Zero-Day Vulnerabilities Courses and Certifications

DEFCONConference

RingHopper: From User-Land to SMM - A Journey Through UEFI Vulnerabilities

Delve into the discovery of RingHopper, a critical UEFI vulnerability affecting billions of devices, exploring exploitation techniques and elevation methods across Windows and Linux systems.

• YouTube
• 40 minutes
• On-Demand
• Free Video

DEFCONConference

When Windows Defender Updates Become a Security Risk

Dive into Windows Defender's architecture and signature update vulnerabilities, exploring how unprivileged users can exploit security flaws to compromise Windows systems and manipulate EDR functionality.

• YouTube
• 39 minutes
• On-Demand
• Free Video

John Hammond

Hackers Have Gone Too Far - WinRAR Zero-Day Vulnerability Exploitation

Discover how cybercriminals exploit WinRAR zero-day vulnerabilities and learn about the latest RomCom malware attacks threatening users worldwide.

• YouTube
• 24 minutes
• On-Demand
• Free Video

media.ccc.de

TETRA Radio Security: Uncovering Secret Cryptography in Law Enforcement Communications

Unveiling TETRA cryptography: Journey through radio jailbreaking, reverse-engineering, and exploiting vulnerabilities to analyze the proprietary algorithms used in critical communication systems worldwide.

• YouTube
• 48 minutes
• On-Demand
• Free Video

NahamSec

Finding 0days in Enterprise Web Applications

Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Black Hat

In-Field Emulation and Fuzzing of PLCs to Uncover the Next Zero-Day Threat in Industrial Control Systems

Explore innovative techniques for uncovering vulnerabilities in Industrial Control Systems through in-field emulation and fuzzing of PLCs, focusing on proactive security measures beyond network-level exploits.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Black Hat

CDPwn - Taking Over Millions of Enterprise-Things with Layer 2 Zero-Days

Unveiling critical zero-day vulnerabilities in layer 2 protocols, demonstrating their impact on enterprise device and network security, and exploring potential exploitation techniques.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Popular Approaches to Preventing Code Injection Attacks are Dangerously Wrong

Explores limitations of current code injection prevention methods and introduces Name Space Layout Randomization (NSLR) as a novel approach to secure Java applications against known and zero-day vulnerabilities.

• YouTube
• 46 minutes
• On-Demand
• Free Video

DEFCONConference

BitUnlocker - Leverage Windows Recovery to Extract BitLocker Secrets

Uncover critical vulnerabilities in Windows Recovery Environment that bypass BitLocker encryption, revealing how attackers can extract protected data through 0-day exploits.

• YouTube
• 38 minutes
• On-Demand
• Free Video

fwd:cloudsec

Trust Me Bro: Preexisting Trust is the New Initial Access Vector

Delve into AWS security vulnerabilities and attack techniques, focusing on trust relationships, IAM roles, and service misconfigurations. Learn defensive strategies against emerging cloud security threats.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Black Hat

Exposing the Dark Corners of SAP - 4 Years of Threat Intelligence Data Analyzed

Dive into an analysis of 4 years of threat intelligence data revealing how threat actors target SAP applications, vulnerability trends, and why ERP security deserves more attention from security professionals.

• YouTube
• 38 minutes
• On-Demand
• Free Video

media.ccc.de

Operation Triangulation: Uncovering a Sophisticated Zero-Click Attack on iPhones

Unveiling a sophisticated zero-click iOS attack chain: discovery, analysis, and implications of Operation Triangulation, a highly advanced spyware targeting researchers' iPhones.

• YouTube
• 58 minutes
• On-Demand
• Free Video

DEFCONConference

The Hack, the Crash and Two Smoking Barrels - Automotive Cybersecurity Challenges

Dive into automotive cybersecurity challenges through real-world stories and demonstrations, exploring vehicle architecture vulnerabilities and industry practices while witnessing live ECU hacking and security testing scenarios.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Black Hat

Remote One-Click Breaking Through Smartphones via Non Well-Known Attack Surface

Uncover critical vulnerabilities in carrier-based video calling systems that enable remote smartphone exploitation, focusing on attack surfaces and security implications for mobile communications.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Breaking ML Services: Finding Zero-Days in Azure Machine Learning

Uncover critical vulnerabilities in Azure Machine Learning, including credential leaks, information disclosure, and persistence techniques. Learn assessment methods for cloud-based MLaaS platforms and shared responsibility models.

• YouTube
• 1 hour 6 minutes
• On-Demand
• Free Video