Black Hat USA 2021
90 talks · 2021 · indexed by Breach Arc Archive. Links open each talk on YouTube.
Browse with filters →- 20+ Ways to Bypass Your macOS Privacy Mechanisms 2021
- 5G IMSI Catchers Mirage5G IMSI Catchers Mirage 2021
- A Broken Chain: Discovering OPC UA Attack Surface and Exploiting the Supply Chain 2021
- A Hole in the Tube: Uncovering Vulnerabilities in Critical Infrastructure of Healthcare Facilities 2021
- A New Class of DNS Vulnerabilities Affecting Many DNS-as-Service Platforms 2021
- A Survivor-Centric, Trauma-Informed Approach to Stalkerware 2021
- Action Bias and the Two Most Dangerous Words in Cybersecurity 2021
- Alcatraz: A Practical Hypervisor Sandbox to Prevent Escapes from the KVM/QEMU and KVM-Based MicroVMs 2021
- ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication 2021
- An Offensive Approach to Analyzing Huge and Complex Big Data Infrastructures 2021
- Anatomy of Native IIS Malware 2021
- Another Road Leads to the Host: From a Message to VM Escape on Nvidia vGPU 2021
- Applying AI as a Service to Targeted Phishing & Defending Against AI Generated Attacks 2021
- Arm'd and Dangerous 2021
- Back in Black Hat: The 7th Annual Black Hat USA NOC Report 2021
- Bam the BAM - Electromagnetic Fault Injection & Automotive Systems 2021
- Breaking Network Segregation Using Esoteric Command & Control Channels 2021
- Breaking Secure Bootloaders 2021
- Breaking the Isolation: Cross-Account AWS Vulnerabilities 2021
- Bridging Security Infrastructure Between the Data Center and AWS Lambda 2021
- Bypassing Windows Hello for Business and Pleasure 2021
- Can You Hear Me Now? Remote Eavesdropping Vulnerabilities in Mobile Messaging Applications 2021
- Can You Roll Your Own SIEM? 2021
- Certified Pre-Owned: Abusing Active Directory Certificate Services 2021
- Cloudy with a Chance of APT: Novel Microsoft 365 Attacks in the Wild 2021
- CnCHunter: An MITM-Approach to Identify Live CnC Servers 2021
- Come to the Dark Side, We Have Apples: Turning macOS Management Evil 2021
- Crashing Your Way to Medium-IL: Exploiting the PDB Parser for Privilege Escalation 2021
- DBREACH: Database Reconnaissance and Exfiltration via Adaptive Compression Heuristics 2021
- Deepfake Social Engineering: Creating a Framework for Synthetic Media Social Engineering 2021
- Defeating a Secure Element with Multiple Laser Fault Injections 2021
- Demystify AI Security Products With a Universal Pluggable XAI Translator 2021
- Disinformation At Scale: Using GPT-3 Maliciously for Information Operations 2021
- Diving in to Spooler: Discovering LPE and RCE Vulnerabilities in Windows Printer 2021
- Do You Speak My Language? Make Static Analysis Engines Understand Each Other 2021
- ERROR: BadAlloc! - Broken Memory Allocators Led to Millions of Vulnerable IoT & Embedded Devices (2) 2021
- Everything has Changed in iOS 14, but Jailbreak is Eternal 2021
- Exploiting Windows COM/WinRT ServicesExploiting Windows COM/WinRT Services 2021
- Exploring & Exploiting Zero-Click Remote Interfaces of Modern Huawei Smartphones 2021
- Fixing a Memory Forensics Blind Spot: Linux Kernel Tracing 2021
- FragAttacks: Breaking Wi-Fi through Fragmentation and Aggregation 2021
- Generating YARA Rules by Classifying Malicious Byte Sequences 2021
