Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Black Hat USA
July 31 - August 5, 2021
Las Vegas, NV, USA
November 4 - October 30, 2021
Toronto, ON, Canada
Black Hat Europe
November 8-11, 2021
Virtual Event
11:00 AM
Black Hat Staff
Black Hat Staff
Event Updates

Black Hat Asia 2015: And Three for the Road

Black Hat Asia 2015 is just around the corner, so now's the time to finalize your preps and make sure your plans are in order. You have until March 20 to enjoy the standard registration rate, so there's no time like the present! While you ponder that, cast your eyes over this final, grab-bag round-up of interesting Asia 2015 Briefings. There's a little bit of everything in this one.

Porting code sucks, so cross-platform frameworks can make life immeasurably easier for harried developers. This is especially true with today's proliferation of mobile platforms. Unfortunately this convenience comes at the loss of security, which is the topic of The Nightmare Behind the Cross-Platform Mobile Apps Dream. Marco Grassi and Sebastian Guerrero will explore and analyze the most popular cross-platform frameworks for mobile development, exposing the vulnerabilities and assessing the security implications.

Speaking of security implications, the ever-accelerating lifecycle of cloud instances demands we change and improve the way we secure them. When servers are installed, launched, and terminated, within minutes traditional processes such as periodic patches, vulnerability scanning, hardening, and forensics become impossible. From Zero to Secure in One Minute explores the implications of this brave new world, including the need for automated security processes and pre-boot patching. It will also introduce Cloudefigo, a new open-source tool to enable this accelerated security lifecycle. Remember, a secure cloud's a happy one.

Lastly, wireless systems and their radio signals, are everywhere: consumer, corporate, government, amateur -- widely deployed and often vulnerable. Hacking the Wireless World with Software Defined Radio - 2.0 will reveal just what sorts of information are buzzing all around us, and how to "blindly" analyze and reverse-engineer any such signal from the physical layer up. Cheap radios, open-source tools, crypto cracking, aircraft tracking, hunting down broadcast sources... sound like fun to you, too?

Black Hat Asia 2015 takes place next week, March 24 to 27, at the Marina Bay Sands in Singapore. If you're planning to come, it's high time to lock in your spot, which you can do here.

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Current Issue
Enterprise Cybersecurity Plans in a Post-Pandemic World
Download the Enterprise Cybersecurity Plans in a Post-Pandemic World report to understand how security leaders are maintaining pace with pandemic-related challenges, and where there is room for improvement.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
PUBLISHED: 2021-09-22
The Telefication WordPress plugin is vulnerable to Open Proxy and Server-Side Request Forgery via the ~/bypass.php file due to a user-supplied URL request value that gets called by a curl requests. This affects versions up to, and including, 1.8.0.
PUBLISHED: 2021-09-22
Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnerability has been fixe...
PUBLISHED: 2021-09-22
In Halibut versions prior to 4.4.7 there is a deserialisation vulnerability that could allow remote code execution on systems that already trust each other based on certificate verification.
PUBLISHED: 2021-09-22
In the Amazon AWS WorkSpaces client before 3.1.9 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework (CEF) --gpu-launcher argument.
PUBLISHED: 2021-09-22
Plastic SCM before mishandles the WebAdmin server management interface.