Conference Talks

Black Hat

Zombie POODLE, GOLDENDOODLE, and How TLSv1.3 Can Save Us All

Research into CBC padding-oracle testing and exploitation, including the POODLE variant GOLDENDOODLE and its faster session-ID disclosure.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Black Hat

Secure Boot Under Attack - Simulation to Enhance Fault Attacks & Defenses

Explore how fault injection and glitch attacks compromise secure boot, and how simulation helps uncover and defend against vulnerabilities in embedded-system binaries.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

Mainframe Z-OS Reverse Engineering and Exploit Development

Explores reverse engineering and exploit development techniques for researching and hacking IBM z/OS mainframes.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Black Hat

Return of Bleichenbacher's Oracle Threat - ROBOT

A practical analysis of the ROBOT attack, a revived Bleichenbacher oracle vulnerability in TLS implementations.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Black Hat

How TRITON Disrupted Safety Systems & Changed the Threat Landscape of Industrial Control Systems

A case study of TRITON malware and its unprecedented attack on industrial safety systems, revealing how it reshaped the industrial control systems threat landscape.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Black Hat

The UEFI Firmware Rootkits - Myths and Reality

Examines whether disclosed UEFI vulnerabilities can be used to build real-world firmware rootkits.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Black Hat

Go Get My - Vulnerabilities - An In-Depth Analysis of Go Language Runtime and the New Class of Vulnerabilities It Introduces

Analyze the Go runtime and the new class of vulnerabilities introduced as Go scales from embedded applications to high-end software.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

Hello From the Other Side - SSH Over Robust Cache Covert Channels in the Cloud

Demonstrates a practical cache covert channel for exfiltrating data between isolated cloud virtual machines on the same physical host without privileges.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Black Hat

Bypassing Secure Boot Using Fault Injection

Explores how fault injection can bypass Secure Boot when early ROM and bootloader stages lack exploitable logical flaws.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Black Hat

Rogue7 - Rogue Engineering-Station Attacks on S7 Simatic PLCs

A Black Hat briefing demonstrating attacks against Siemens S7 PLCs through the engineering workstation, exposing vulnerabilities in supposedly secure industrial control protocols.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Black Hat

The Adventures of AV and the Leaky Sandbox

A demonstrated data-exfiltration technique uses cloud-connected antivirus sandboxes to move information from highly secure, Internet-restricted enterprise endpoints.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Black Hat

Betraying the BIOS - Where the Guardians of the BIOS are Failing

An examination of weaknesses in UEFI firmware security, including the growing threat of implants from attackers and state-sponsored actors.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

Vulnerability Intelligence

Explore vulnerability intelligence through vfeed.io data, focusing on prioritizing weaknesses, exploited vulnerabilities, attack techniques, and mitigation.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Black Hat

Cybersecurity Meets Reality

A security officer discusses how cybersecurity challenges and practices play out in real-world organizational environments.

• YouTube
• 11 minutes
• Self-Paced
• Conference Talk

Black Hat

Patching Loopholes - Finding Backdoors in Applications

Explores how hidden backdoors can undermine application security and expose transactions and sensitive data.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk