Search talks

Black Hat · 2024black-hat-asiaexpert

Faults in Our Bus: Novel Bus Fault Attack to Break Trusted Execution Environments

Nimish Mishra · Anirban Chakraborty · Debdeep Mukhopadhyay

Black Hat · 2024black-hat-asiaexpert

Game of Cross Cache: Let's Win It in a More Effective Way!

Le Wu · Qi Zhang

Black Hat · 2024black-hat-asiaexpert

One Flip is All It Takes: Identifying Syscall-Guard Variables for Data-Only Attacks

Zhechang Zhang · Hengkai Ye · Hong Hu

Black Hat · 2024black-hat-asiaexpert

Unveiling the Cracks in Virtualization, Mastering the Host System--VMware Workstation Escape

Victor V

Black Hat · 2024black-hat-asiaexpert

URB Excalibur: The New VMware All-Platform VM Escapes

Yuhao Jiang · Xinlei Ying

Black Hat · 2024black-hat-europe-2024expert

Decoding EM-FI Attacks: Lessons Learned from Glitching the GigaDevice GD32F407

Black Hat · 2024black-hat-europe-2024expert

Guest Revolution: Chaining 3-bugs to compromise the Windows kernel from the VMware guest

Black Hat · 2024black-hat-europe-2024expert

Improving Side-Channel Protections for Intel TDX

Scott Constable · Nagaraju Kodalapura · Baruch Chaikin

Black Hat · 2024black-hat-europe-2024expert

SysBumps: Exploiting Speculative Execution in System Calls for Breaking KASLR

Hyerean Jang · Youngjoo Shin · Taehun Kim

Black Hat · 2024black-hat-europe-2024expert

The Devil is in the (Micro-) Architectures: Uncovering New Side-Channel and Bit-Flip Attack Surfaces

Yanzuo Chen · Zhibo Liu · Yuanyuan Yuan · Tianxiang Li · Sihang Hu · Zhihui Lin · Shuai Wang.

Black Hat · 2024black-hat-usaexpert

Achilles' Heel of JS Engines: Exploiting Modern Browsers During WASM Execution

Bohan Liu · Zong Cao · Zheng Wang · Yeqi Fu · Cen Zhang

Black Hat · 2024black-hat-usaexpert

All Your Secrets Belong to Us: Leveraging Firmware Bugs to Break TEEs

Tom Dohrmann

Black Hat · 2024black-hat-usaexpert

Arbitrary Data Manipulation and Leakage with CPU Zero-Day Bugs on RISC-V

Fabian Thomas · Ruiyi Zhang · Lorenz Hetterich · Michael Schwarz

Black Hat · 2024black-hat-usaexpert

Attacking Samsung Galaxy A* Boot Chain, and Beyond

Black Hat · 2024black-hat-usaexpert

Bugs of Yore: A Bug Hunting Journey on VMware's Hypervisor

Zisis Sialveras

Black Hat · 2024black-hat-usaexpert

Bypassing ARM's Memory Tagging Extension with a Side-Channel Attack

Juhee Kim · Jinbum Park · Sihyeon Roh · Jaeyoung Chung · Youngjoo Lee · Taesoo Kim · Byoungyoung Lee

Black Hat · 2024black-hat-usaexpert

Bytecode Jiu-Jitsu: Choking Interpreters to Force Execution of Malicious Bytecode

Toshinori Usui · Yuto Otsuki · Ryo Kubota · Yuhei Kawakoya · Makoto Iwamura · Kanta Matsuura

Black Hat · 2024black-hat-usaexpert

Compromising Confidential Compute, One Bug at a Time

Maxime Villard · Yair Netzer · Ben Hania

Black Hat · 2024black-hat-usaexpert

Deep Backdoors in Deep Reinforcement Learning Agents

Vasilios Mavroudis · Jamie Gawith · Sañyam Vyas · Chris Hicks

Black Hat · 2024black-hat-usaexpert

Let the Cache Cache and Let the WebAssembly Assemble: Knockin' on Chrome's Shell

Edouard Bochin · Tao Yan · Bo Qu

Black Hat · 2024black-hat-usaexpert

Listen Up: Sonos Over-The-Air Remote Kernel Exploitation and Covert Wiretap

Alex Plaskett · Robert Herrera

Black Hat · 2024black-hat-usaexpert

Microarchitecture Vulnerabilities: Past, Present, and Future

Anders Fogh · Daniel Gruss

Black Hat · 2024black-hat-usaexpert

Overcoming State: Finding Baseband Vulnerabilities by Fuzzing Layer-2

Dyon Goos · Marius Muench

Black Hat · 2024black-hat-usaexpert

OVPNX: 4 Zero-Days Leading to RCE, LPE and KCE (via BYOVD) Affecting Millions of OpenVPN Endpoints

Vladimir Tokarev