Any system built by humans can be exploited by humans, and in cybersecurity it pays to stay on top of the latest exploits. A great way to do that is to come to Black Hat Asia in Singapore next month, where security experts from around the world will show you how to pull off (and combat) cutting-edge exploits in modern browsers and operating systems.
Notably, researchers from the Tencent Security Xuanwu Lab will present a Briefing on “Attacking Browser Sandbox: Live Persistently and Prosperously” that offers you fresh perspective on the practical value and best methods of attacking modern browser sandboxes.
Despite their perceived impenetrability, security researchers have succeeded in doing things like stealing credentials and deploying side-channel attacks without disrupting the sandbox in browsers like Chrome, Edge, and Firefox -- but you’ll have to attend this Briefing to find out how they pulled it off.
“Winter is Coming Back: Defeating the Most Advanced Rowhammer Defenses to Gain Root and Kernel Privileges” promises to reveal a novel exploit capable of cracking the most advanced defense against rowhammer attacks. Whether you’re trying to defend against rowhammers or work out your own novel version, this Briefing will show you how an unprivileged user application can gain both root and kernel privileges -- all while being stealthier and more efficient than traditional rowhammer attacks.
Finally, don’t miss “How to Survive the Hardware Assisted Control-Flow Integrity Enforcement”, in which McAfee researchers will take you on a deep dive into the Intel CET (Control-flow Enforcement Technology), how it works against control-flow hijacking, and its implementation on the latest Windows 10 x 64 operating system. They’ll discuss possible ways to still achieve control-flow hijacking when CET is enabled and provide demonstrations for the attacks discussed.
Black Hat Asia returns to the Marina Bay Sands in Singapore March 26-29, 2019. For more information on what’s happening at the event and how to register, check out the Black Hat website.