Black Hat

USA 2025

August 2-7, 2025

Mandalay Bay / Las Vegas

All times are Pacific Time (GMT/UTC -7h)

All
Wednesday
Thursday

All Sessions Speakers

No sessions found

- Wednesday | 8:00am
- Briefings Breakfast
  Location: TBD
  Track:
  Location: Michelob ULTRA Arena, Concourse Level
  LATE
- Wednesday | 9:00am
- Keynote: Three Decades in Cybersecurity: Lessons Learned and What Comes Next
  Location: TBD
  Speaker: Mikko Hypponen
  Track:
  Keynote
  Format: 40-Minute Keynote
  Location: Michelob ULTRA Arena, Concourse Level
  LATE
- Wednesday | 10:20am
- AppleStorm - Unmasking the Privacy Risks of Apple Intelligence
  Location: TBD
  Speaker: Yoav Magid
  Tracks:
  Privacy,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: South Pacific F, Level 0 - North Convention Center
  LATE
  
  BitUnlocker: Leveraging Windows Recovery to Extract BitLocker Secrets
  Location: TBD
  Speaker: Alon Leviev, Speaker: Netanel Ben Simon, Contributor: Yair Netzer, Contributor: Amit Dori
  Tracks:
  Platform Security,
  Exploit Development & Vulnerability Discovery
  Format: 40-Minute Briefings
  Location: Mandalay Bay H, Level 2
  LATE
  
  Briefings Policy Track Meetup 1: Panel & Conversation with Senior Government Officials
  Location: TBD
  Moderator: Jason Healey, Moderator: Dr. Amit Elazari, Panelist: Michael Duffy, Panelist: Rob Knake, Panelist: Robert Costello
  Track:
  Policy
  Format: 40-Minute Briefings
  Location: Breakers B, Level 2
  LATE
  
  Dark Corners: How a Failed Patch Left VMware ESXi VM Escapes Open for Two Years
  Location: TBD
  Speaker: Yuhao Jiang, Contributor: Xinlei Ying, Speaker: Ziming Zhang
  Tracks:
  Exploit Development & Vulnerability Discovery,
  Cloud Security
  Format: 40-Minute Briefings
  Location: Jasmine A & E, Level 3
  LATE
  
  From Prompts to Pwns: Exploiting and Securing AI Agents
  Location: TBD
  Speaker: Rebecca Lynch, Speaker: Rich Harang
  Tracks:
  AI, ML, & Data Science,
  Application Security: Offense
  Format: 40-Minute Briefings
  Location: Oceanside A, Level 2
  LATE
  
  Ghost Calls: Abusing Web Conferencing for Covert Command & Control
  Location: TBD
  Speaker: Adam Crosser
  Tracks:
  Network Security,
  Malware
  Format: 40-Minute Briefings
  Location: Islander F & G, Level 0 - North Convention Center
  LATE
  
  I'm in Your Logs Now, Deceiving Your Analysts and Blinding Your EDR
  Location: TBD
  Speaker: Olaf Hartong
  Tracks:
  Threat Hunting & Incident Response,
  Enterprise Security
  Format: 40-Minute Briefings
  Location: Islander E & I, Level 0 - North Convention Center
  LATE
  
  ReVault! Compromised by Your Secure SoC
  Location: TBD
  Speaker: Philippe Laulheret
  Tracks:
  Hardware / Embedded,
  Platform Security
  Format: 40-Minute Briefings
  Location: Oceanside C, Level 2
  LATE
  
  Watching the Watchers: Exploring and Testing Defenses of Anti-Cheat Systems
  Location: TBD
  Speaker: Marius Muench, Speaker: Sam Collins, Speaker: Tom Chothia
  Tracks:
  Defense & Resilience,
  Malware
  Format: 40-Minute Briefings
  Location: South Seas A & B, Level 3
  LATE
  
  When Guardrails Aren't Enough: Reinventing Agentic AI Security With Architectural Controls
  Location: TBD
  Speaker: David Brauchler III
  Tracks:
  Application Security: Defense,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: South Seas C & D, Level 3
  LATE
- Wednesday | 11:00am
- Briefings Morning Refreshment Break
  Location: TBD
  Track:
  Location: Foyer Areas (Levels 0, 2 & 3)
  LATE
- Wednesday | 11:20am
- A Worm in the Apple - Wormable Zero-Click RCE in AirPlay Impacts Billions of Apple and IoT Devices
  Location: TBD
  Speaker: Gal Elbaz, Speaker: Avi Lumelsky, Speaker: Uri Katz
  Tracks:
  Exploit Development & Vulnerability Discovery,
  Platform Security
  Format: 40-Minute Briefings
  Location: Islander E & I, Level 0 - North Convention Center
  LATE
  
  Back to the Future: Hacking and Securing Connection-based OAuth Architectures in Agentic AI and Integration Platforms
  Location: TBD
  Speaker: Kaixuan Luo, Contributor: Xianbo Wang, Contributor: Adonis Fung, Contributor: Yanxiang Bi, Speaker: Wing Cheong Lau
  Tracks:
  Application Security: Offense,
  Cloud Security
  Format: 40-Minute Briefings
  Location: South Seas A & B, Level 3
  LATE
  
  Breaking Chains: Hacking Android Key Attestation
  Location: TBD
  Speaker: Alex Gonzalez
  Tracks:
  Mobile,
  Exploit Development & Vulnerability Discovery
  Format: 40-Minute Briefings
  Location: South Pacific F, Level 0 - North Convention Center
  LATE
  
  Breaking Out of The AI Cage: Pwning AI Providers with NVIDIA Vulnerabilities
  Location: TBD
  Speaker: Andres Riancho, Speaker: Hillai Ben-Sasson, Contributor: Ronen Shustin
  Tracks:
  Cloud Security,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Mandalay Bay H, Level 2
  LATE
  
  Briefings AI Track Meetup
  Location: TBD
  Moderator: Nathan Hamiel
  Track:
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Breakers B, Level 2
  LATE
  
  Ghosts in the Machine Check - Conjuring Hardware Failures to Breach CPU Privilege Boundaries
  Location: TBD
  Speaker: Christopher Domas
  Tracks:
  Platform Security,
  Hardware / Embedded
  Format: 40-Minute Briefings
  Location: Oceanside A, Level 2
  LATE
  
  No Hoodies Here: Organized Crime in AdTech
  Location: TBD
  Speaker: Renée Burton, Speaker: Dave Mitchell, Contributor: Christopher Kim
  Tracks:
  Threat Hunting & Incident Response,
  Enterprise Security
  Format: 40-Minute Briefings
  Location: Islander F & G, Level 0 - North Convention Center
  LATE
  
  Unix Underworld: Tales from the Dark Side of z/OS
  Location: TBD
  Speaker: Philip Young, Speaker: Chad Rikansrud
  Tracks:
  Platform Security,
  Exploit Development & Vulnerability Discovery
  Format: 40-Minute Briefings
  Location: Jasmine A & E, Level 3
  LATE
  
  When 'Changed Files' Changed Everything: Uncovering and Responding to the tj-actions Supply Chain Breach
  Location: TBD
  Speaker: Varun Sharma, Speaker: Ashish Kurmi
  Tracks:
  Malware,
  Threat Hunting & Incident Response
  Format: 40-Minute Briefings
  Location: Oceanside C, Level 2
  LATE
  
  Windows Hell No for Business
  Location: TBD
  Speaker: Baptiste David, Speaker: Tillmann Oßwald
  Tracks:
  Enterprise Security,
  Reverse Engineering
  Format: 40-Minute Briefings
  Location: South Seas C & D, Level 3
  LATE
- Wednesday | 12:00pm
- Briefings Lunch
  Location: TBD
  Track:
  Location: Bayside D & E, Level 1
  LATE
- Wednesday | 12:15pm
- Main Stage: IS YOUR CTEM MONEY-MINDED? Unveiling A New Approach to Cyber Risk Management: Moving from Attack Surface Management to Risk Surface Management
  Location: TBD
  Sponsor Speaker: Richard Seiersen
  Track:
  Main Stage
  Format: 25-Minute Main Stage
  Location: Oceanside A, Level 2
  LATE
- Wednesday | 12:50pm
- Main Stage: Proof, Not Promises: Redefining Cybersecurity for the Defense Industrial Base
  Location: TBD
  Sponsor Speaker: Snehal Antani, Sponsor Speaker: Bailey Bickley
  Track:
  Main Stage
  Format: 25-Minute Main Stage
  Location: Oceanside A, Level 2
  LATE
- Wednesday | 1:30pm
- "Dead Pixel Detected" - A Security Assessment of Apple's Graphics Subsystem
  Location: TBD
  Speaker: Yu Wang, Speaker: Weiteng Chen
  Tracks:
  Reverse Engineering,
  Platform Security
  Format: 40-Minute Briefings
  Location: South Pacific F, Level 0 - North Convention Center
  LATE
  
  Cybersecurity, AI, and Our Brains. A Fireside Chat with Cognitive Scientist and AI Expert Gary Marcus
  Location: TBD
  Speaker: Gary Marcus, Moderator: Nathan Hamiel
  Track:
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Mandalay Bay H, Level 2
  LATE
  
  Death by Noise: Abusing Alert Fatigue to Bypass the SOC (EDR Edition)
  Location: TBD
  Speaker: Rex Guo, Speaker: Khang Nguyen
  Tracks:
  Threat Hunting & Incident Response,
  Enterprise Security
  Format: 40-Minute Briefings
  Location: South Seas C & D, Level 3
  LATE
  
  ECS-cape – Hijacking IAM Privileges in Amazon ECS
  Location: TBD
  Speaker: Naor Haziz
  Tracks:
  Cloud Security,
  Network Security
  Format: 40-Minute Briefings
  Location: Jasmine A & E, Level 3
  LATE
  
  From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
  Location: TBD
  Speaker: Shu-Hao Tung
  Tracks:
  Network Security,
  Enterprise Security
  Format: 40-Minute Briefings
  Location: South Seas A & B, Level 3
  LATE
  
  Keynote: Chasing Shadows: Chronicles of Counter-Intelligence from the Citizen Lab
  Location: TBD
  Speaker: Ron Deibert
  Track:
  Keynote
  Format: 40-Minute Keynote
  Location: Oceanside A, Level 2
  LATE
  
  Out Of Control: How KCFG and KCET Redefine Control Flow Integrity in the Windows Kernel
  Location: TBD
  Speaker: Connor McGarr
  Tracks:
  Defense & Resilience,
  Exploit Development & Vulnerability Discovery
  Format: 40-Minute Briefings
  Location: Islander E & I, Level 0 - North Convention Center
  LATE
  
  Shade BIOS: Unleashing the Full Stealth of UEFI Malware
  Location: TBD
  Speaker: Kazuki Matsuo
  Tracks:
  Malware,
  Platform Security
  Format: 40-Minute Briefings
  Location: Oceanside C, Level 2
  LATE
  
  Tracking the Tractors: Analyzing Smart Farming Automation Systems for Fun and Profit
  Location: TBD
  Speaker: Felix Eberstaller, Speaker: Bernhard Rader, Contributor: Sebastian Ranftl
  Tracks:
  Cyber-Physical Systems & IoT,
  Hardware / Embedded
  Format: 40-Minute Briefings
  Location: Islander F & G, Level 0 - North Convention Center
  LATE
- Wednesday | 2:30pm
- Adversarial Fuzzer for Teleoperation Commands: Evaluating Autonomous Vehicle Resilience
  Location: TBD
  Speaker: Zhisheng Hu, Speaker: Shanit Gupta, Contributor: Cooper de Nicola
  Tracks:
  Defense & Resilience,
  Cyber-Physical Systems & IoT
  Format: 30-Minute Briefings
  Location: Islander E & I, Level 0 - North Convention Center
  LATE
  
  Azure's Weakest Link? How API Connections Spill Secrets
  Location: TBD
  Speaker: Haakon Gulbrandsrud
  Tracks:
  Cloud Security,
  Exploit Development & Vulnerability Discovery
  Format: 30-Minute Briefings
  Location: South Pacific F, Level 0 - North Convention Center
  LATE
  
  Burning, Trashing, Spacecraft Crashing: A Collection of Vulnerabilities That Will End Your Space Mission
  Location: TBD
  Speaker: Andrzej Olchawa, Speaker: Milenko Starcik, Contributor: Ricardo Fradique, Contributor: Ayman Boulaich
  Tracks:
  Exploit Development & Vulnerability Discovery,
  Application Security: Offense
  Format: 30-Minute Briefings
  Location: Mandalay Bay H, Level 2
  LATE
  
  Digital Dominoes: Scanning the Internet to Expose Systemic Cyber Risk
  Location: TBD
  Speaker: Morgan Hervé-Mignucci
  Tracks:
  Policy,
  Enterprise Security
  Format: 30-Minute Briefings
  Location: South Seas A & B, Level 3
  LATE
  
  LLMDYara: LLMs-Driven Automated YARA Rules Generation with Explainable File Features and DNAHash
  Location: TBD
  Speaker: Xiaochen Wang, Speaker: Yiping Liu, Contributor: Xiaoman Wang, Contributor: Cong Cheng
  Tracks:
  Malware,
  AI, ML, & Data Science
  Format: 30-Minute Briefings
  Location: Jasmine A & E, Level 3
  LATE
  
  Pwning User Phishing Training Through Scientific Lure Crafting
  Location: TBD
  Speaker: Christian Dameff, Speaker: Ariana Mirian
  Track:
  Human Factors
  Format: 30-Minute Briefings
  Location: Islander F & G, Level 0 - North Convention Center
  LATE
  
  Thinking Outside the Sink: How Tree-of-AST Redefines the Boundaries of Dataflow Analysis
  Location: TBD
  Speaker: Sasha Zyuzin, Speaker: Ruikai Peng
  Tracks:
  AI, ML, & Data Science,
  Application Security: Defense
  Format: 30-Minute Briefings
  Location: Oceanside C, Level 2
  LATE
  
  Turning Camera Surveillance on its Axis
  Location: TBD
  Speaker: Noam Moshe
  Tracks:
  Cyber-Physical Systems & IoT,
  Exploit Development & Vulnerability Discovery
  Format: 30-Minute Briefings
  Location: Oceanside A, Level 2
  LATE
  
  Vaulted Severance: Your Secrets Are Now Outies
  Location: TBD
  Speaker: Shahar Tal, Speaker: Yarden Porat
  Tracks:
  Enterprise Security,
  Reverse Engineering
  Format: 30-Minute Briefings
  Location: South Seas C & D, Level 3
  LATE
- Wednesday | 3:00pm
- Briefings Afternoon Refreshment Break
  Location: TBD
  Track:
  Location: Foyer Areas, Levels 0 2 & 3
  LATE
- Wednesday | 3:20pm
- Amplify and Annihilate: Discovering and Exploiting Vulnerable Tunnelling Hosts
  Location: TBD
  Speaker: Angelos Beitis, Speaker: Mathy Vanhoef
  Track:
  Network Security
  Format: 40-Minute Briefings
  Location: South Pacific F, Level 0 - North Convention Center
  LATE
  
  Autonomous Timeline Analysis and Threat Hunting: An AI Agent for Timesketch
  Location: TBD
  Speaker: Alex Kantchelian, Speaker: Maarten van Dantzig, Contributor: Diana Kramer
  Tracks:
  Threat Hunting & Incident Response,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Mandalay Bay H, Level 2
  LATE
  
  Booting into Breaches: Hunting Windows SecureBoot's Remote Attack Surfaces
  Location: TBD
  Speaker: Jietao Yang
  Tracks:
  Exploit Development & Vulnerability Discovery,
  Platform Security
  Format: 40-Minute Briefings
  Location: Islander E & I, Level 0 - North Convention Center
  LATE
  
  Bypassing PQC Signature Verification with Fault Injection: Dilithium, XMSS, SPHINCS+
  Location: TBD
  Speaker: Fikret Garipay
  Tracks:
  Cryptography,
  Hardware / Embedded
  Format: 40-Minute Briefings
  Location: Islander F & G, Level 0 - North Convention Center
  LATE
  
  Hackers Dropping Mid-Heist Selfies: LLM Identifies Information Stealer Infection Vector and Extracts IoCs
  Location: TBD
  Speaker: Estelle Ruellan, Speaker: Olivier Bilodeau
  Tracks:
  Malware,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Oceanside C, Level 2
  LATE
  
  HTTP/1.1 Must Die! The Desync Endgame
  Location: TBD
  Speaker: James Kettle
  Tracks:
  Application Security: Offense,
  Application Security: Defense
  Format: 40-Minute Briefings
  Location: Oceanside A, Level 2
  LATE
  
  The 5G Titanic
  Location: TBD
  Speaker: Altaf Shaik, Contributor: Robert Jaschek
  Tracks:
  Mobile,
  Network Security
  Format: 40-Minute Briefings
  Location: Jasmine A & E, Level 3
  LATE
  
  Universal and Context-Independent Triggers for Precise Control of LLM Outputs
  Location: TBD
  Speaker: Jiashuo Liang, Contributor: Guancheng Li
  Track:
  AI, ML, & Data Science
  Format: 30-Minute Briefings
  Location: South Seas A & B, Level 3
  LATE
  
  Use and Abuse of Personal Information -- Politics Edition
  Location: TBD
  Speaker: Alan Michaels, Speaker: Jared Byers
  Tracks:
  Privacy,
  Policy
  Format: 40-Minute Briefings
  Location: South Seas C & D, Level 3
  LATE
- Wednesday | 4:20pm
- Advanced Active Directory to Entra ID Lateral Movement Techniques
  Location: TBD
  Speaker: Dirk-jan Mollema
  Tracks:
  Cloud Security,
  Enterprise Security
  Format: 40-Minute Briefings
  Location: South Seas A & B, Level 3
  LATE
  
  AI Enterprise Compromise - 0click Exploit Methods
  Location: TBD
  Speaker: Michael Bargury, Speaker: Tamir Ishay Sharbat
  Tracks:
  Defense & Resilience,
  Enterprise Security
  Format: 40-Minute Briefings
  Location: Oceanside C, Level 2
  LATE
  
  Derandomizing the Location of Security-Critical Kernel Objects in the Linux Kernel
  Location: TBD
  Speaker: Lukas Maar, Speaker: Lukas Giner
  Tracks:
  Exploit Development & Vulnerability Discovery,
  Cloud Security
  Format: 30-Minute Briefings
  Location: South Pacific F, Level 0 - North Convention Center
  LATE
  
  Firewalls Under Fire: China's 5+ Year Campaign to Penetrate Perimeter Network Defenses
  Location: TBD
  Speaker: Andrew Brandt
  Tracks:
  Threat Hunting & Incident Response,
  Enterprise Security
  Format: 40-Minute Briefings
  Location: Mandalay Bay H, Level 2
  LATE
  
  Hacking the Status Quo: Tales From Leading Women in Cybersecurity
  Location: TBD
  Panelist: Valentina Palmiotti, Panelist: Kymberlee Price, Panelist: Chi-en (Ashley) Shen, Panelist: Natalie Silvanovich, Moderator: Vandana Verma
  Track:
  Leadership
  Format: 40-Minute Briefings
  Location: South Seas C & D, Level 3
  LATE
  
  Invitation Is All You Need! Invoking Gemini for Workspace Agents with a Simple Google Calendar Invite
  Location: TBD
  Speaker: Ben Nassi, Speaker: Or Yair, Speaker: Stav Cohen
  Track:
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Oceanside A, Level 2
  LATE
  
  Leveraging Jamf for Red Teaming in Enterprise Environments
  Location: TBD
  Speaker: Lance Cain, Speaker: Daniel Mayer
  Track:
  Enterprise Security
  Format: 40-Minute Briefings
  Location: Islander E & I, Level 0 - North Convention Center
  LATE
  
  Not Sealed: Practical Attacks on Nostr, a Decentralized Censorship-Resistant Protocol
  Location: TBD
  Speaker: Hayato Kimura, Contributor: Ryoma Ito, Contributor: Kazuhiko Minematsu, Contributor: Shogo Shiraki, Contributor: Takanori Isobe
  Tracks:
  Cryptography,
  Application Security: Offense
  Format: 40-Minute Briefings
  Location: Islander F & G, Level 0 - North Convention Center
  LATE
  
  Smashing Model Scanners: Advanced Bypass Techniques and a Novel Detection Approach
  Location: TBD
  Speaker: Itay Ravia
  Tracks:
  Application Security: Defense,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Jasmine A & E, Level 3
  LATE
- Thursday | 8:00am
- Briefings Breakfast
  Location: TBD
  Track:
  Location: Michelob ULTRA Arena, Concourse Level
  LATE
- Thursday | 9:00am
- Keynote: The New Frontline: Cyber on the Precipice
  Location: TBD
  Speaker: Nicole Perlroth
  Track:
  Keynote
  Format: 60-Minute Keynote
  Location: Michelob ULTRA Arena, Concourse Level
  LATE
- Thursday | 10:20am
- Briefings Policy Track Meetup 2: Panel & Conversation with Senior Policy Makers
  Location: TBD
  Moderator: Jason Healey
  Track:
  Policy
  Format: 40-Minute Briefings
  Location: Breakers B, Level 2
  LATE
  
  Diving into Windows HTTP: Unveiling Hidden Preauth Vulnerabilities in Windows HTTP Services (PRE-RECORDED)
  Location: TBD
  Speaker: Qibo Shi, Speaker: Victor V, Contributor: Wei Xiao, Contributor: Zhiniang Peng
  Tracks:
  Network Security,
  Exploit Development & Vulnerability Discovery
  Format: 40-Minute Briefings
  Location: Jasmine A & E, Level 3
  LATE
  
  Evil Digital Twin, Too: The First 30 Months of Psychological Manipulation of Humans by AI
  Location: TBD
  Speaker: Ben D. Sawyer, Speaker: Matthew Canham
  Tracks:
  Human Factors,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: South Seas A & B, Level 3
  LATE
  
  FACADE: High-Precision Insider Threat Detection Using Contrastive Learning
  Location: TBD
  Speaker: Alex Kantchelian, Speaker: Elie Bursztein, Contributor: Birkett Huber, Contributor: Casper Neo, Contributor: Sadegh Momeni, Contributor: Yanis Pavlidis, Contributor: Ryan Stevens
  Tracks:
  Enterprise Security,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Oceanside A, Level 2
  LATE
  
  Hack to the Future: Owning AI-Powered Tools with Old School Vulns
  Location: TBD
  Speaker: Nathan Hamiel, Speaker: Nils Amiet
  Tracks:
  Application Security: Offense,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Mandalay Bay H, Level 2
  LATE
  
  Kernel-Enforced DNS Exfiltration Security: Framework Built for Cloud Environments to Stop Data Breaches via DNS at Scale
  Location: TBD
  Speaker: Vedang Parasnis
  Tracks:
  Cloud Security,
  Enterprise Security
  Format: 40-Minute Briefings
  Location: Islander F & G, Level 0 - North Convention Center
  LATE
  
  Keynote: Threat Modeling and Constitutional Law
  Location: TBD
  Speaker: Jennifer Granick
  Track:
  Keynote
  Format: 40-Minute Keynote
  Location: Oceanside D, Level 2
  LATE
  
  Lost in Translation: Exploiting Unicode Normalization
  Location: TBD
  Speaker: Ryan Barnett, Speaker: Isabella Barnett
  Tracks:
  Application Security: Defense,
  Application Security: Offense
  Format: 40-Minute Briefings
  Location: Islander E & I, Level 0 - North Convention Center
  LATE
  
  No VPN Needed? Cryptographic Attacks Against the OPC UA Protocol
  Location: TBD
  Speaker: Tom Tervoort
  Tracks:
  Cryptography,
  Cyber-Physical Systems & IoT
  Format: 40-Minute Briefings
  Location: Oceanside C, Level 2
  LATE
  
  Peril at the Plug: Investigating EV Charger Security and Safety Failures
  Location: TBD
  Speaker: Jonathan Andersson, Speaker: Thanos Kaliyanakis
  Tracks:
  Cyber-Physical Systems & IoT,
  Hardware / Embedded
  Format: 40-Minute Briefings
  Location: South Seas C & D, Level 3
  LATE
  
  XUnprotect: Reverse Engineering macOS XProtect Remediator
  Location: TBD
  Speaker: Koh Nakagawa
  Tracks:
  Reverse Engineering,
  Malware
  Format: 40-Minute Briefings
  Location: South Pacific F, Level 0 - North Convention Center
  LATE
- Thursday | 11:00am
- Briefings Morning Refreshment Break
  Location: TBD
  Track:
  Location: Foyer Areas, Levels 0 2 & 3
  LATE
- Thursday | 11:20am
- AI Agents for Offsec with Zero False Positives
  Location: TBD
  Speaker: Brendan Dolan-Gavitt
  Track:
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: South Pacific F, Level 0 - North Convention Center
  LATE
  
  Clustered Points of Failure - Attacking Windows Server Failover Clusters
  Location: TBD
  Speaker: Garrett Foster
  Track:
  Enterprise Security
  Format: 40-Minute Briefings
  Location: Oceanside C, Level 2
  LATE
  
  Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications
  Location: TBD
  Speaker: Fengyu Liu, Speaker: YouKun Shi, Contributor: Tian Chen, Contributor: Bocheng Xiang, Contributor: Junyao He, Contributor: Qi Li, Contributor: Guangliang Yang, Contributor: Yuan Zhang, Contributor: Min Yang
  Tracks:
  Application Security: Offense,
  Exploit Development & Vulnerability Discovery
  Format: 30-Minute Briefings
  Location: Jasmine A & E, Level 3
  LATE
  
  E-Trojans: Ransomware, Tracking, DoS, and Data Leaks on Xiaomi Electric Scooters
  Location: TBD
  Speaker: Marco Casagrande, Speaker: Daniele Antonioli
  Tracks:
  Cyber-Physical Systems & IoT,
  Hardware / Embedded
  Format: 40-Minute Briefings
  Location: South Seas C & D, Level 3
  LATE
  
  How to Secure Unique Ecosystem Shipping 1 Billion+ Cores?
  Location: TBD
  Speaker: Adam Zabrocki, Speaker: Marko Mitic
  Tracks:
  Hardware / Embedded,
  Platform Security
  Format: 40-Minute Briefings
  Location: Oceanside A, Level 2
  LATE
  
  If Google Uses It to Find Webpages, We Can Use It to Find Fraudsters: TF-IDF for Real-Time Fraud Detection
  Location: TBD
  Speaker: David Mahdi, Speaker: Ido Rozen
  Tracks:
  Threat Hunting & Incident Response,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Islander E & I, Level 0 - North Convention Center
  LATE
  
  Protecting Small Organizations in the Era of AI Bots
  Location: TBD
  Speaker: Rama Hoetzlein
  Tracks:
  Defense & Resilience,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Islander F & G, Level 0 - North Convention Center
  LATE
  
  Uncovering 'NASty' 5G Baseband Vulnerabilities through Dependency-Aware Fuzzing
  Location: TBD
  Speaker: Ali Ranjbar, Speaker: Tianchang Yang, Contributor: Kai Tu, Contributor: Saaman Khalilollahi, Contributor: Kanika Gupta, Contributor: Syed Rafiul Hussain
  Tracks:
  Mobile,
  Hardware / Embedded
  Format: 40-Minute Briefings
  Location: Mandalay Bay H, Level 2
  LATE
  
  Your Traffic Doesn't Lie: Unmasking Supply Chain Attacks via Application Behaviour
  Location: TBD
  Speaker: Colin Estep, Speaker: Dagmawi Mulugeta
  Tracks:
  Application Security: Defense,
  Threat Hunting & Incident Response
  Format: 40-Minute Briefings
  Location: South Seas A & B, Level 3
  LATE
- Thursday | 12:00pm
- Briefings Lunch
  Location: TBD
  Track:
  Location: Bayside D & E, Level 1
  LATE
- Thursday | 12:15pm
- Main Stage: Unmasking Cyber Villains: How Microsoft Stays Ahead of the World's Most Dangerous Hackers
  Location: TBD
  Sponsor Speaker: Aarti Borkar, Sponsor Speaker: Andrew Rapp, Speaker: Simeon Kakpovi, Sponsor Speaker: Sherrod DeGrippo
  Track:
  Main Stage
  Format: 25-Minute Main Stage
  Location: Oceanside A, Level 2
  LATE
- Thursday | 12:50pm
- Main Stage: Beyond the Limits: Transforming the SOC to Tackle Modern Challenges
  Location: TBD
  Speaker: Peter Prizio
  Track:
  Main Stage
  Format: 25-Minute Main Stage
  Location: Oceanside A, Level 2
  LATE
- Thursday | 1:30pm
- 2 Cops 2 Broadcasting: TETRA End-To-End Under Scrutiny
  Location: TBD
  Speaker: Carlo Meijer, Speaker: Wouter Bokslag, Speaker: Jos Wetzels
  Tracks:
  Cryptography,
  Hardware / Embedded
  Format: 40-Minute Briefings
  Location: South Pacific F, Level 0 - North Convention Center
  LATE
  
  Anomaly Detection Betrayed Us, so We Gave It a New Job: Enhancing Command Line Classification with Benign Anomalous Data
  Location: TBD
  Speaker: Ben Gelman, Speaker: Sean Bergeron
  Track:
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Oceanside C, Level 2
  LATE
  
  Consent & Compromise: Abusing Entra OAuth for Fun and Access to Internal Microsoft Applications
  Location: TBD
  Speaker: Vaisha Bernard
  Tracks:
  Cloud Security,
  Exploit Development & Vulnerability Discovery
  Format: 40-Minute Briefings
  Location: South Seas A & B, Level 3
  LATE
  
  Decoding Signal: Understanding the Real Privacy Guarantees of E2EE
  Location: TBD
  Speaker: Ibrahim El-sayed
  Tracks:
  Application Security: Offense,
  Cryptography
  Format: 40-Minute Briefings
  Location: South Seas C & D, Level 3
  LATE
  
  Keynote: From Slide Rules to GenAi - Musings of a Graybeard Public Servant on What's Changing, What's Not, and What Should
  Location: TBD
  Speaker: Chris Inglis
  Track:
  Keynote
  Format: 60-Minute Keynote
  Location: Oceanside A, Level 2
  LATE
  
  Lost & Found: The Hidden Risks of Account Recovery in a Passwordless Future
  Location: TBD
  Speaker: Sid Rao, Speaker: Gabriela Sonkeri, Contributor: Amel Bourdoucen, Contributor: Janne Lindqvist
  Tracks:
  Human Factors,
  Policy
  Format: 40-Minute Briefings
  Location: Islander F & G, Level 0 - North Convention Center
  LATE
  
  More Flows, More Bugs: Empowering SAST with LLMs and Customized DFA
  Location: TBD
  Speaker: Yuan Luo, Speaker: Zhaojun Chen, Contributor: Yi Sun, Contributor: Rhettxie Rhettxie
  Tracks:
  Application Security: Defense,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Jasmine A & E, Level 3
  LATE
  
  Training Specialist Models: Automating Malware Development
  Location: TBD
  Speaker: Kyle Avery
  Tracks:
  Malware,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Islander E & I, Level 0 - North Convention Center
  LATE
  
  Turning the Tables on GlobalProtect: Use and Abuse of Palo Alto's Remote Access Solution
  Location: TBD
  Speaker: Alex Bourla, Contributor: Graham Brereton
  Tracks:
  Enterprise Security,
  Network Security
  Format: 40-Minute Briefings
  Location: Mandalay Bay H, Level 2
  LATE
- Thursday | 2:30pm
- BinWhisper: LLM-Driven Reasoning for Automated Vulnerability Discovery Behind Hall-of-Fame
  Location: TBD
  Speaker: Qinrun Dai, Speaker: Yifei Xie
  Tracks:
  Exploit Development & Vulnerability Discovery,
  AI, ML, & Data Science
  Format: 30-Minute Briefings
  Location: Islander F & G, Level 0 - North Convention Center
  LATE
  
  Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange
  Location: TBD
  Speaker: Pinji Chen, Contributor: Jianjun Chen, Contributor: Qi Wang, Contributor: Mingming Zhang, Contributor: Haixin Duan
  Tracks:
  Application Security: Offense,
  Network Security
  Format: 30-Minute Briefings
  Location: Jasmine A & E, Level 3
  LATE
  
  Exploiting DNS for Stealthy User Tracking
  Location: TBD
  Speaker: Bela Genge, Speaker: Ioan Padurean, Contributor: Dan Macovei
  Tracks:
  Privacy,
  Network Security
  Format: 30-Minute Briefings
  Location: South Pacific F, Level 0 - North Convention Center
  LATE
  
  Let LLM Learn: When Your Static Analyzer Actually 'Gets It'
  Location: TBD
  Speaker: Zong Cao, Contributor: Zhengzi Xu, Contributor: Yeqi Fu, Contributor: Yuqiang Sun, Contributor: Kaixuan Li, Contributor: Yang Liu
  Tracks:
  AI, ML, & Data Science,
  Application Security: Offense
  Format: 30-Minute Briefings
  Location: Oceanside C, Level 2
  LATE
  
  Open RAN, Open Risk: Uncovering Threats and Exposing Vulnerabilities in Next-Gen Cellular RAN
  Location: TBD
  Speaker: Tianchang Yang, Speaker: Kai Tu, Contributor: Syed Md Mukit Rashid, Contributor: Ali Ranjbar, Contributor: Gang Tan, Contributor: Syed Rafiul Hussain
  Track:
  Mobile
  Format: 30-Minute Briefings
  Location: South Seas A & B, Level 3
  LATE
  
  Racing for Privilege: Leaking Privileged Memory From Any Intel System Using a Microarchitectural Race Condition
  Location: TBD
  Speaker: Sandro Rüegge, Speaker: Johannes Wikner
  Tracks:
  Platform Security,
  Exploit Development & Vulnerability Discovery
  Format: 30-Minute Briefings
  Location: Mandalay Bay H, Level 2
  LATE
  
  Smart Charging, Smarter Hackers: The Unseen Risks of ISO 15118
  Location: TBD
  Speaker: Salvatore Gariuolo
  Tracks:
  Policy,
  Cyber-Physical Systems & IoT
  Format: 30-Minute Briefings
  Location: South Seas C & D, Level 3
  LATE
  
  Vulnerability Haruspicy: Picking Out Risk Signals from Scoring System Entrails
  Location: TBD
  Speaker: Tod Beardsley
  Tracks:
  Policy,
  Threat Hunting & Incident Response
  Format: 30-Minute Briefings
  Location: Islander E & I, Level 0 - North Convention Center
  LATE
  
  Watch Your (Lock)Step: Glitching into Automotive Processors
  Location: TBD
  Speaker: Thomas 'stacksmashing' Roth
  Tracks:
  Hardware / Embedded,
  Cyber-Physical Systems & IoT
  Format: 30-Minute Briefings
  Location: Oceanside A, Level 2
  LATE
- Thursday | 3:00pm
- Briefings Afternoon Refreshment Break
  Location: TBD
  Track:
  Location: Foyer Areas, Levels 0 2 & 3
  LATE
- Thursday | 3:20pm
- Behind the Screen: Unmasking North Korean IT Workers' Operations and Infrastructure
  Location: TBD
  Speaker: SttyK SttyK
  Tracks:
  Threat Hunting & Incident Response,
  Enterprise Security
  Format: 40-Minute Briefings
  Location: South Pacific F, Level 0 - North Convention Center
  LATE
  
  Coroutine Frame-Oriented Programming: Breaking Control Flow Integrity by Abusing Modern C++
  Location: TBD
  Speaker: Marcos Bajo, Contributor: Christian Rossow
  Tracks:
  Application Security: Offense,
  Exploit Development & Vulnerability Discovery
  Format: 40-Minute Briefings
  Location: South Seas A & B, Level 3
  LATE
  
  Pay Attention to the Clue: Clue-Driven Reverse Engineering by LLM in Real-World Malware Analysis
  Location: TBD
  Speaker: Tien-Chih Lin, Speaker: Wei Chieh Chao, Contributor: Zhao-Min Chen
  Tracks:
  Reverse Engineering,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: South Seas C & D, Level 3
  LATE
  
  QUACK: Hindering Deserialization Attacks via Static Duck Typing
  Location: TBD
  Speaker: Neophytos Christou, Speaker: Andreas Kellas
  Track:
  Application Security: Defense
  Format: 40-Minute Briefings
  Location: Islander E & I, Level 0 - North Convention Center
  LATE
  
  Safe Harbor or Hostile Waters: Unveiling the Hidden Perils of the TorchScript Engine in PyTorch (PRE-RECORDED)
  Location: TBD
  Speaker: Ji'an Zhou, Speaker: Li'shuo Song
  Tracks:
  AI, ML, & Data Science,
  Application Security: Offense
  Format: 40-Minute Briefings
  Location: Jasmine A & E, Level 3
  LATE
  
  Securing America: Readiness, Response, and Resilience for Critical Infrastructure Defense
  Location: TBD
  Speaker: Chris Butera, Speaker: Bob Costello, Speaker: Frank Cilluffo
  Track:
  Format: 40-Minute Keynote
  Location: Oceanside D, Level 2
  LATE
  
  The 11th Annual Black Hat USA Network Operations Center (NOC) Report
  Location: TBD
  Speaker: Neil (Grifter) Wyler, Speaker: Bart Stump
  Tracks:
  Network Security,
  Application Security: Defense
  Format: 40-Minute Briefings
  Location: Oceanside A, Level 2
  LATE
  
  Weaponization of Cellular Based IoT Technology – Leveraging Smart Devices to Gain a Foothold
  Location: TBD
  Speaker: Deral Heiland, Speaker: Carlota Bindner
  Tracks:
  Hardware / Embedded,
  Network Security
  Format: 40-Minute Briefings
  Location: Oceanside C, Level 2
  LATE
  
  Weaponizing Apple AI for Offensive Operations
  Location: TBD
  Speaker: Hariharan Shanmugam
  Tracks:
  Malware,
  AI, ML, & Data Science
  Format: 40-Minute Briefings
  Location: Mandalay Bay H, Level 2
  LATE
- Thursday | 4:20pm
- Locknote: Conclusions & Key Takeaways from Black Hat USA 2025
  Location: TBD
  Panelist: Heather Adkins, Panelist: Daniel Cuthbert, Panelist: Aanchal Gupta, Panelist: Jason Haddix, Moderator: Jeff Moss
  Track:
  Keynote
  Format: 40-Minute Keynote
  Location: Oceanside A, Level 2
  LATE

Session Type(s)

Format(s)

Track(s)