Wulfy—Speaker to the machinesA cool #blackhat2024 talk on using Wi-Fi routers for population #surveillance
TLDR; Every person with an iPhone is a spy for #bigdata.
YouTube
Steffen Voß#CoPilot: Wenn einem Sicherheit unwichtig ist, kann man da tolle Sachen mit machen.
Michael Bargury auf der #BlackHat2024:
https://www.youtube.com/watch?v=FH6P288i2PE
Living off Microsoft Copilot
CorelightCorelight’s NOC team faced a unique challenge at Black Hat USA 2024—detecting SSHAMBLE, a new SSH scanner introduced by HD Moore. By tapping into existing logs and Zeek metadata, we identified the tool’s fingerprint in real-time.
What happened next?
✔️ Real-time detection.
✔️ Discovering threats using old logs. ✅✅
✔️ Zeek metadata making sense of encrypted traffic. 🔍
🔗 Head to the blog to learn more: https://corelight.com/blog/black-hat-usa-2024-noc-learnings?utm_source=mstdn&utm_medium=organic-social&utm_campaign=blog&utm_adgroup=blackhat2024noc&utm_content=SSI
PentHertz🚀 Exciting News! We'll be presenting our RF Swift toolbox at #BlackHatEurope #Arsenal 2024! 📡⚡️
RF Swift is designed for RF Security assessments and HAM radio enthusiasts, offering flexibility and ease in deploying powerful RF tools. Stay tuned for more details! #CyberSecurity #HAMRadio #RFTools #BlackHat2024
🔗 https://www.blackhat.com/eu-24/arsenal/schedule/index.html#rf-swift-a-swifty-toolbox-for-all-wireless-assessments-41157
RF Swift is designed for RF Security assessments and HAM radio enthusiasts, offering flexibility and ease in deploying powerful RF tools. Stay tuned for more details! #CyberSecurity #HAMRadio #RFTools #BlackHat2024
🔗 https://www.blackhat.com/eu-24/arsenal/schedule/index.html#rf-swift-a-swifty-toolbox-for-all-wireless-assessments-41157
Benjamin Carr, Ph.D. 👨🏻💻🧬#Signal #Developer Explains Why Early Encrypted Messaging Tools Flopped
#MoxieMarlinspike criticized early #encryption software's user-unfriendly design at #BlackHat2024, admitting he and others initially failed to consider non-technical users' needs. Speaking with #BlackHat founder #JeffMoss, He said tools like #PrettyGoodPrivacy (#PGP) wrongly assumed users would adopt complex practices like keyservers and signing keys over dinner. "We were just wrong," Marlinspike said
https://www.pcmag.com/news/signal-developer-explains-why-early-encrypted-messaging-tools-flopped
#MoxieMarlinspike criticized early #encryption software's user-unfriendly design at #BlackHat2024, admitting he and others initially failed to consider non-technical users' needs. Speaking with #BlackHat founder #JeffMoss, He said tools like #PrettyGoodPrivacy (#PGP) wrongly assumed users would adopt complex practices like keyservers and signing keys over dinner. "We were just wrong," Marlinspike said
https://www.pcmag.com/news/signal-developer-explains-why-early-encrypted-messaging-tools-flopped
Marcel SIneM(S)USNoch kein Patch: Sicherheitsforscher beraubt Windows sämtlicher Schutzfunktionen | Security https://www.heise.de/news/Noch-kein-Patch-Sicherheitsforscher-beraubt-Windows-saemtlicher-Schutzfunktionen-9834479.html #BlackHat2024 #BlackHat24 #BlackHat #DefCon #DefCon32 #DefCon2024
Mit Domain-Based Authentication in unternehmensinterne Gruppen eindringen | iX Magazin https://www.heise.de/news/Mit-Domain-Based-Authentication-in-unternehmensinterne-Gruppen-eindringen-9830944.html #BlackHat #BlackHat2024 #BlackHat24
Anonymous 🐈️🐾☕🍵🏴🇵🇸 
A feature known as a Basic Service Set Identifier (BSSID) can be used to pinpoint and, in some cases, track user activity and location details, according to a research presented at #BHUSA. #BlackHat2024 #cybersecurity #infosec #ITsecurity https://www.scmagazine.com/news/black-hat-usa-wi-fi-tracking-flaw-puts-the-bs-in-bssid
O(SINT) PositiveOrange Tsai's Black Hat USA 2024 research revealed architectural vulnerabilities in Apache HTTP Server, identifying three types of "Confusion Attacks" exploiting inconsistencies between Httpd modules.
These led to 9 new vulnerabilities and 20 exploitation techniques, including bypassing access controls and arbitrary file access outside the web root. The findings highlight challenges in balancing backward compatibility with security in long-standing open-source projects.
Akamai proactively collaborated with Tsai before his presentation, implementing preemptive protections against these vulnerabilities in their App & API Protector web application firewall service.
Orange Tsai's Research findings: https://blog.orange.tw/2024/08/confusion-attacks-en.html
Blackhat Presentation: https://i.blackhat.com/BH-US-24/Presentations/US24-Orange-Confusion-Attacks-Exploiting-Hidden-Semantic-Thursday.pdf
Akami acknowledgement and mitigations: https://www.akamai.com/blog/security-research/2024-august-apache-waf-proactive-collaboration-orange-tsai-devcore
paepcke.de 
+ 
+ 🇪🇺Black Hat 2024: Secure Shells in Shambles [pdf]