From MLOps to MLOops - Exposing the Attack Surface of Machine Learning Platforms

From HAL to HALT: Thwarting Skynet's Siblings in the GenAI Coding Era

From Exploits to Forensics Evidence - Unraveling the Unitronics Attack

Foreign Information Manipulation and Interference (Disinformation 2.0)

Flipping Bits: Your Credentials Are Certainly Mine

Driving Forces Behind Industry 4.0 and Digital Transformation for Critical Infrastructure

Deep Backdoors in Deep Reinforcement Learning Agents

Cyber Claims Outlook 2024: Trends, Threats, and Tomorrow's Challenges

Crashing the Party: Vulnerabilities in RPKI Validation

Cracking the 5G Fortress: Peering Into 5G's Vulnerability Abyss

Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!

Compromising Confidential Compute, One Bug at a Time

Bytecode Jiu-Jitsu: Choking Interpreters to Force Execution of Malicious Bytecode

Bypassing ARM's Memory Tagging Extension with a Side-Channel Attack

Bugs of Yore: A Bug Hunting Journey on VMware's Hypervisor

Break the Wall from Bottom: Automated Discovery of Protocol-Level Evasion Vulnerabilities

Breaching AWS Accounts Through Shadow Resources

Behind Enemy Lines: Engaging and Disrupting Ransomware Web Panels

Becoming Cybersecurity Bilingual: Effective Communication for Hackers

Attention Is All You Need for Semantics Detection: A Novel Transformer on Neural-Symbolic Approach

Attacking Samsung Galaxy A* Boot Chain, and Beyond

Are Your Backups Still Immutable, Even Though You Can't Access Them?

Arbitrary Data Manipulation and Leakage with CPU Zero-Day Bugs on RISC-V

All Your Secrets Belong to Us: Leveraging Firmware Bugs to Break TEEs

AI Safety and You: Perspectives on Evolving Risks and Impacts

Achilles' Heel of JS Engines: Exploiting Modern Browsers During WASM Execution

ACE Up the Sleeve: Hacking Into Apple's New USB-C Controller

A Framework for Evaluating National Cybersecurity Strategies

Black Hat Asia 2025 Video

Black Hat Asia 2025 - Sizzle Reel

Main Stage: Let Me Tell You a Story: Technology and the 4 Vs

Living off Microsoft Copilot- DEMO- invoice manipulation

Project Zero: Ten Years of 'Make 0-Day Hard'

Locknote: Conclusions & Key Takeaways from Black Hat USA 2024

Keynote: Fireside Chat with Moxie Marlinspike

Living off Microsoft Copilot

Practical LLM Security: Takeaways From a Year in the Trenches

Black Hat USA 2024 Highlights

Black Hat USA 2024 Short Reel

Black Hat Europe 2024 at the ExCel, London December 9-12 Sizzle Reel

Black Hat Europe 2024 at the ExCel, London December 9-12

Keynote - Securing Our Cyberspace Together

Fireside Chat: Jeff Moss and Ruimin He

LinkDoor: A Hidden Attack Surface in the Android Netlink Kernel Modules

Emerging Frontiers: Insights from the Black Hat Asia Review Board

What the TrustZone-M Doesn't See, the MCU Does Grieve Over: Lessons Learned

The Hack@DAC Story: Learnings from Organizing the World's Largest Hardware Hacking Competition

Privacy Detective: Sniffing Out Your Data Leaks for Android

Debug7: Leveraging a Firmware Modification Attack for Remote Debugging of Siemens S7 PLCs

The Final Chapter: Unlimited ways to bypass your macOS privacy mechanisms

One Flip is All It Takes: Identifying Syscall-Guard Variables for Data-Only Attacks

Faults in Our Bus: Novel Bus Fault Attack to Break Trusted Execution Environments

You Shall Not PASS - Analysing a NSO iOS Spyware Sample

Voice Phishing Syndicates Unmasked: An In-Depth Investigation and Exposure

URB Excalibur: The New VMware All-Platform VM Escapes

Unveiling the Cracks in Virtualization, Mastering the Host System--VMware Workstation Escape

The Key to Remote Vehicle Control: Autonomous Driving Domain Controller

The Hole in Sandbox: Escape Modern Web-Based App Sandbox From Site-Isolation Perspective

The Fault in Our Metrics: Rethinking How We Measure Detection & Response

The Dark Side of EDR: Repurpose EDR as an Offensive Tool