Black Hat Courses

Light Commands - Hacking Voice Assistants with Lasers

Explore how lasers can manipulate voice-activated IoT devices, revealing potential security vulnerabilities in smart home technology and microphone systems.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Design Pitfalls in Commercial Mini-Programs on Android and iOS

Explore security vulnerabilities in app-in-app paradigms for Android and iOS, focusing on mini-programs' design flaws and potential risks to user privacy and data protection.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

A New Hope - The One Last Chance to Save Your SSD Data

Explore SSD data recovery techniques, uncovering hidden management methods and confidential controller information to maximize chances of retrieving lost data from solid-state drives.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Quantum Security and Cryptography - You Are - Probably - Doing it Wrong

Explore quantum cryptography beyond basic qubit exchange, delving into exotic applications and quantum effects for securing information that traditional cryptography cannot achieve.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

My Ticks Don't Lie - New Timing Attacks for Hypervisor Detection

Explore new timing attacks for hypervisor detection, crucial for sandbox evasion in malware analysis. Learn about hardware-assisted virtualization vulnerabilities and low-level measurement techniques.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

It's Not Finished - The Evolving Maturity in Ransomware Operations

Explore the evolving sophistication of ransomware operations, focusing on European targets, attack strategies, and the lifecycle of Rival ransomware. Learn about emerging trends and future threats in cybersecurity.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Hermes Attack - Steal DNN Models in AI Privatization Deployment Scenarios

Unveils a novel attack exploiting PCIe bus vulnerabilities to reconstruct DNN models in AI privatization scenarios, discussing challenges, techniques, and countermeasures.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

CDPwn - Taking Over Millions of Enterprise-Things with Layer 2 Zero-Days

Unveiling critical zero-day vulnerabilities in layer 2 protocols, demonstrating their impact on enterprise device and network security, and exploring potential exploitation techniques.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

What the Log - So Many Events, So Little Time

Explore Windows Event Log for efficient adversary detection, leveraging automation and MITRE ATT&CK framework to enhance cybersecurity monitoring and response capabilities.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Conclusions and Key Takeaways from Day 1

Insightful discussion on pressing InfoSec issues, including COVID-19 impact, security breaches, misinformation, and digital asset protection, featuring Black Hat Review Board members.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Biometrics and Privacy - Time to Faceoff or is that FaceApp

Explore biometric data usage, privacy legislation, and implications in APAC and globally. Learn about government and private sector practices, legal frameworks, and individual rights regarding biometric information.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Attacking and Defending Machine Learning Applications of Public Cloud

Explore techniques for attacking and defending machine learning applications in public cloud environments, focusing on visual classification vulnerabilities and countermeasures.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Identifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale

Explore techniques for identifying vulnerabilities in embedded firmware, focusing on multi-binary analysis, dynamic and static approaches, and scalable solutions for IoT device security.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Redback - Advanced Static Binary Injection

Explore advanced static binary injection techniques to insert external code into executables, modifying run-time behavior. Learn from experts about this powerful yet underutilized method.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Store-to-Leak Forwarding - There and Back Again

Explore store-to-leak forwarding attacks, their evolution since Meltdown, and implications for data security in modern processors. Learn about new vulnerabilities and mitigation strategies.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk