Everybody be Cool, This is a Robbery!
Presenters detail vulnerability discovery and exploitation in Everybody be Cool, This is a Robbery!.
Summary
Security assessment of a commercial Hardware Security Module used by banks and cloud providers. Found 14 vulnerabilities including remotely exploitable memory corruption without authentication, enabling retrieval of all HSM secrets including cryptographic keys and administrator credentials. Exploited firmware signature verification to upload a persistent backdoor surviving updates, demonstrating Heartbleed-like heap read and type confusion during digest deserialization.
Related talks
Black Hat·50 min
Crashoverride
Analysts investigate attack surfaces and defenses concerning Industroyer/Crashoverride: Zero Things Cool About a Threat Group Targeting the Power Grid.
Black Hat·1 hr 13 min
Industry experts analyze emerging threats surrounding The Hidden Architecture of our Time: Why This Internet Worked, How We Could Lose It....
Videos·49 min
Karim Sudki
Industry experts analyze emerging threats surrounding Stop This Car || GTFO by Karim Sudki.