Black Hat USA 2022

100 talks · 2022 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• "No Mr. Cyber Threat!" - A Psychological Approach To Managing the Fail-to-Challenge Vulnerability 2022
• (Long) Dragon Tails – Measuring Dependence on International Vulnerability Research 2022
• A Dirty Little History: Bypassing Spectre Hardware Defenses to Leak Kernel Data 2022
• A Fully Trained Jedi, You Are Not 2022
• A Journey Into Fuzzing WebAssembly Virtual Machines 2022
• A New Trend for the Blue Team: Using a Symbolic Engine to Detect Evasive Forms of Malware/Ransomware 2022
• AAD Joined Machines - The New Lateral Movement 2022
• AEPIC Leak: Architecturally Leaking Uninitialized Data from the Microarchitecture 2022
• All Your GNN Models and Data Belong to Me 2022
• Android Universal Root: Exploiting Mobile GPU / Command Queue Drivers 2022
• Attack on Titan M, Reloaded: Vulnerability Research on a Modern Security Chip 2022
• Attacks From a New Front Door in 4G & 5G Mobile Networks 2022
• Automatic Protocol Reverse Engineering 2022
• Backdooring and Hijacking Azure AD Accounts by Abusing External Identities 2022
• Better Privacy Through Offense: How To Build a Privacy Red Team 2022
• Blasting Event-Driven Cornucopia: WMI-based User-Space Attacks Blind SIEMs and EDRs 2022
• Breaking Firmware Trust From Pre-EFI: Exploiting Early Boot Phases 2022
• Breaking the Chrome Sandbox with Mojo 2022
• BrokenMesh: New Attack Surfaces of Bluetooth Mesh 2022
• Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling 2022
• Bug Bounty Evolution: Not Your Grandson's Bug Bounty 2022
• Bug Hunters Dump User Data. Can They Keep it? Well They're Keeping it Anyway. 2022
• Calculating Risk in the Era of Obscurity: Reading Between the Lines of Security Advisories 2022
• CastGuard: Mitigating Type Confusion in C++ 2022
• Catch Me If You Can: Deterministic Discovery of Race Conditions with Fuzzing 2022
• Cautious: A New Exploitation Method! No Pipe but as Nasty as Dirty Pipe 2022
• Charged by an Elephant – An APT Fabricating Evidence to Throw You In Jail 2022
• Chasing Your Tail With a Raspberry Pi 2022
• Controlling the Source: Abusing Source Code Management Systems 2022
• Custom Processing Unit: Tracing and Patching Intel Atom Microcode 2022
• Demystifying Key Stretching and PAKEs 2022
• Devils Are in the File Descriptors: It Is Time To Catch Them All 2022
• DirectX: The New Hyper-V Attack Surface 2022
• Dive Into Apple IO80211Family Vol. 2 2022
• DNSSEC Downgrade Attacks 2022
• Do Not Trust the ASA, Trojans! 2022
• Déjà Vu: Uncovering Stolen Algorithms in Commercial Products 2022
• eBPF ELFs JMPing Through the Windows 2022
• ElectroVolt: Pwning Popular Desktop Apps While Uncovering New Attack Surface on Electron 2022
• Elevating Kerberos to the Next Level 2022
• ELF Section Docking: Revisiting Stageless Payload Delivery 2022
• Eliminating Triage Intermediaries for Zero-day Exploits Using a Decentralised Payout Protocol 2022
• Fault-Injection Detection Circuits: Design, Calibration, Validation and Tuning 2022
• From Hackathon to Hacked: Web3's Security Journey 2022
• Ghost in the Wireless, iwlwifi Edition 2022
• Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal 2022
• Go With the Flow: Enforcing Program Behavior Through Syscall Sequences and Origins 2022
• Google Reimagined a Phone. It was Our Job to Red Team and Secure it. 2022
• Harm Reduction: A Framework for Effective & Compassionate Security Guidance 2022
• How Firefox Uses In-process Sandboxing To Protect Itself From Exploitable Libraries 2022
• How Supercomputer-scale Neural Network Models Apply to Defensive Cybersecurity Problems 2022
• Human or Not: Can You Really Detect the Fake Voices? 2022
