Black Hat USA 2023
106 talks · 2023 · indexed by Breach Arc Archive. Links open each talk on YouTube.
Browse with filters →- 34231 WhyCyberInsuranceShouldbeYourSOCsNewBestFriend v2 2023
- A Manufacturer's Post-Shipment Approach to Fend-Off IoT Malware in Home Appliances 2023
- A Pain in the NAS: Exploiting Cloud Connectivity to PWN Your NAS 2023
- A Q&A with a16z's Zane Lackey: Unlocking the Secrets of Cybersecurity Entrepreneurship 2023
- A SSLippery Slope: Unraveling the Hidden Dangers of Certificate Misuse 2023
- AI Assisted Decision Making of Security Review Needs for New Features 2023
- All Cops Are Broadcasting: Breaking TETRA After Decades in the Shadows 2023
- All You Need is Guest 2023
- Apple's Predicament: NSPredicate Exploits on iOS and macOS 2023
- Bad io_uring: A New Era of Rooting for Android 2023
- Badge of Shame: Breaking into Secure Facilities with OSDP 2023
- Becoming a Dark Knight: Adversary Emulation Demonstration for ATT&CK Evaluations 2023
- BingBang: Hacking Bing.com (and much more) with Azure Active Directory 2023
- Bridging Cyber and Insurance 2023
- BTD: Unleashing the Power of Decompilation for x86 Deep Neural Network Executables 2023
- Chained to Hit: Discovering New Vectors to Gain Remote and Root Access in SAP Enterprise Software 2023
- Civil Cyber Defense-Defend Non-Profits as They Combat Human Trafficking/Subvert Authoritarian Regime 2023
- Close Encounters of the Advanced Persistent Kind: Leveraging Rootkits for Post-Exploitation 2023
- CoDe16; 16 Zero-Day Vulnerabilities Affecting CODESYS Framework Leading to Remote Code Execution 2023
- CodeQL: Also a Powerful Binary Analysis Engine 2023
- Compromising LLMs: The Advent of AI Malware 2023
- Cookie Crumbles: Unveiling Web Session Integrity Vulnerabilities 2023
- Core Escalation: Unleashing the Power of Cross-Core Attacks on Heterogeneous System 2023
- Defender-Pretender: When Windows Defender Updates Become a Security Risk 2023
- Devising and Detecting Phishing: Large Language Models vs. Smaller Human Models 2023
- Dismantling DDoS - Lessons in Scaling 2023
- Dive into Apple UserFS (Userspace Filesystem) 2023
- Diversity Microtalks: Perspectives on Creating Change 2023
- Diving into Windows Remote Access Service for Pre-Auth Bugs 2023
- Does Public Disclosure of Vulnerabilities Affect Hacker Participation in Bug Bounty Programs? 2023
- EDR = Erase Data Remotely, By Cooking An Unforgettable (Byte) Signature Dish 2023
- Endoscope: Unpacking Android Apps with VM-Based Obfuscation 2023
- Entrepreneur's Dilemma: Managing Growth and Dedication to Product Quality 2023
- Evading Logging in the Cloud: Bypassing AWS CloudTrail 2023
- Evasive Maneuvers: Trends in Phishing Evasion & Anti-Evasion 2023
- Exploiting OPC-UA in Every Possible Way: Practical Attacks Against Modern OPC-UA Architectures 2023
- Fast, Ever-Evolving Defenders: The Resilience Revolution 2023
- Forward Focus: Perspectives on AI, Hype, and Security 2023
- From Dead Data to Digestion: Extracting Windows Fibers for Your Digital Forensics Diet 2023
- HARry Parser and the Cursed Tracker: Breaking the Spell of Online Data Collection 2023
- Houston, We Have a Problem: Analyzing the Security of Low Earth Orbit Satellites 2023
- How NOT to Train Your Hack Bot: Dos and Don'ts of Building Offensive GPTs 2023
- I Was Tasked With Enrolling Millions of Developers in 2FA - Here's What Happened 2023
- I Watched You Roll the Die: Unparalleled RDP Monitoring Reveal Attackers' Tradecraft 2023
- Idea to Realization: Cybersecurity Entrepreneurship 2023
- Identifying and Reducing Permission Explosion in AWS: A Graph-Based and Analytical Approach 2023
- Input Output + Syslog (iO+S): Obtaining Data From Locked iOS Devices via Live Monitoring 2023
- International Threat Actors are Targeting Children to Steal Money from Banks & Major Corporations 2023
- IRonMAN: InterpRetable Incident Inspector Based ON Large-Scale Language Model and Association miNing 2023
- Jailbreaking an Electric Vehicle in 2023 or What It Means to Hotwire Tesla's x86-Based Seat Heater 2023
- Kemba Walden Discusses the National Cybersecurity Strategy and Workforce Efforts 2023
- Keynote: Guardians of the AI Era: Navigating the Cybersecurity Landscape of Tomorrow 2023
- Kill Latest MPU-based Protections in Just One Shot: Targeting All Commodity RTOSes 2023
- Know Thy Enemy: The Taxonomies That Meta Uses to Map the Offensive Privacy Space 2023
- Lemons and Liability: Cyber Warranties as an Experiment in Software Regulation 2023
- Lessons Learned from the KA-SAT Cyberattack: Response, Mitigation and Information Sharing 2023
- Leverage and Demonstrate Value with your Cyber Insurance Renewal 2023
- Lifting the Fog of War - Monitoring, Identifying and Mitigating MS-RPC Based Threats 2023
- Lost Control-Breaking Hardware-Assisted Kernel Control-Flow Integrity with Page-Oriented Programming 2023
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages 2023
- Mac-ing Sense of the 3CX Supply Chain Attack: Analysis of the macOS Payloads 2023
- MaginotDNS: Attacking the Boundary of DNS Caching Protection 2023
- Make KSMA Great Again: The Art of Rooting Android Devices by GPU MMU Features 2023
- Making and Breaking NSA's Codebreaker Challenge 2023
- Me and My Evil Digital Twin: The Psychology of Human Exploitation by AI Assistants 2023
- Mirage: Cyber Deception Against Autonomous Cyber Attacks 2023
- MoustachedBouncer: AitM-Powered Surveillance via Belarus ISPs 2023
- mTLS: When Certificate Authentication is Done Wrong 2023
- Nothing but Net: Leveraging macOS's Networking Frameworks to Heuristically Detect Malware 2023
- npm and Sigstore: Provenance Comes to the World's Largest OSS Ecosystem 2023
- ODDFuzz: Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing 2023
- One Drive, Double Agent: Clouded OneDrive Turns Sides 2023
- Oven Repair (The Hardware Hacking Way) 2023
- Over the Air, Under the Radar: Attacking and Securing the Pixel Modem 2023
- Physical Attacks Against Smartphones 2023
- Poisoning Web-Scale Training Datasets is Practical 2023
- Radiation Spikes Detected in Chernobyl During Russian Invasion Show Possible Evidence of Fabrication 2023
- Reflections on Trust in the Software Supply Chain 2023
- Reverse Engineering the Customized Pointer Authentication Hardware Implementation on Apple M1 2023
- Risks of AI Risk Policy: Five Lessons 2023
- Route to Bugs: Analyzing the Security of BGP Message Parsing 2023
- Second Breakfast: Implicit and Mutation-Based Serialization Vulnerabilities in .NET 2023
- Shuffle Up and Deal: Analyzing the Security of Automated Card Shufflers 2023
- Single Instruction Multiple Data Leaks in Cutting-edge CPUs, AKA Downfall 2023
- Small Leaks, Billions Of Dollars: Practical Cryptographic Exploits That Undermine Crypto Wallets 2023
- Smashing the State Machine: The True Potential of Web Race Conditions 2023
- Sure, Let Business Users Build Their Own. What Could Go Wrong? 2023
- Synthetic Trust: Exploiting Biases at Scale 2023
- The 9th Annual Black Hat USA Network Operations Center (NOC) Report 2023
- The Accidental Discovery of a New Vulnerability in Google's OAuth Implementation 2023
- The Hat Trick: Exploit Chrome Twice from Runtime to JIT 2023
- The Integration Cyber Security and Insurance: The Journey of Cysurance 2023
- The Living Dead: Hacking Mobile Face Recognition SDKs with Non-Deepfake Attacks 2023
- The Most Dangerous Codec in the World: Finding and Exploiting Vulnerabilities in H.264 Decoders 2023
- The Yandex Leak: How a Russian Search Giant Uses Consumer Data 2023
- Three New Attacks Against JSON Web Tokens 2023
- TSSHOCK: Breaking MPC Wallets and Digital Custodians for $BILLION$ Profit 2023
- Uncovering Azure's Silent Threats: A Journey into Cloud Vulnerabilities 2023
- Unsafe At Any Speed: CISA's Plan to Foster Tech Ecosystem Security 2023
- Video-Based Cryptanalysis: Recovering Cryptographic Keys from Device Using Video of Power LED 2023
- Weaponizing Plain Text: ANSI Escape Sequences as a Forensic Nightmare 2023
- What Does an LLM-Powered Threat Intelligence Program Look Like? 2023
- What We Can Learn from Ukraine's Cyber Defenders about Building a More Resilient Future 2023
- When a Zero Day and Access Keys Collide in the Cloud: Responding to the SugarCRM 0-Day Vulnerability 2023
- Windows Agentless C2: (Ab)using the MDM Client Stack 2023
- Zero-Touch-Pwn: Abusing Zoom's Zero Touch Provisioning for Remote Attacks on Desk Phones 2023