Black Hat Courses

How Supercomputer-Scale Neural Network Models Apply to Defensive Cybersecurity Problems

Explore how large-scale neural networks revolutionize cybersecurity, enabling custom explanations of attacker behavior and improved threat detection with limited data. Learn to leverage public models like GPT-3 for security applications.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Demystifying Key Stretching and PAKEs

Explore key stretching and PAKEs: their history, best practices, and applications in encrypted cloud services. Learn to create toy algorithms and understand their importance in cybersecurity.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

DNSSEC Downgrade Attacks

Explore DNSSEC vulnerabilities and cryptographic agility risks, revealing how adversaries can manipulate DNS responses to compromise security and prevent DNSSEC validation.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

The Battle Against the Billion-Scale Internet Underground Industry - Advertising Fraud Detection

Explore the escalating war between internet advertising fraud and anti-fraud efforts. Analyze typical underground industry gangs and their evolving tactics in this high-stakes technological confrontation.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Trying to Be Everything to Everyone - Let’s Talk About Burnout

Explore burnout in computer security, its causes, and mitigation strategies. Learn to set boundaries, manage anxiety, and maintain passion in a high-stress industry facing significant workforce shortages.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

From Hackathon to Hacked - Web3's Security Journey

Explore Web3 and blockchain security challenges, examining the risks of emerging tech, high-stakes environments, and immutable transactions. Learn about current vulnerabilities and potential solutions.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Dive Into Apple IO80211Family Vol. 2

Explore Apple's Wi-Fi kernel extensions, uncovering new vulnerabilities and attack surfaces in the ever-evolving landscape of iOS security. Gain insights into the ongoing cat-and-mouse game of bug fixes and emerging threats.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Charged by an Elephant - An APT Fabricating Evidence to Throw You in Jail

Explore ModifiedElephant's decade-long operation, incriminating activists through planted evidence. Uncover the concerning ties to commercial surveillance and multiple regional threat actors targeting victims.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Fault-Injection Detection Circuits - Design, Calibration, Validation and Tuning

Explores Intel's tunable replica circuit for detecting fault-injection attacks in processors, focusing on design, implementation, and effectiveness in preventing timing failures and unauthorized code execution.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

The Cyber Safety Review Board - Studying Incidents to Drive Systemic Change

Explore the Cyber Safety Review Board's analysis of the Log4j vulnerability, key findings, and recommendations for industry and government to enhance cybersecurity and drive systemic change.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

EBPF ELFs JMPing Through the Windows

Explore eBPF for Windows: capabilities, security model, design, and attack surface. Uncover vulnerabilities, witness fuzzing demos, and discuss exploitation challenges in Windows Protected Process.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Backdoor Investigation and Incident Response - From Zero to Profit

Uncover how attackers breached an online gaming company, exploited a database backdoor, and manipulated transactions. Learn detection methods and incident response strategies for similar cyber attacks.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Codema Attack - Controlling Your Smart Home Through Dangling Management Channels

Análisis de vulnerabilidades en dispositivos IoT populares y desarrollo de CGuard, un nuevo marco de control de acceso para proteger a los usuarios finales de amenazas en canales de gestión.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

SMS PVA Services Fueled by Compromised Supply-Chain Mobile Botnets

Uncover the operations of SMS PVA services and mobile botnets, exploring device infection methods, threat actor misuse, and the implications for supply chain security in mobile ecosystems.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Cooper Knows the Shortest Stave - Finding 134 Bugs in the Binding Code of Scripting Languages

Innovative approach to finding bugs in scripting languages through cooperative mutation, combining script code and native input modifications to uncover hidden vulnerabilities in binding code.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk