AMDSinkclose - Universal Ring2 Privilege Escalation
Enrique Nissim and Krzysztof Okupski disclose AMDSinkclose, a vulnerability allowing Ring -2 execution and System Management Mode takeover across millions of AMD processors.
Summary
Social Engineering and Human-Oriented Security
This presentation explores social engineering attacks and human vulnerability in security systems. Topics include psychological manipulation, pretexting, credential harvesting, and how attackers exploit human nature to bypass technical defenses.
(AI summary — Claude Haiku)
Related talks
Main Stage·44 min
Enrique Nissim · Krzysztof Okupski
Silicon-level vulnerability in AMD processor System Management Mode enabling persistent Ring-2 privilege escalation invisible to hypervisors.
Main Stage·40 min
Benny Zeltser · Jonathan Lusky
Benny Zeltser and Jonathan Lusky detail RingHopper, a multi-vendor UEFI vulnerability allowing user-space attackers to jump directly into System Management Mode (SMM).
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.