Black Hat USA 2020

89 talks · 2020 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• A Decade After Stuxnet's Printer Vulnerability: Printing is Still the Stairway to Heaven 2020
• A Framework for Evaluating and Patching the Human Factor in Cybersecurity 2020
• A Hacker's Guide to Reducing Side-Channel Attack Surfaces Using Deep-Learning 2020
• A Little Less Speculation, a Little More Action: Deep Dive into Fuchsia's Mitigations for CPU Side.. 2020
• About Directed Fuzzing and Use-After-Free: How to Find Complex & Silent Bugs? 2020
• All You Ever Wanted to Know about the AMD Platform Security Processor and were Afraid to Emulate... 2020
• An Unauthenticated Journey to Root: Pwning Your Company's Enterprise Software Servers 2020
• Beyond Root: Custom Firmware for Embedded Mobile Chipsets 2020
• Black-Box Laser Fault Injection on a Secure Memory 2020
• Breaking Brains, Solving Problems: Lessons Learned from 2 Years of Setting puzzles for InfoSec Pros 2020
• Breaking Samsung's Root of Trust: Exploiting Samsung S10 Secure Boot 2020
• Breaking VSM by Attacking SecureKernel 2020
• Building a Vulnerability Disclosure Program that Works for Election Vendors and Hackers 2020
• Building Cyber Security Strategies for Emerging Industries in Sub Saharan Africa 2020
• Carrying our Insecurities with Us: The Risks of Implanted Medical Devices in Secure Spaces 2020
• CloudLeak: DNN Model Extractions from Commercial MLaaS Platforms 2020
• Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities 2020
• Decade of the RATs – Custom Chinese Linux Rootkits for Everyone 2020
• Demigod: The Art of Emulating Kernel Rootkits 2020
• Demystifying Modern Windows Rootkits 2020
• Detecting Access Token Manipulation 2020
• Detecting Fake 4G Base Stations in Real Time 2020
• Discovering Hidden Properties to Attack the Node.js Ecosystem 2020
• Dive into Apple IO80211FamilyV2 2020
• EdTech - The Ultimate APT 2020
• Election Security: Securing America's Future 2020
• Emulating Samsung's Baseband for Security Testing 2020
• Engineering Empathy: Adapting Software Engineering Principles and Process to Security 2020
• Escaping Virtualized Containers 2020
• EtherOops: Exploring Practical Methods to Exploit Ethernet Packet-in-Packet Attacks 2020
• Experimenting with Real-Time Event Feeds 2020
• Exploiting Kernel Races through Taming Thread Interleaving 2020
• FASTCash and INJX_Pure: How Threat Actors Use Public Standards for Financial Fraud 2020
• Finding New Bluetooth Low Energy Exploits via Reverse Engineering Multiple Vendors' Firmwares 2020
• Fooling Windows through Superfetch 2020
• Hacking Public Opinion 2020
• Hacking the Supply Chain – The Ripple20 Vulnerabilities Haunt Tens of Millions of Critical Devices 2020
• Hacking the Voter: Lessons from a Decade of Russian Military Operations 2020
• Healthscare – An Insider's Biopsy of Healthcare Application Security 2020
• Heroku Abuse Operations: Hunting Wolves in Sheep's Clothing 2020
• Hiding Process Memory via Anti-Forensic Techniques 2020
• How I Created My Clone Using AI - Next-Gen Social Engineering 2020
• Hunting Invisible Salamanders: Cryptographic (in)Security with Attacker-Controlled Keys 2020
• I calc'd Calc - Exploiting Excel Online 2020
• IMP4GT: IMPersonation Attacks in 4G NeTworks 2020
• Improving Mental Models of End-to-End Encrypted Communication 2020
• Industrial Protocol Gateways Under Analysis 2020
• iOS Kernel PAC, One Year Later 2020
• IoT Skimmer: Energy Market Manipulation through High-Wattage IoT Botnets 2020
• Kr00k: Serious Vulnerability Affected Encryption of Billion+ Wi-Fi Devices 2020
• Lamphone: Real-Time Passive Reconstruction of Speech Using Light Emitted from Lamps 2020
• Lateral Movement & Privilege Escalation in GCP; Compromise Organizations without Dropping an Implant 2020
• Making an Impact from India to the Rest of the World by Building & Nurturing Women Infosec Community 2020
• Mind Games: Using Data to Solve for the Human Element 2020
• Multiple Bugs in Multi-Party Computation: Breaking Cryptocurrency's Strongest Wallets 2020
• My Cloud is APT's Cloud: Investigating and Defending Office 365 2020
• Needing the DoH: The Ongoing Encryption and Centralization of DNS 2020
• NoJITsu: Locking Down JavaScript Engines 2020
• Office Drama on macOS 2020
• Operation Chimera - APT Operation Targets Semiconductor Vendors 2020
• OTRazor: Static Code Analysis for Vulnerability Discovery in Industrial Automation Scripts 2020
• Plundervolt: Flipping Bits from Software without Rowhammer 2020
• Policy Implications of Faulty Cyber Risk Models and How to Fix Them 2020
• Portable Document Flaws 101 2020
• Practical Defenses Against Adversarial Machine Learning 2020
• Remote Timing Attacks on TPMs, AKA TPM-Fail 2020
• Repurposing Neural Networks to Generate Synthetic Media for Information Operations 2020
• Reverse Engineering the Tesla Battery Management System to increase Power Available 2020
• Reversing the Root: Identifying the Exploited Vulnerability in 0-days Used In-The-Wild 2020
• Room for Escape: Scribbling Outside the Lines of Template Security 2020
• Routopsy: Modern Routing Protocol Vulnerability Analysis and Exploitation 2020
• Ruling StarCraft Game Spitefully -- Exploiting the Blind Spot of AI-Powered Game Bots 2020
• Security Research on Mercedes-Benz: From Hardware to Car Control 2020
• Spectra: Breaking Separation Between Wireless Chips 2020
• Stealthily Access Your Android Phones: Bypass the Bluetooth Authentication 2020
• Stopping Snake Oil with Smaller Healthcare Providers: Addressing Security with Actionable Plans 2020
• Stress Testing Democracy Election Integrity During A Global Pandemic 2020
• Superman Powered by Kryptonite: Turn the Adversarial Attack into Your Defense Weapon 2020
• The Dark Side of the Cloud - How a Lack of EMR Security Controls Helped Amplify the Opioid Crisis 2020
• The Devils in the Dependency Data Driven Software Composition Analysis 2020
• The Paramedic's Guide to Surviving Cybersecurity 2020
• Uncommon Sense: Detecting Exploits with Novel Hardware Performance Counters and ML Magic 2020
• Virtually Private Networks 2020
• We Went to Iowa and All We Got were These Felony Arrest Records 2020
• Web Cache Entanglement: Novel Pathways to Poisoning 2020
• When Lightning Strikes Thrice: Breaking Thunderbolt 3 Security 2020
• When TLS Hacks You 2020
• Whispers Among the Stars: A Practical Look at Perpetrating Satellite Eavesdropping Attacks 2020
• You have No Idea Who Sent that Email: 18 Attacks on Email Sender Authentication 2020