviour

Discover BEAM, an open source tool that detects supply chain attacks through web traffic analysis, achieving 95%+ accuracy without endpoint agents or code changes.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange

Uncover critical vulnerabilities in HTTP/2 server push and signed HTTP exchange that bypass Same-Origin Policy protections, enabling cross-site scripting and cookie manipulation attacks.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Threat Modeling and Constitutional Law

Explore how constitutional law fails at threat modeling, examining legal system vulnerabilities and civil liberty implications in today's evolving political landscape.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Chasing Shadows - Chronicles of Counter-Intelligence from the Citizen Lab

Discover how Citizen Lab exposed global surveillance campaigns targeting journalists and activists, revealing state cyber espionage and mercenary spyware operations worldwide.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Securing America - Readiness, Response, and Resilience for Critical Infrastructure Defense

Discover CISA's operational approach to cybersecurity as national security, exploring critical infrastructure protection strategies and collaborative defense methods.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Breaking Out of The AI Cage - Pwning AI Providers with NVIDIA Vulnerabilities

Uncover critical NVIDIA Container Toolkit vulnerabilities that enable container escapes and compromise AI infrastructure across major cloud platforms.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Autonomous Timeline Analysis and Threat Hunting - An AI Agent for Timesketch

Discover how AI agents autonomously analyze digital forensic timelines and hunt threats in massive log datasets, revolutionizing incident response efficiency.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

AI Enterprise Compromise - 0click Exploit Methods

Discover how AI assistants can be exploited for enterprise compromise through 0-click attacks, prompt injection vulnerabilities, and mitigation strategies using the GenAI Attack Matrix.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Vaulted Severance - Your Secrets Are Now Outies

Discover critical RCE vulnerabilities in HashiCorp Vault and CyberArk Conjur with live demonstrations of remote attacks on default configurations and learn detection/prevention methods.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Conjuring Hardware Failures to Breach CPU Privilege Boundaries

Discover how to exploit synthesized hardware failures to bypass CPU security boundaries and achieve privilege escalation through software-only attacks.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

From Slide Rules to GenAI - Musings of a Graybeard Public Servant on What's Changing, What's Not, and What Should

Explore cybersecurity evolution from analog to AI era, examining global digital vulnerabilities, supply chain risks, and strategies for building resilient infrastructure systems.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Enhancing Command Line Classification with Benign Anomalous Data

Discover how to revolutionize command line security by combining anomaly detection with LLMs to reduce false positives and enhance malicious command classification accuracy.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

FACADE - High-Precision Insider Threat Detection Using Contrastive Learning

Discover Google's FACADE AI system for detecting insider threats with 99.99% accuracy using contrastive learning and self-supervised ML on billions of daily events.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Insider Threats Packing Their Bags With Corporate Data

Discover indicators to identify employees exfiltrating data before leaving, addressing challenges in cloud environments and personal vs. business traffic separation.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Hand Me Your Secret, MCU - Microarchitectural Timing Attacks on Microcontrollers Are Practical

Unveiling novel microarchitectural timing side-channel attacks on microcontrollers, challenging the belief that MCUs are immune to such vulnerabilities due to their simple architecture.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk