AI
Invitation Is All You Need! Invoking Gemini for Workspace Agents with a Simple Google Calendar Invite
ai security
Cybersecurity
Black Hat 2025
Founded in 1997, Black Hat is an internationally recognized cybersecurity event series providing the most technical and relevant information security research. Grown from a single annual conference to the most respected information security event series internationally, these multi-day events provide the security community with the latest cutting-edge research, developments, and trends.
99
Talks
Day 1
53 talks
AppleStorm - Unmasking the Privacy Risks of Apple Intelligence
governance and riskoffensive security
BitUnlocker: Leveraging Windows Recovery to Extract BitLocker Secrets
offensive security
Dark Corners: How a Failed Patch Left VMware ESXi VM Escapes Open for Two Years
offensive security
Black Hat USA 2025 | From Prompts to Pwns: Exploiting and Securing AI Agents
ai securityoffensive security
Black Hat USA 2025 | Ghost Calls: Abusing Web Conferencing for Covert Command & Control
offensive security
I'm in Your Logs Now, Deceiving Your Analysts and Blinding Your EDR
offensive security
ReVault! Compromised by Your Secure SoC
offensive securitynetwork and infrastructure
Watching the Watchers: Exploring and Testing Defenses of Anti-Cheat Systems
defensive security
When Guardrails Aren't Enough: Reinventing Agentic AI Security With Architectural Controls
ai security
A Worm in the Apple - Wormable Zero-Click RCE in AirPlay Impacts Billions of Apple and IoT Devices
offensive securitymobile and iot security
Back to the Future: Hacking and Securing Connection-based OAuth Architectures in Agentic AI and Integration Platforms
identity and accessapplication security
Black Hat USA 2025 | Breaking Chains: Hacking Android Key Attestation
offensive securitycryptography
Breaking Out of The AI Cage: Pwning AI Providers with NVIDIA Vulnerabilities
cloud securityoffensive security
Ghosts in the Machine Check - Conjuring Hardware Failures to Breach CPU Privilege Boundaries
offensive securitynetwork and infrastructure
No Hoodies Here: Organized Crime in AdTech
malware and threat intel
Unix Underworld: Tales from the Dark Side of z/OS
offensive securityidentity and access
When 'Changed Files' Changed Everything: Uncovering and Responding to the tj-actions Supply Chain Breach
application securitydefensive security
Windows Hell No for Business
offensive securityidentity and access
Dead Pixel Detected - A Security Assessment of Apple's Graphics Subsystem
offensive securitymobile and iot security
Cybersecurity, AI, and Our Brains. A Fireside Chat with Cognitive Scientist and AI Expert Gary Marcus
ai security
Death by Noise: Abusing Alert Fatigue to Bypass the SOC (EDR Edition)
offensive securitydefensive security
ECS-cape – Hijacking IAM Privileges in Amazon ECS
cloud securityidentity and access
From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
offensive securitynetwork and infrastructure
Out Of Control: How KCFG and KCET Redefine Control Flow Integrity in the Windows Kernel
defensive security
Shade BIOS: Unleashing the Full Stealth of UEFI Malware
malware and threat intel
Black Hat USA 2025 | Analyzing Smart Farming Automation Systems for Fun and Profit
mobile and iot securityoffensive security
Adversarial Fuzzer for Teleoperation Commands: Evaluating Autonomous Vehicle Resilience
mobile and iot securityai security
Azure's Weakest Link? How API Connections Spill Secrets
cloud securityoffensive security
Burning, Trashing, Spacecraft Crashing: A Collection of Vulnerabilities That Will End Your Space Mission
offensive securitynetwork and infrastructure
Digital Dominoes: Scanning the Internet to Expose Systemic Cyber Risk
governance and riskcloud security
LLMs-Driven Automated YARA Rules Generation with Explainable File Features & DNAHash
malware and threat intelai security
Pwning User Phishing Training Through Scientific Lure Crafting
offensive securitygovernance and risk
How Tree-of-AST Redefines the Boundaries of Dataflow Analysis
offensive securityai security
Turning Camera Surveillance on its Axis
offensive security
Vaulted Severance: Your Secrets Are Now Outies
offensive securityidentity and access
Autonomous Timeline Analysis and Threat Hunting: An AI Agent for Timesketch
defensive securityai security
Booting into Breaches: Hunting Windows SecureBoot's Remote Attack Surfaces
offensive security
Bypassing PQC Signature Verification with Fault Injection: Dilithium, XMSS, SPHINCS+
cryptography
Hackers Dropping Mid-Heist Selfies: LLM Identifies Information Stealer Infection Vector and Extracts IoCs
malware and threat intel
HTTP/1.1 Must Die! The Desync Endgame
application securityoffensive security
Black Hat USA 2025 | The 5G Titanic
network and infrastructureoffensive security
Universal and Context-Independent Triggers for Precise Control of LLM Outputs
ai securityoffensive security
Use and Abuse of Personal Information -- Politics Edition
governance and risk
Advanced Active Directory to Entra ID Lateral Movement Techniques
identity and accessoffensive security
AI Enterprise Compromise - 0click Exploit Methods
ai securityoffensive security
Derandomizing the Location of Security-Critical Kernel Objects in the Linux Kernel
offensive security
Firewalls Under Fire: China's 5+ Year Campaign to Penetrate Perimeter Network Defenses
malware and threat intelnetwork and infrastructure
Black Hat USA 2025 | Hacking the Status Quo: Tales From Leading Women in Cybersecurity
