Black Hat Courses

CloudLeak - DNN Model Extractions from Commercial MLaaS Platforms

Explore DNN model extraction vulnerabilities in cloud-based machine learning services, examining security risks and potential countermeasures for MLaaS platforms.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Hunting Invisible Salamanders - Cryptographic Insecurity with Attacker-Controlled Keys

Explore cryptographic vulnerabilities in authenticated encryption when attackers control keys. Learn about potential risks and mitigation strategies for secure implementation.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

When Lightning Strikes Thrice - Breaking Thunderbolt 3 Security

Explore Thunderspy attacks that compromise Thunderbolt security, revealing vulnerabilities in device authentication and DMA protection across Thunderbolt 1, 2, and 3 interfaces.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

NoJITsu - Locking Down JavaScript Engines

Explore data-only attacks on JavaScript engines and learn defensive strategies to secure JIT compilers against modern threats in web browsers and interactive applications.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Building a Vulnerability Disclosure Program That Works for Election Vendors and Hackers

Explore the creation of effective vulnerability disclosure programs for election vendors, balancing security needs with researcher collaboration to enhance voting system integrity.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Uncommon Sense - Detecting Exploits with Novel Hardware Performance Counters and ML Magic

Explore novel hardware performance counters and machine learning techniques to detect advanced exploits like speculative execution, Rowhammer, and ROP, enhancing cybersecurity defenses against evolving threats.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Policy Implications of Faulty Cyber Risk Models and How to Fix Them

Explore data-driven analysis of cyber incidents, their economic impact, and policy implications. Learn to improve risk models for better security governance and third-party risk management.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Room for Escape - Scribbling Outside the Lines of Template Security

Explore vulnerabilities in Content Management Systems, focusing on template security issues and potential exploits in collaboration platforms. Learn about safe mode attacks and object data validation.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Breaking Brains, Solving Problems - Lessons Learned from 2 Years of Setting Puzzles for InfoSec Pros

Explore problem-solving strategies, cognitive biases, and improvement techniques for InfoSec professionals, drawing insights from puzzle-setting experiences and real-world applications.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Exploiting Excel Online

Explore Excel Online vulnerabilities, focusing on integer overflow in fnConcatenate formula. Learn about chaining formulas for remote code execution and potential security implications.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Dive into Apple IO80211FamilyV2

Explore Apple's IO80211FamilyV2 Wi-Fi architecture, its features, and potential vulnerabilities. Learn about reverse engineering, attack surfaces, and the latest security concerns in macOS Catalina.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Reversing the Root - Identifying the Exploited Vulnerability in 0-Days Used In-The-Wild

Explore techniques for identifying root cause vulnerabilities in exploited 0-days, including binary patch diffing, exploit minimization, and reverse engineering, to enhance cybersecurity analysis and threat mitigation.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Experimenting with Real-Time Event Feeds

Explore innovative approaches to real-time event feeds in cybersecurity, challenging traditional SIEM methods and addressing high-volume data management for improved threat detection.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Fooling Windows Through Superfetch

Explore Windows Superfetch service's privacy implications, forensic potential, and methods to manipulate its predictive behavior for enhanced system security and user privacy.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Hacking the Voter - Lessons from a Decade of Russian Military Operations

Explore Russian military's decade-long election interference strategies, examining GRU tactics and the role of information in shaping international relations and outmaneuvering tactical defenses.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk