Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Black Hat USA
August 1-6, 2020
Las Vegas, NV, USA
Black Hat Asia
September 29 - October 2, 2020
Singapore
Black Hat Europe
November 9-12, 2020
London UK
5/22/2019
09:00 AM
Black Hat Staff
Black Hat Staff
Event Updates
50%
50%

Learn to Hack Non-Competes & Sell 0-Days at Black Hat USA

Plus, hear from key figures about the history and the enduring influence of The Cult of the Dead Cow this August in Las Vegas.

The cybersecurity community is larger and more vibrant than ever, and Black Hat USA is the place to be if you want to learn all about it while you’re right in the thick of it.

There are some great opportunities among the crop of new Briefings recently confirmed for the Black Hat USA 2019 community track, which aims to provide a forum for idea sharing and discussion on relevant issues.

Selling 0-Days to Governments and Offensive Security Companies promises to give you a fascinating look inside a community which few understand: those in the business of selling 0-day vulnerabilities. In this 50-minute Briefing you’ll learn about a vulnerability brokerage company called Q-recon and get an inside look at how this market works, from the perspectives of researchers, brokers, and clients. You’ll also walk away with a better understanding of who’s selling 0-days and to whom, what the process is like, and how to sell 0-days yourself!

Hacking Your Non-Compete is a must-see if you’ve ever contemplated leaving one company to join another. In the course of this 50-minute Briefing you’ll get a practical rundown of the working details of non-compete agreements, operating agreements between tech company founders, and what to do when something goes wrong.

You’ll study real cases involving competing with a former employer, learn about soliciting work from a current client at your new company and how to protect intellectual property you bring to a new employer. You'll also learn from a computer forensics investigator where people typically go wrong and how to transition from one employer to the next, and from a technology and intellectual property attorney on the real legal outcomes of those cases.

Making Big Things Better the Dead Cow Way is a unique opportunity for Black Hat USA attendees to hear, firsthand, how The Cult of the Dead Cow shaped the culture and community of the entire security industry. In this session, three key figures from the 35-year-old group's history — Mudge Zatko, Chris Rioux, and Deth Vegetable — will discuss the cDc's evolution from teenage misfits into industry leaders, its many contributions, and the enduring lessons for other hackers out to make a difference.

They will be questioned by Joseph Menn, author of "Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World,” which will be published June 4. Notably, cDc Minister of Propaganda Deth Veggie will be appearing for the first time under his real name to discuss the group's formative years, how he engaged with the media for fame and infamy, and the current presidential bid of group alumnus Beto O’Rourke.

For more information about these Briefings and many more check out the Black Hat USA Briefings page, which is regularly updated with new content as we get closer to the event.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
How Attackers Could Use Azure Apps to Sneak into Microsoft 365
Kelly Sheridan, Staff Editor, Dark Reading,  3/24/2020
Malicious USB Drive Hides Behind Gift Card Lure
Dark Reading Staff 3/27/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-10940
PUBLISHED: 2020-03-27
Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.
CVE-2020-10939
PUBLISHED: 2020-03-27
Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.
CVE-2020-6095
PUBLISHED: 2020-03-27
An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.
CVE-2020-10817
PUBLISHED: 2020-03-27
The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued.
CVE-2020-10952
PUBLISHED: 2020-03-27
GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images.