https://www.youtube.com/watch?v=nmMUMzLxBkU "Invitation is All You Need! TARA for Targeted Promptware Attack against Gemini-Powered Assistants," presented by Ben Nassi, Or Yair, and Stav Cohen. Core Premise The presentation highlights a new, highly…
https://www.youtube.com/watch?v=WKmEzRJZ6H4 "Training Specialist Models: Automating Malware Development" explores how small, specialized Large Language Models (LLMs) can be trained to outperform massive generalist models in specific, highly technical tasks—specifically, the creation of…
Black Hat USA 2025 | Watching the Watchers: Exploring and Testing Defenses of Anti-Cheat Systems Introduction to the Anti-Cheat Ecosystem The World of Game Cheats: The speakers explore the fast-paced,…
In computer science—and specifically in fuzzing and exploitation—the terms Overflow and Underflow mean different things depending on whether you are talking about Numbers (Arithmetic) or Memory (Buffers). Here is the…
https://www.youtube.com/watch?v=Nv92TuocnwA This talk, titled "Keynote: Perspectives on Trust in Hardware Supply Chains" [00:00] by Bunny Huang, discusses the complexities and vulnerabilities within hardware supply chains. Key points from the talk…
https://www.youtube.com/watch?v=QfUdKtkBRjA In the "Tinker Tailor LLM Spy: Investigate & Respond to Attacks on GenAI Chatbots" talk by Black Hat, Ellen Scott discusses the increasing ubiquity of Generative AI chatbots and…
https://research.swtch.com/nih Supply chain security is a hot topic today, but it is a very old problem. In October 1983, 40 years ago this week, Ken Thompson chose supply chain security…
https://www.youtube.com/watch?v=LIYZemVCgiM Past Present Logic Issues Exploitation Techniques Physical Domain in Software Mitigation Efforts Physical hardware cannot be changed in the field Vendors build in "Survivability features" Microcode is the most…
https://www.youtube.com/watch?v=-WO_1EKkdJk The video presents an attack technique called SysBumps, demonstrated by researchers Hyerean Jang, Taehun Kim, and Youngjoo Shin at Black Hat Europe 2024. Here’s what it’s about: What SysBumps…
https://www.youtube.com/watch?v=DoPb4mG-7TY This explains a research project on how to bypass ARM's Memory Tagging Extension (MTE), a hardware feature designed to prevent memory corruption vulnerabilities. Here are the key takeaways: ARM…