Briefings·30 min
Yu Wang · Weiteng Chen
As one of the most significant attack surfaces in Operating Systems, the graphics subsystem has always been a focus of the security community.
reverse-engineeringcloudai+2
2–7 August 2025 · Las Vegas, USA
Black Hat USA 2025
1 session · 104 talks
Sessions at this event
All BHUSA25 talks
1–24 of 104 talks
Briefings·41 min
Carlo Meijer · Wouter Bokslag · Jos Wetzels
Presents the first public security analysis of TETRA end-to-end encryption (E2EE) used for the most sensitive communications - such as those by intelligence agencies and special forces.
reverse-engineeringcritical-infrastructurecryptography+3
Briefings·39 min
Gary Marcus · Nathan Hamiel
Gary Marcus and industry experts debate artificial intelligence safety paradigms, cognitive architecture limitations, and systemic risk models.
aifiresidechat+2
Briefings·30 min
Vaisha Bernard
Security researchers expose authorization flaws in Microsoft Entra OAuth implementations, gaining lateral access across internal enterprise services.
windowsauthenticationoauth+3
Briefings·39 min
Dirk-jan Mollema
Is there a security boundary between Active Directory and Entra ID in a hybrid environment.
cloudactive-directoryauthentication+3
Briefings·33 min
Itay Ravia
Many AI frameworks present attackers with a new attack potential by introducing unsafe serialization formats, such as Pickle and lambda functions, into their model formats.
supply-chainaibypass+3
Briefings·39 min
Brendan Dolan-Gavitt
Large language models are increasingly helping to automate vulnerability discovery and exploit development in real-world software.
exploit-developmentaiweb+3
Briefings·40 min
Michael Bargury · Tamir Ishay Sharbat
Compromising a well-protected enterprise used to require careful planning, proper resources, and the ability to execute.
social-engineeringaiphishing+3
Briefings·35 min
The digital transformation of agriculture has led to a change in technology.
automationsecurity-analysisvulnerabilities+2
Briefings·41 min
Yoav Magid
Privacy analysts uncover prompt leakage and on-device inference data storage vulnerabilities within early releases of Apple Intelligence.
cloudaitraffic-analysis+2
Briefings·37 min
Alex Kantchelian · Maarten van Dantzig · Diana Kramer
Digital incident timeline analysis is a complex and time-consuming task.
aithreat-huntingexploitation+3
Briefings·28 min
Haakon Gulbrandsrud
Azure API Connections serve as the backbone for integrating Logic Apps, Power Apps, and Power Automate with external systems.
azureinfrastructurearm
Briefings·40 min
Kaixuan Luo · Xianbo Wang · Adonis Fung · Yanxiang Bi · Wing Cheong Lau
Researchers dissect token delegation vulnerabilities in agentic artificial intelligence pipelines, demonstrating cross-tenant account takeover.
aiwebazure+3
Briefings·38 min
Alon Leviev · Netanel Ben Simon · Yair Netzer · Amit Dori
In Windows, the cornerstone of data protection is BitLocker, a Full Volume Encryption technology designed to secure sensitive data on disk.
hardwarewindowsencryption+3
Briefings·57 min
Conference organizers outline AV logistics, presentation requirements, and speaker guidelines for Black Hat USA Briefings presenters.
speaker-guidelinesbriefings-logisticsconference-operations
Briefings·38 min
Jietao Yang
SecureBoot, designed to protect against firmware-level tampering, has long been dismissed as a "local-only" attack surface.
hardwarewindowsrce+2
Briefings·41 min
Alex Gonzalez
Android key attestation provides a way for a device's secure hardware to verify that cryptographic material is in secure hardware, protected against compromise of the Android OS.
hardwarered-teamopen-source+3
Briefings·37 min
Marcos Bajo · Christian Rossow
Security researchers reveal how transient execution gadgets bypass modern hardware and compiler-level control flow integrity protections.
windowsexploitationlinux+2
Briefings·36 min
Andres Riancho · Hillai Ben-Sasson · Ronen Shustin
The overwhelming majority of AI applications run on NVIDIA hardware and software and use NVIDIA tools to containerize and isolate applications running on the same infrastructure.
hardwareaicloud+3
Briefings·24 min
Andrzej Olchawa · Milenko Starcik · Ricardo Fradique · Ayman Boulaich
Researchers investigate satellite telemetry protocols and flight computer attack surfaces that expose orbital spacecraft to unauthorized commands.
hardwarecritical-infrastructureoffensive-security+2
Briefings·36 min
Fikret Garipay
Post-quantum cryptographic (PQC) algorithms are being integrated into firmware, bootloaders, and other embedded systems as a replacement for RSA and ECC.
cryptographyopen-sourceinjection-attacks+3
Briefings·36 min
Andrew Brandt
Intelligence researchers analyze advanced persistent threat campaigns systematically targeting global telecommunications providers and routing infrastructure.
exploit-developmentnetwork-securitymalware-analysis+3
Briefings·43 min
Ron Deibert
For over twenty years, the University of Toronto's Citizen Lab has pioneered investigations into digital security and human rights.
surveillanceinvestigationsintelligence+1
Briefings·37 min
Tien-Chih Lin · Wei Chieh Chao · Zhao-Min Chen
IDA Pro feat. MCP (Model Context Protocol) is truly amazing.
reverse-engineeringmalware-analysisctf+3