Black Hat USA 2024

113 talks · 2024 · indexed by Breach Arc Archive. Links open each talk on YouTube.

Browse with filters →

15 Ways to Break Your Copilot 2024
A Framework for Evaluating National Cybersecurity Strategies 2024
ACE Up the Sleeve: Hacking Into Apple's New USB-C Controller 2024
Achilles' Heel of JS Engines: Exploiting Modern Browsers During WASM Execution 2024
AI Safety and You: Perspectives on Evolving Risks and Impacts 2024
All Your Secrets Belong to Us: Leveraging Firmware Bugs to Break TEEs 2024
Arbitrary Data Manipulation and Leakage with CPU Zero-Day Bugs on RISC-V 2024
Are Your Backups Still Immutable, Even Though You Can't Access Them? 2024
Attacking Samsung Galaxy A* Boot Chain, and Beyond 2024
Attention Is All You Need for Semantics Detection: A Novel Transformer on Neural-Symbolic Approach 2024
Becoming Cybersecurity Bilingual: Effective Communication for Hackers 2024
Behind Enemy Lines: Engaging and Disrupting Ransomware Web Panels 2024
Breaching AWS Accounts Through Shadow Resources 2024
Break the Wall from Bottom: Automated Discovery of Protocol-Level Evasion Vulnerabilities 2024
Bugs of Yore: A Bug Hunting Journey on VMware's Hypervisor 2024
Bypassing ARM's Memory Tagging Extension with a Side-Channel Attack 2024
Bytecode Jiu-Jitsu: Choking Interpreters to Force Execution of Malicious Bytecode 2024
Compromising Confidential Compute, One Bug at a Time 2024
Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server! 2024
Cracking the 5G Fortress: Peering Into 5G's Vulnerability Abyss 2024
Crashing the Party: Vulnerabilities in RPKI Validation 2024
Cyber Claims Outlook 2024: Trends, Threats, and Tomorrow's Challenges 2024
Deep Backdoors in Deep Reinforcement Learning Agents 2024
Driving Forces Behind Industry 4.0 and Digital Transformation for Critical Infrastructure 2024
Flipping Bits: Your Credentials Are Certainly Mine 2024
Foreign Information Manipulation and Interference (Disinformation 2.0) 2024
From Doxing to Doorstep: Exposing Privacy Intrusion Techniques used by Hackers for Extortion 2024
From Exploits to Forensics Evidence - Unraveling the Unitronics Attack 2024
From HAL to HALT: Thwarting Skynet's Siblings in the GenAI Coding Era 2024
From MLOps to MLOops - Exposing the Attack Surface of Machine Learning Platforms 2024
From Weapon to Target: Quantum Computers Paradox 2024
Gotta Cache Em All: Bending the Rules of Web Cache Exploitation 2024
Hardening HSMs for Banking-Grade Crypto Wallets 2024
Hook, Line and Sinker: Phishing Windows Hello for Business 2024
How Hackers Changed the Media (and the Media Changed Hackers) 2024
ICS Risk: Strategies for Assessing Operational, Safety, Financial, and Cybersecurity Risks 2024
Ignore Your Generative AI Safety Instructions. Violate the CFAA? 2024
In Defense of Facts: Setting Standards Against Information Threats 2024
Into the Inbox: Novel Email Spoofing Attack Patterns 2024
Is Defense Winning? 2024
Isolation or Hallucination? Hacking AI Infrastructure Providers for Fun and Weights 2024
Keynote: Democracy's Biggest Year: The Fight for Secure Elections Around the World 2024
Keynote: Fireside Chat with Moxie Marlinspike 2024
Kicking in the Door to the Cloud: Exploiting Cloud Provider Vulnerabilities for Initial Access 2024
Laser Beams & Light Streams: Building Affordable Light-Based Hardware Security Tooling 2024
Let the Cache Cache and Let the WebAssembly Assemble: Knockin' on Chrome's Shell 2024
Listen to the Whispers: Web Timing Attacks that Actually Work 2024
Listen Up: Sonos Over-The-Air Remote Kernel Exploitation and Covert Wiretap 2024
Living off Microsoft Copilot 2024
Living off Microsoft Copilot 2024
Locked Down but Not Out: Fighting the Hidden War in Your Bootloader 2024
Locknote: Conclusions & Key Takeaways from Black Hat USA 2024 2024
Low Energy to High Energy: Hacking Nearby EV-Chargers Over Bluetooth 2024
Main Stage: From the Office of the CISO: Smarter, Faster, Stronger Security in the Age of AI 2024
Main Stage: Let Me Tell You a Story: Technology and the 4 Vs 2024
Main Stage: Solving the Cyber Hard Problems: A View into Problem Solving from the White House 2024
Main Stage: Understanding and Reducing Supply Chain and Software Vulnerability Risks 2024
MaLDAPtive: Diving Deep Into LDAP Obfuscation, Deobfuscation & Detection 2024
Microarchitecture Vulnerabilities: Past, Present, and Future 2024
Modern Anti-Abuse Mechanisms in Competitive Video Games 2024
Modern Kill Chains: Real World SaaS Attacks and Mitigation Strategies 2024
Moral Hazards and Ethical Considerations in Cyber-Insurance 2024
Navigating the Complex Challenges of Setting Up Efficient and Robust OT SOC Capabilities 2024
Nope, S7ill Not Secure: Stealing Private Keys From S7 PLCs 2024
One Hack to Rule Them All: Pervasive Account Takeovers in Integration Platforms 2024
Ops! It is JTAG's Fault: Journey to Unlocking Automotive Grade IC 2024
Overcoming State: Finding Baseband Vulnerabilities by Fuzzing Layer-2 2024
OVPNX: 4 Zero-Days Leading to RCE, LPE and KCE (via BYOVD) Affecting Millions of OpenVPN Endpoints 2024
PageJack: A Powerful Exploit Technique With Page-Level UAF 2024
Practical LLM Security: Takeaways From a Year in the Trenches 2024
Predict, Prioritize, Patch: How Microsoft Harnesses LLMs for Security Response 2024
Project 0xA11C: Deoxidizing the Rust Malware Ecosystem 2024
Project Zero: Ten Years of 'Make 0-Day Hard' 2024
PyLingual: A Python Decompilation Framework for Evolving Python Versions 2024
Quantum Security: Myths, Facts, and Realities 2024
Reinforcement Learning for Autonomous Resilient Cyber Defense 2024
Relationships Matter: Reconstructing the Organizational and Social Structure of a Ransomware Gang 2024
Remote, One-Click, Breaking through Smartphones via a Non Well-Known Remote Attack Surface 2024
Secure Shells in Shambles 2024
Securing Network Appliances: New Technologies and Old Challenges 2024
Self-Hosted GitHub CI/CD Runners: Continuous Integration, Continuous Destruction 2024
Skirting the Tornado: Essential Strategies for CISOs to Sidestep Government Fallout 2024
SnailLoad: Anyone on the Internet Can Learn What You're Doing 2024
Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls 2024
Stop! Sandboxing Exploitable Functions and Modules Using In-Kernel Machine Learning 2024
Strengthen Cyber-security by Leveraging Cyber-Insurance 2024
Super Hat Trick: Exploit Chrome and Firefox Four Times 2024
Surfacing a Hydra: Unveiling a Multi-Headed Chinese State-Sponsored Campaign 2024
Surveilling the Masses with Wi-Fi Positioning Systems 2024
Swipe Left for Identity Theft: An Analysis of User Data Privacy Risks on Location-based Dating Apps 2024
Terrapin Attack: Breaking SSH Channel Integrity by Sequence Number Manipulation 2024
That Gambling Site? It's Fueled by Chinese Organized Crime 2024
The 10th Annual Black Hat USA Network Operations Center (NOC) Report 2024
The Fundamentals of Cyber-Insurance 2024
The GCP Jenga Tower: Hacking Millions of Google's Servers With a Single Package (and more) 2024
The Hack@DAC Story: Learnings from Organizing the World's Largest Hardware Hacking Competition 2024
The Hidden Treasure of Crash Reports? 2024
The Overlooked Attack Surface: Diving into Windows Client Components for RCE Vulnerabilities 2024
The Way to Android Root: Exploiting Your GPU on Smartphone 2024
Threat Hunting with LLM: From Discovering APT SAAIWC to Tracking APTs with AI 2024
Tracing Origins: Navigating Content Authenticity in the Deepfake Era 2024
TuDoor Attack: Systematically Exploring and Exploiting Logic Vulnerabilities 2024
Tunnel Vision: Exploring VPN Post-Exploitation Techniques 2024
Uncovering Supply Chain Attack with Code Genome Framework 2024
UnOAuthorized: A Technique to Privilege Escalation to Global Administrator 2024
Unraveling the Mind Behind the APT - Analyzing the Role of Pretexting in CTI and Attribution 2024
Unveiling Mac Security: A Comprehensive Exploration of Sandboxing and AppData TCC 2024
Use Your Spell Against You: Threat Prevention of Smart Contract Exploit By Reusing Opcode Trace 2024
We R in a Right Pickle With All These Insecure Serialization Formats 2024
What Lies Beneath the Surface? Evaluating LLMs for Offensive Cyber Capabilities 2024
Will We Survive the Transitive Vulnerability Locusts? 2024
Windows Downdate: Downgrade Attacks Using Windows Updates 2024
You've Already Been Hacked: What if There Is a Backdoor in Your UEFI OROM? 2024