• I Am Whoever I Say I Am: Infiltrating Identity Providers Using a 0Click Exploit 2022
• IAM The One Who Knocks 2022
• In Need of 'Pair' Review: Vulnerable Code Contributions by GitHub Copilot 2022
• Industroyer2: Sandworm's Cyberwarfare Targets Ukraine's Power Grid Again 2022
• Internal Server Error: Exploiting Inter-Process Communication in SAP's HTTP Server 2022
• Invisible Finger: Practical Electromagnetic Interference Attack on Touchscreen-based Devices 2022
• Is WebAssembly Really Safe? -- Wasm VM Escape and RCE Vulnerabilities Have Been Found in New Way 2022
• Keynote: Black Hat at 25: Where Do We Go from Here? 2022
• Kubernetes Privilege Escalation: Container Escape == Cluster Admin? 2022
• Let's Dance in the Cache - Destabilizing Hash Table on Microsoft IIS 2022
• Leveraging the Apple ESF for Behavioral Detections 2022
• Living Off the Walled Garden: Abusing the Features of the Early Launch Antimalware Ecosystem 2022
• Locknote: Conclusions and Key Takeaways from Black Hat USA 2022 2022
• Malware Classification With Machine Learning Enhanced by Windows Kernel Emulation 2022
• Monitoring Surveillance Vendors: A Deep Dive into In-the-Wild Android Full Chains in 2021 2022
• New Memory Forensics Techniques to Defeat Device Monitoring Malware 2022
• No One Is Entitled to Their Own Facts, Except in Cybersecurity? 2022
• Oops..! I Glitched It Again! How to Multi-Glitch the Glitching-Protections on ARM TrustZone-M 2022
• Perimeter Breached! Hacking an Access Control System 2022
• Pre-Stuxnet, Post-Stuxnet: Everything Has Changed, Nothing Has Changed 2022
• Process Injection: Breaking All macOS Security Layers With a Single Vulnerability 2022
• Pwning Cloud Vendors with Untraditional PostgreSQL Vulnerabilities 2022
• RCE-as-a-Service: Lessons Learned from 5 Years of Real-World CI/CD Pipeline Compromise 2022
• Real 'Cyber War': Espionage, DDoS, Leaks, and Wipers in the Russian Invasion of Ukraine 2022
• Ret2page: The Art of Exploiting Use-After-Free Vulnerabilities in the Dedicated Cache 2022
• Return to Sender - Detecting Kernel Exploits with eBPF 2022
• RollBack - A New Time-Agnostic Replay Attack Against the Automotive Remote Keyless Entry Systems 2022
• Scaling the Security Researcher to Eliminate OSS Vulnerabilities Once and For All 2022
• Smishmash - Text Based 2fa Spoofing Using OSINT, Phishing Techniques and a Burner Phone 2022
• sOfT7: Revealing the Secrets of Siemens S7 PLCs 2022
• Stalloris: RPKI Downgrade Attack 2022
• Talent Need Not Apply: Tradecraft and Objectives of Job-themed APT Social Engineering 2022
• The 8th Annual Black Hat USA NOC Report 2022
• The Battle Against the Billion-Scale Internet Underground Industry: Advertising Fraud Detection 2022
• The COW (Container On Windows) Who Escaped the Silo 2022
• The Cyber Safety Review Board: Studying Incidents to Drive Systemic Change 2022
• The Growth of Global Election Disinformation: The Role Methodology of Government-linked Cyber Actors 2022
• The Journey of Hunting In-the-Wild Windows LPE 0day 2022
• The Open Threat Hunting Framework: Enabling Organizations to Build, Operationalize, and Scale Threat 2022
• To Flexibly Tame Kernel Execution With Onsite Analysis 2022
• Trace Me if You Can: Bypassing Linux Syscall Tracing 2022
• TruEMU: An Extensible, Open-Source, Whole-System iOS Emulator 2022
• Trust Dies in Darkness: Shedding Light on Samsung's TrustZone Keymaster Design 2022
• Trying to Be Everything to Everyone: Let’s Talk About Burnout 2022
• Unlimited Results: Breaking Firmware Encryption of ESP32-V3 2022
• UWB Real Time Locating Systems: How Secure Radio Communications May Fail in Practice 2022
• Whip the Whisperer: Simulating Side Channel Leakage 2022
• XMPP Stanza Smuggling or How I Hacked Zoom 2022