Watch Queue
Queue
Watch QueueQueue
The next video is starting
Loading...
Watch Queue
Queue
Watch Queue
Queue
__count__/__total__
Black Hat USA 2019
- 12118 videos
-
1
Practical Approach to Automate the Discovery & Eradication of Open-Source Software Vulnerabilities
-
2
Backdooring Hardware Devices by Injecting Malicious Payloads on Microcontrollers
-
3
The Path Less Traveled: Abusing Kubernetes Defaults
-
4
Exploiting Qualcomm WLAN and Modem Over The Air
-
5
Infighting Among Russian Security Services in the Cyber Sphere
-
6
Managing for Success: Maintaining a Healthy Bug Bounty Program Long Term
-
7
Firmware Cartography: Charting the Course for Modern Server Compromise
-
8
0-days & Mitigations: Roadways to Exploit and Secure Connected BMW Cars
-
9
Preventing Authentication Bypass: A Tale of Two Researchers
-
10
Making Big Things Better The Dead Cow Way
-
11
Towards Discovering Remote Code Execution Vulnerabilities in Apple FaceTime
-
▶
Securing the System: A Deep Dive into Reversing Android Pre-Installed Apps
-
13
Automation Techniques in C++ Reverse Engineering
-
14
Inside the Apple T2
-
15
Fantastic Red-Team Attacks and How to Find Them
-
16
Critical Zero Days Remotely Compromise the Most Popular Real-Time OS
-
17
Everybody be Cool, This is a Robbery!
-
18
The Discovery of a Government Malware and an Unexpected Spy Scandal
-
19
Attacking iPhone XS Max
-
20
HostSplit: Exploitable Antipatterns in Unicode Normalization
-
21
Securing Apps in the Open-By-Default Cloud
-
22
Adventures in the Underland: The CQForensic Toolkit as a Unique Weapon Against Hackers
-
23
The Future of ATO
-
24
A Compendium of Container Escapes
-
25
Hacking Ten Million Useful Idiots: Online Propaganda as a Socio-Technical Security Project
-
26
Moving from Hacking IoT Gadgets to Breaking into One of Europe's Highest Hotel Suites
-
27
How to Detect that Your Domains are Being Abused for Phishing by Using DNS
-
28
Debug for Bug: Crack and Hack Apple Core by Itself
-
29
Exploring the New World : Remote Exploitation of SQLite and Curl
-
30
Paging All Windows Geeks – Finding Evil in Windows 10 Compressed Memory
-
31
Shifting Knowledge Left: Keeping up with Modern Application Security
-
32
Lessons and Lulz: The 5th Annual Black Hat USA NOC Report
-
33
Breaking Samsung's ARM TrustZone
-
34
Exploiting Qualcomm WLAN and Modem Over The Air
-
35
Zombie Ant Farming: Practical Tips for Playing Hide and Seek with Linux EDRs
-
36
Breaking Samsung's ARM TrustZone
-
37
Lessons and Lulz: The 5th Annual Black Hat USA NOC Report
-
38
Behind the scenes of iOS and Mac Security
-
39
MINimum Failure - Stealing Bitcoins with Electromagnetic Fault Injection
-
40
PeriScope: An Effective Probing and Fuzzing Framework for the Hardware-OS Boundary
-
41
Defense Against Rapidly Morphing DDOS
-
42
Testing Your Organization's Social Media Awareness
-
43
On Trust: Stories from the Front Lines
-
44
Mobile Interconnect Threats: How Next-Gen Products May be Already Outdated
-
45
The Future of Securing Intelligent Electronic Devices Using the IEC 62351-7 Standard for Monitoring
-
46
Death to the IOC: What's Next in Threat Intelligence
-
47
WebAuthn 101 - Demystifying WebAuthn
-
48
The Enemy Within: Modern Supply Chain Attacks
-
49
All Your Apple are Belong to Us: Unique Identification and Cross-Device Tracking of Apple Devices
-
50
Rough and Ready: Frameworks to Measure Persistent Engagement and Deterrence
-
51
Breaking Through Another Side: Bypassing Firmware Security Boundaries from Embedded Controller
-
52
Playing Offense and Defense with Deepfakes
-
53
Project Zero: Five Years of 'Make 0Day Hard'
-
54
Selling 0-Days to Governments and Offensive Security Companies
-
55
API-Induced SSRF: How Apple Pay Scattered Vulnerabilities Across the Web
-
56
DevSecOps : What, Why and How
-
57
Breaking Encrypted Databases: Generic Attacks on Range Queries
-
58
Women in Security: Building a Female InfoSec Community in Korea, Japan, and Taiwan
-
59
Bounty Operations: Best Practices and Common Pitfalls to Avoid in the First 6-12 Months
