Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Black Hat USA
August 1-6, 2020
Las Vegas, NV, USA
Black Hat Asia
September 29 - October 2, 2020
Singapore
Black Hat Europe
December 7-10, 2020
Virtual Event
3/17/2019
12:00 PM
Black Hat Staff
Black Hat Staff
Event Updates
50%
50%

Dont Miss these Intriguing Black Hat Asia Briefings

With two weeks to go, organizers would like to quickly highlight some Black Hat Asia Briefings that you may have overlooked!

Black Hat Asia kicks off in Singapore two weeks from today, and as you’re finalizing your schedule, organizers would like to quickly highlight some intriguing Briefings.

AcuTherm: A Hybrid Attack on Password Entry Based on Both Acoustic and Thermal Side-Channels” is an efficient (25 minutes!) look at the very real risks of password theft “side channels” in your organization.

While you may be familiar with thermal attacks (when someone uses a thermal camera to capture password data from a recently-used keyboard) and acoustic attacks (capturing password data by identifying the sounds of it being typed in), researchers will introduce you to a new class of hybrid attacks that combine respective powers (and advantages) of thermal and acoustic side-channels.

You’ll see the results firsthand, based on experiments with over 20 subjects using three common keyboards and many representative passwords. You will also get some useful insight on how to combat this novel side-channel attack.

In “Keep Everyone In Sync: Effective Approaches Borrowed from Open Source Communities” an experienced open-source community organizer will give you some practical advice about how to keep your team organized and informed.

It’s an intriguing 50-minute Briefing that will walk you through everything from bridging the gap between instant messaging clients and old-school tools like the Pine email client to how to collaborate offline using a special set of Danmaku tools. Don’t miss out!

And before you close out the show, make time to check out “Decisions and Revisions - The Ever Evolving Face of the Black Hat NOC”, the popular Friday afternoon session which lets attendees get up close and personal with the Black Hat Asia Network Operations Center.

This is a great Briefing to see because the Black Ha Asia team will walk you through the process of deciding what equipment and services they deploy on the Black Hat network, and the reasoning around those decisions.

They’ll also discuss the changes made when deploying and securing a network in the U.S., Europe, and Asia, and will share some of the behavioral differences they see in the attendees of those shows, both good and bad. There will be stories and stats  as well as a full debrief on this year’s show and what it means for the industry as a whole!

Black Hat Asia returns to the Marina Bay Sands in Singapore March 26-29, 2019. For more information on what's happening at the event and how to register, check out the Black Hat website.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
COVID-19: Latest Security News & Commentary
Dark Reading Staff 10/23/2020
7 Tips for Choosing Security Metrics That Matter
Ericka Chickowski, Contributing Writer,  10/19/2020
Russian Military Officers Unmasked, Indicted for High-Profile Cyberattack Campaigns
Kelly Jackson Higgins, Executive Editor at Dark Reading,  10/19/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-24847
PUBLISHED: 2020-10-23
A Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4. Due to a lack of CSRF protection in page_config_adv.php, an unauthenticated attacker can lure the victim to visit his website by social engineering or another attack vector. Due to this issue, an unauthenticat...
CVE-2020-24848
PUBLISHED: 2020-10-23
FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform a system-level (root) local privilege escalation, allowing an attacker to gain complete persistent access to the local system.
CVE-2020-5990
PUBLISHED: 2020-10-23
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in the ShadowPlay component which may lead to local privilege escalation, code execution, denial of service or information disclosure.
CVE-2020-25483
PUBLISHED: 2020-10-23
An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server.
CVE-2020-5977
PUBLISHED: 2020-10-23
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure.