Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Black Hat USA
August 1-6, 2020
Las Vegas, NV, USA
Black Hat Asia
September 29 - October 2, 2020
Singapore
Black Hat Europe
December 7-10, 2020
Virtual Event
6/27/2019
09:00 AM
Black Hat Staff
Black Hat Staff
Event Updates
50%
50%

Learn How Privacy Laws Can Be Used for Identity Theft at Black Hat USA

Attend Black Hat USA this summer and see how researchers are subverting the GDPR's privacy rules and detecting deep fakes with machine learning.

Even the most well-meaning cybersecurity laws and procedures can be subverted by a sufficiently devious mind, and there’s no better place to learn how they do it than Black Hat USA this summer. In fact, there’s a whole Human Factors track at the event that is dedicated to how human decisions affect the security of your organization, and how engineering and technology can help.

GDPArrrrr: Using Privacy Laws to Steal Identities is a good example. It’s a 50-minute Briefing about how the General Data Protection Regulation’s “Right of Access” provision (which gives individuals the right to access their personal data) can be easily abused by social engineers to steal sensitive information.

After a survey of more than 150 companies, a security researcher will demonstrate that organizations willingly provide highly sensitive information in response to GDPR right of access requests with little or no verification of the individual making the request, providing one of the most reliable general phishing attack typologies to date.

In Deconstructing the Phishing Campaigns that Target Gmail Users you’ll get a rare inside look at Gmail telemetry to illuminate the differences between phishing groups in terms of tactics and targets. Then, leveraging insights from the cognitive and neuro-science fields on user's susceptibility and decision-making, you’ll learn why different types of users fall for phishing and how those insights can be used to improve phishing protections.

And don’t miss out on Detecting Deep Fakes with Mice, a fascinating look at how researchers worked to train humans, mice, and machines to detect fake speech in "deep fake" videos, using a “deep fake” data set provided by Google. For machines, you'll look at two approaches based on machine learning: one based on game theory called generative adversarial networks (GAN), and one based on mathematical depth-wise convolutional neural networks (Xception). For biological systems, researchers gathered a broad range of human subjects as well as mice, which don't understand words but respond to the stimulus of sounds, and can be trained to recognize real vs. fake phonetic construction. Come to this Briefing and learn who did best: the mice or the machines!

Further information on these cutting-edge Briefings and many more are available now on the Black Hat USA Briefings page, which is live now with full details on this year's schedule!

Black Hat USA returns to the Mandalay Bay in Las Vegas August 3-8, 2019. For more information on what’s happening at the event and how to register, check out the Black Hat website.

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
Manchester United Suffers Cyberattack
Dark Reading Staff 11/23/2020
As 'Anywhere Work' Evolves, Security Will Be Key Challenge
Robert Lemos, Contributing Writer,  11/23/2020
Cloud Security Startup Lightspin Emerges From Stealth
Kelly Sheridan, Staff Editor, Dark Reading,  11/24/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-4626
PUBLISHED: 2020-11-30
IBM Cloud Pak for Security 1.3.0.1 (CP4S) could reveal sensitive information about the internal network to an authenticated user using a specially crafted HTTP request. IBM X-Force ID: 185362.
CVE-2020-4627
PUBLISHED: 2020-11-30
IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 185367.
CVE-2020-4696
PUBLISHED: 2020-11-30
IBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate session after logout which could allow an authenticated user to obtain sensitive information from the previous session. IBM X-Force ID: 186789.
CVE-2020-4900
PUBLISHED: 2020-11-30
IBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 190991.
CVE-2020-4624
PUBLISHED: 2020-11-30
IBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic algorithms during negotiation could allow an attacker to decrypt sensitive information.