-
60
Operational Templates for State-Level Attack and Collective Defense of Countries
-
61
Finding Our Path: How We're Trying to Improve Active Directory Security
-
62
Process Injection Techniques - Gotta Catch Them All
-
63
Ghidra - Journey from Classified NSA Tool to Open Source
-
64
Going Beyond Coverage-Guided Fuzzing with Structured Fuzzing
-
65
Transparency in the Software Supply Chain: Making SBOM a Reality
-
66
Cybersecurity Risk Assessment for Safety-Critical Systems
-
67
Reverse Engineering WhatsApp Encryption for Chat Manipulation and More
-
68
Detecting Malicious Files with YARA Rules as They Traverse the Network
-
69
He Said, She Said – Poisoned RDP Offense and Defense
-
70
Hunting for Bugs, Catching Dragons
-
71
Internet-Scale Analysis of AWS Cognito Security
-
72
Arm IDA and Cross Check: Reversing the Boeing 787's Core Network
-
73
Messaging Layer Security: Towards a New Era of Secure Group Messaging
-
74
Controlled Chaos: The Inevitable Marriage of DevOps & Security
-
75
Hacking Your Non-Compete
-
76
Finding a Needle in an Encrypted Haystack
-
77
Responding to a Cyber Attack with Missiles
-
78
Lessons From Two Years of Crypto Audits
-
79
Integration of Cyber Insurance Into A Risk Management Program
-
80
Come Join the CAFSA - Continuous Automated Firmware Security Analysis
-
81
Worm Charming: Harvesting Malware Lures for Fun and Profit
-
82
Look, No Hands! -- The Remote, Interaction-less Attack Surface of the iPhone
-
83
MITRE ATT&CK: The Play at Home Edition
-
84
Selling 0-Days to Governments and Offensive Security Companies
-
85
All the 4G Modules Could be Hacked
-
86
Chip.Fail - Glitching the Silicon of the Connected World
-
87
Cyber Insurance 101 for CISO’s
-
88
I'm Unique, Just Like You: Human Side-Channels and Their Implications for Security and Privacy
-
89
Sensor and Process Fingerprinting in Industrial Control Systems
-
90
New Vulnerabilities in 5G Networks
-
91
HTTP Desync Attacks: Smashing into the Cell Next Door
-
92
Behind the Scenes of Intel Security and Manageability Engine
-
93
Behind the Scenes: The Industry of Social Media Manipulation Driven by Malware
-
94
Exploiting the Hyper-V IDE Emulator to Escape the Virtual Machine
-
95
Dragonblood: Attacking the Dragonfly Handshake of WPA3
-
96
PicoDMA: DMA Attacks at Your Fingertips
-
97
Attacking and Defending the Microsoft Cloud (Office 365 & Azure AD)
-
98
Attacking Electric Motors for Fun and Profit
-
99
The Most Secure Browser? Pwning Chrome from 2016 to 2019
-
100
Monsters in the Middleboxes: Building Tools for Detecting HTTPS Interception
-
101
Battle of Windows Service: A Silver Bullet to Discover File Privilege Escalation Bugs Automatically
-
102
A Decade After Bleichenbacher '06, RSA Signature Forgery Still Works
-
103
ClickOnce and You're in - When Appref-ms Abuse is Operating as Intended
-
104
Detecting Deep Fakes with Mice
-
105
Legal GNSS Spoofing and its Effects on Autonomous Vehicles
-
106
SSO Wars: The Token Menace
-
107
Bypassing the Maginot Line: Remotely Exploit the Hardware Decoder on Smartphone
-
108
Biometric Authentication Under Threat: Liveness Detection Hacking
-
109
Flying a False Flag: Advanced C2, Trust Conflicts, and Domain Takeover
-
110
How Do Cyber Insurers View The World?
-
111
Infiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNs
-
112
GDPArrrrr: Using Privacy Laws to Steal Identities
-
113
Woke Hiring Won't Save Us: An Actionable Approach to Diversity Hiring and Retention
-
114
Denial of Service with a Fistful of Packets: Exploiting Algorithmic Complexity Vulnerabilities
-
115
Rogue7: Rogue Engineering-Station Attacks on S7 Simatic PLCs
-
116
Breaking Encrypted Databases: Generic Attacks on Range Queries
-
117
Command Injection in F5 iRules
-
118
Black Hat USA 2019 Keynote: Every Security Team is a Software Team Now by Dino Dai Zovi
Securing the System: A Deep Dive into Reversing Android Pre-Installed Apps
Transcript
Rating is available when the video has been rented.
This feature is not available right now. Please try again later.