- Government-Mandated Front Doors?: A Global Assessment of Legalized Government Access to Data 2021
- Greybox Program Synthesis: A New Approach to Attack Dataflow Obfuscation 2021
- Hack Different: Pwning iOS 14 with Generation Z Bug 2021
- Hacking a Capsule Hotel - Ghost in the Bedrooms 2021
- hAFL1: Our Journey of Fuzzing Hyper-V and Discovering a 0-Day 2021
- How I Used a JSON Deserialization 0day to Steal Your Money on the Blockchain 2021
- HPE iLO5 Firmware Security - Go Home Cryptoprocessor, You're Drunk! 2021
- HTTP/2: The Sequel is Always Worse 2021
- Internal Affairs: Hacking File System Access from the Web 2021
- IPvSeeYou: Exploiting Leaked Identifiers in IPv6 for Street-Level Geolocation 2021
- Keynote: Hacking the Cybersecurity Puzzle 2021
- Keynote: Secretary Alejandro Mayorkas 2021
- Keynote: Supply Chain Infections and the Future of Contactless Deliveries 2021
- Legal Pitfalls to Avoid in Security Incidents 2021
- Let's Attack Let's Encrypt 2021
- Locknote: Conclusions and Key Takeaways from Day 1 2021
- MFA-ing the Un-MFA-ble: Protecting Auth Systems' Core Secrets 2021
- Mobius Band: Explore Hyper-V Attack Interface through Vulnerabilities Internals 2021
- Next-Gen DFIR: Mass Exploits & Supplier Compromise 2021
- Over the Air Baseband Exploit: Gaining Remote Code Execution on 5G Smartphones 2021
- PCIe Device Attacks: Beyond DMA. Exploiting PCIe Switches, Messages and Errors 2021
- President's Cup Cyber Competition: Finding the Best Cyber Talent in the US Government 2021
- ProxyLogon is Just the Tip of the Iceberg: A New Attack Surface on Microsoft Exchange Server! 2021
- Put in One Bug and Pop Out More: An Effective Way of Bug Hunting in Chrome 2021
- Qualcomm WiFi: Infinity War 2021
- Reverse Engineering the M1 2021
- Rope: Bypassing Behavioral Detection of Malware with Distributed ROP-Driven Execution 2021
- Safeguarding UEFI Ecosystem: Firmware Supply Chain is Hard(coded) 2021
- Securing Open Source Software - End-to-end, At massive scale, Together 2021
- Security Analysis of CHERI ISASecurity Analysis of CHERI ISA 2021
- Sleight of ARM: Demystifying Intel Houdini 2021
- Smashing the ML Stack for Fun and Lawsuits 2021
- Symbexcel: Bringing the Power of Symbolic Execution to the Fight Against Malicious Excel 4 Macros 2021
- The Case for a National Cybersecurity Safety Board 2021
- The Dark Age of Memory Corruption Mitigations in the Spectre Era 2021
- The Devil is in the GAN: Defending Deep Generative Models Against Adversarial Attacks 2021
- The Kitten that Charmed Me: The 9 Lives of a Nation State Attacker 2021
- The Mass Effect: How Opportunistic Workers Drift into Cybercrime 2021
- The Ripple Effect: Building a Diverse Security Research Team 2021
- Timeless Timing Attacks 2021
- Typhoon Mangkhut: One-click Remote Universal Root Formed with Two Vulnerabilities 2021
- Uncovering Planned Obsolescence Practices in Robotics and What This Means for Cybersecurity 2021
- Whoops, I Accidentally Helped Start the Offensive Intel Branch of a Foreign Intel Service 2021
- Wibbly Wobbly, Timey Wimey – What's Really Inside Apple's U1 Chip 2021
- Windows Heap-backed Pool: The Good, the Bad, and the Encoded 2021
- With Friends Like eBPF, Who Needs Enemies? 2021
- Your Software IS/NOT Vulnerable: CSAF, VEX, and the Future of Advisories 2021
- Zero - The Funniest Number in Cryptography 2021