security leadership
Black Hat USA 2025 | Advanced Bypass Techniques and a Novel Detection Approach
ai securitydefensive security
Black Hat USA 2025 | Leveraging Jamf for Red Teaming in Enterprise Environments
offensive securitymobile and iot security
Not Sealed: Practical Attacks on Nostr, a Decentralized Censorship-Resistant Protocol
cryptographyoffensive security
Three Decades in Cybersecurity: Lessons Learned and What Comes Next
malware and threat intelsecurity leadership
Day 2
46 talks
Weaponization of Cellular Based IoT Technology – Leveraging Smart Devices to Gain a Foothold
mobile and iot securityoffensive security
Unveiling Hidden Preauth Vulnerabilities in Windows HTTP Services
offensive security
Evil Digital Twin, Too: The First 30 Months of Psychological Manipulation of Humans by AI
ai securityoffensive security
FACADE: High-Precision Insider Threat Detection Using Contrastive Learning
defensive securityidentity and access
Hack to the Future: Owning AI-Powered Tools with Old School Vulns
ai securityapplication security
Kernel-Enforced DNS Exfiltration Security: Framework Built for Cloud Environments to Stop Data Breaches via DNS at Scale
defensive securitycloud security
The 11th Annual Black Hat USA Network Operations Center (NOC) Report
network and infrastructuredefensive security
Lost in Translation: Exploiting Unicode Normalization
application securityoffensive security
No VPN Needed? Cryptographic Attacks Against the OPC UA Protocol
cryptographynetwork and infrastructure
Peril at the Plug: Investigating EV Charger Security and Safety Failures
offensive securitymobile and iot securitynetwork and infrastructure
XUnprotect: Reverse Engineering macOS XProtect Remediator
malware and threat inteldefensive security
AI Agents for Offsec with Zero False Positives
ai securityoffensive security
Clustered Points of Failure - Attacking Windows Server Failover Clusters
offensive securityidentity and access
Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications
application security
Ransomware, Tracking, DoS, and Data Leaks on Xiaomi Electric Scooters
mobile and iot securityoffensive security
How to Secure Unique Ecosystem Shipping 1 Billion+ Cores?
network and infrastructure
If Google Uses It to Find Webpages, We Can Use It to Find Fraudsters: TF-IDF for Real-Time Fraud Detection
defensive security
Protecting Small Organizations in the Era of AI Bots
defensive securitynetwork and infrastructure
Uncovering 'NASty' 5G Baseband Vulnerabilities through Dependency-Aware Fuzzing
offensive securitymobile and iot security
Unmasking Supply Chain Attacks via Application Behaviour
defensive securitynetwork and infrastructure
2 Cops 2 Broadcasting: TETRA End-To-End Under Scrutiny
cryptographynetwork and infrastructure
Anomaly Detection Betrayed Us, so We Gave It a New Job: Enhancing Command Line Classification with Benign Anomalous Data
defensive security
Abusing Entra OAuth for Fun and Access to Internal Microsoft Applications
identity and accesscloud security
Decoding Signal: Understanding the Real Privacy Guarantees of E2EE
cryptographymobile and iot security
Lost & Found: The Hidden Risks of Account Recovery in a Passwordless Future
identity and accessapplication security
Black Hat USA 2025 | More Flows, More Bugs: Empowering SAST with LLMs and Customized DFA
application securityai security
Training Specialist Models: Automating Malware Development
ai securitymalware and threat intel
Black Hat USA 2025 | Use and Abuse of Palo Alto's Remote Access Solution
offensive securitynetwork and infrastructure
BinWhisper: LLM-Driven Reasoning for Automated Vulnerability Discovery Behind Hall-of-Fame
ai security
Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange
application securitycryptography
Exploiting DNS for Stealthy User Tracking
network and infrastructuregovernance and risk
Let LLM Learn: When Your Static Analyzer Actually 'Gets It'
application securityai security
Open RAN, Open Risk: Uncovering Threats and Exposing Vulnerabilities in Next-Gen Cellular RAN
network and infrastructureoffensive security
Racing for Privilege: Leaking Privileged Memory From Any Intel System Using a Microarchitectural Race Condition
offensive security
Smart Charging, Smarter Hackers: The Unseen Risks of ISO 15118
mobile and iot securitynetwork and infrastructure
Black Hat USA 2025 | Vulnerability Haruspicy: Picking Out Risk Signals from Scoring System Entrails
governance and riskmalware and threat intel
Watch Your (Lock)Step: Glitching into Automotive Processors
offensive securitymobile and iot security
Breaking Control Flow Integrity by Abusing Modern C++
offensive security
Clue-Driven Reverse Engineering by LLM in Real-World Malware Analysis
malware and threat intelai security
QUACK: Hindering Deserialization Attacks via Static Duck Typing
application security
Unveiling the Hidden Perils of the TorchScript Engine in PyTorch
application securityai security
Securing America: Readiness, Response, and Resilience for Critical Infrastructure Defense
defensive securitynetwork and infrastructure
The New Frontline: Cyber on the Precipice
malware and threat intelai security
Black Hat USA 2025 | Weaponizing Apple AI for Offensive Operations
offensive securitymobile and iot security
Black Hat USA 2025 | Keynote: Threat Modeling and Constitutional Law
governance and risk
Locknote: Conclusions & Key Takeaways from Black Hat USA 2025
ai security