Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Black Hat USA
July 31 - August 5, 2021
Las Vegas, NV, USA
SecTor
November 4 - October 30, 2021
Toronto, ON, Canada
Black Hat Europe
November 8-11, 2021
Virtual Event
5/22/2019
09:00 AM
Black Hat Staff
Black Hat Staff
Event Updates
50%
50%

Learn to Hack Non-Competes & Sell 0-Days at Black Hat USA

Plus, hear from key figures about the history and the enduring influence of The Cult of the Dead Cow this August in Las Vegas.

The cybersecurity community is larger and more vibrant than ever, and Black Hat USA is the place to be if you want to learn all about it while you’re right in the thick of it.

There are some great opportunities among the crop of new Briefings recently confirmed for the Black Hat USA 2019 community track, which aims to provide a forum for idea sharing and discussion on relevant issues.

Selling 0-Days to Governments and Offensive Security Companies promises to give you a fascinating look inside a community which few understand: those in the business of selling 0-day vulnerabilities. In this 50-minute Briefing you’ll learn about a vulnerability brokerage company called Q-recon and get an inside look at how this market works, from the perspectives of researchers, brokers, and clients. You’ll also walk away with a better understanding of who’s selling 0-days and to whom, what the process is like, and how to sell 0-days yourself!

Hacking Your Non-Compete is a must-see if you’ve ever contemplated leaving one company to join another. In the course of this 50-minute Briefing you’ll get a practical rundown of the working details of non-compete agreements, operating agreements between tech company founders, and what to do when something goes wrong.

You’ll study real cases involving competing with a former employer, learn about soliciting work from a current client at your new company and how to protect intellectual property you bring to a new employer. You'll also learn from a computer forensics investigator where people typically go wrong and how to transition from one employer to the next, and from a technology and intellectual property attorney on the real legal outcomes of those cases.

Making Big Things Better the Dead Cow Way is a unique opportunity for Black Hat USA attendees to hear, firsthand, how The Cult of the Dead Cow shaped the culture and community of the entire security industry. In this session, three key figures from the 35-year-old group's history — Mudge Zatko, Chris Rioux, and Deth Vegetable — will discuss the cDc's evolution from teenage misfits into industry leaders, its many contributions, and the enduring lessons for other hackers out to make a difference.

They will be questioned by Joseph Menn, author of "Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World,” which will be published June 4. Notably, cDc Minister of Propaganda Deth Veggie will be appearing for the first time under his real name to discuss the group's formative years, how he engaged with the media for fame and infamy, and the current presidential bid of group alumnus Beto O’Rourke.

For more information about these Briefings and many more check out the Black Hat USA Briefings page, which is regularly updated with new content as we get closer to the event.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-3351
PUBLISHED: 2021-08-02
OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page.
CVE-2021-34556
PUBLISHED: 2021-08-02
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.
CVE-2021-35477
PUBLISHED: 2021-08-02
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation that has an attacker-controlled valu...
CVE-2017-18113
PUBLISHED: 2021-08-02
The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who can trick a system administrator to import their malicious workflow to execute arbitrary code via a Remote Code Execution (RCE) vulnerability. The vulnerability allowed for v...
CVE-2021-32066
PUBLISHED: 2021-08-01
An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does not raise an exception when StartTLS fails with an an unknown response, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the c...