Media Summary: AI red teaming has proven that eliminating prompt injection is a lost cause. Worse, many developers consider guardrails a ... Is there a security boundary between Active Directory and Entra ID in a hybrid environment? The answer to this question, while ... Windows Hello is the flagship of Microsoft's passwordless strategy. It is used to authenticate users, not just at login but also in new ...

Black Hat Usa 2025 Locknote - Detailed Analysis & Overview

AI red teaming has proven that eliminating prompt injection is a lost cause. Worse, many developers consider guardrails a ... Is there a security boundary between Active Directory and Entra ID in a hybrid environment? The answer to this question, while ... Windows Hello is the flagship of Microsoft's passwordless strategy. It is used to authenticate users, not just at login but also in new ... In our highly rated 2023 talk "Evil Digital Twin", we warned that large language models (LLMs) were exploiting the cognitive ... Anti-cheat is a gold mine of interesting, novel defenses—battle-hardened from years of attrition in a defender's worst nightmare. What would happen if I simply logged in to this internal Microsoft application with my own Microsoft account? Surely that would not ...

Enterprise vaults are meant to be the last line of defense – the trusted stronghold for your organization's most sensitive assets: ... The flexibility and power of large language models (LLMs) are now well understood, driving their integration into a wide array of ... For nearly a decade, traffic distribution systems (TDSs) have enabled cybercriminals to hide the true nature of their operations. Keynote: From Slide Rules to GenAi - Musings of a Graybeard Public Servant on What's Changing, What's Not, and What Should ... Compromising a well-protected enterprise used to require careful planning, proper resources, and the ability to execute.

Photo Gallery

Black Hat USA 2025 | Locknote: Conclusions & Key Takeaways from Black Hat USA 2025
Black Hat USA 2025 | Reinventing Agentic AI Security With Architectural Controls
Black Hat USA 2025 | Advanced Active Directory to Entra ID Lateral Movement Techniques
Black Hat USA 2025 | Windows Hell No for Business
Black Hat USA 2025 | The First 30 Months of Psychological Manipulation of Humans by AI
Black Hat USA 2025 | Watching the Watchers: Exploring and Testing Defenses of Anti-Cheat Systems
Locknote: Highlights & Key Takeaways from Black Hat Asia 2025
Black Hat USA 2025 | Abusing Entra OAuth for Fun and Access to Internal Microsoft Applications
Black Hat USA 2025 | Vaulted Severance: Your Secrets Are Now Outies
Black Hat USA 2025 | From Prompts to Pwns: Exploiting and Securing AI Agents
Black Hat USA 2025 | No Hoodies Here: Organized Crime in AdTech
Black Hat USA 2025 Keynote | From Slide Rules to GenAi
View Detailed Profile
Black Hat USA 2025 | Locknote: Conclusions & Key Takeaways from Black Hat USA 2025

Black Hat USA 2025 | Locknote: Conclusions & Key Takeaways from Black Hat USA 2025

Join

Black Hat USA 2025 | Reinventing Agentic AI Security With Architectural Controls

Black Hat USA 2025 | Reinventing Agentic AI Security With Architectural Controls

AI red teaming has proven that eliminating prompt injection is a lost cause. Worse, many developers consider guardrails a ...

Black Hat USA 2025 | Advanced Active Directory to Entra ID Lateral Movement Techniques

Black Hat USA 2025 | Advanced Active Directory to Entra ID Lateral Movement Techniques

Is there a security boundary between Active Directory and Entra ID in a hybrid environment? The answer to this question, while ...

Black Hat USA 2025 | Windows Hell No for Business

Black Hat USA 2025 | Windows Hell No for Business

Windows Hello is the flagship of Microsoft's passwordless strategy. It is used to authenticate users, not just at login but also in new ...

Black Hat USA 2025 | The First 30 Months of Psychological Manipulation of Humans by AI

Black Hat USA 2025 | The First 30 Months of Psychological Manipulation of Humans by AI

In our highly rated 2023 talk "Evil Digital Twin", we warned that large language models (LLMs) were exploiting the cognitive ...

Black Hat USA 2025 | Watching the Watchers: Exploring and Testing Defenses of Anti-Cheat Systems

Black Hat USA 2025 | Watching the Watchers: Exploring and Testing Defenses of Anti-Cheat Systems

Anti-cheat is a gold mine of interesting, novel defenses—battle-hardened from years of attrition in a defender's worst nightmare.

Locknote: Highlights & Key Takeaways from Black Hat Asia 2025

Locknote: Highlights & Key Takeaways from Black Hat Asia 2025

Join

Black Hat USA 2025 | Abusing Entra OAuth for Fun and Access to Internal Microsoft Applications

Black Hat USA 2025 | Abusing Entra OAuth for Fun and Access to Internal Microsoft Applications

What would happen if I simply logged in to this internal Microsoft application with my own Microsoft account? Surely that would not ...

Black Hat USA 2025 | Vaulted Severance: Your Secrets Are Now Outies

Black Hat USA 2025 | Vaulted Severance: Your Secrets Are Now Outies

Enterprise vaults are meant to be the last line of defense – the trusted stronghold for your organization's most sensitive assets: ...

Black Hat USA 2025 | From Prompts to Pwns: Exploiting and Securing AI Agents

Black Hat USA 2025 | From Prompts to Pwns: Exploiting and Securing AI Agents

The flexibility and power of large language models (LLMs) are now well understood, driving their integration into a wide array of ...

Black Hat USA 2025 | No Hoodies Here: Organized Crime in AdTech

Black Hat USA 2025 | No Hoodies Here: Organized Crime in AdTech

For nearly a decade, traffic distribution systems (TDSs) have enabled cybercriminals to hide the true nature of their operations.

Black Hat USA 2025 Keynote | From Slide Rules to GenAi

Black Hat USA 2025 Keynote | From Slide Rules to GenAi

Keynote: From Slide Rules to GenAi - Musings of a Graybeard Public Servant on What's Changing, What's Not, and What Should ...

Black Hat USA 2025 | AI Enterprise Compromise - 0click Exploit Methods

Black Hat USA 2025 | AI Enterprise Compromise - 0click Exploit Methods

Compromising a well-protected enterprise used to require careful planning, proper resources, and the ability to execute.