Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Black Hat USA
July 31 - August 5, 2021
Las Vegas, NV, USA
SecTor
November 4 - October 30, 2021
Toronto, ON, Canada
Black Hat Europe
November 8-11, 2021
Virtual Event
5/22/2019
09:00 AM
Black Hat Staff
Black Hat Staff
Event Updates
50%
50%

Learn to Hack Non-Competes & Sell 0-Days at Black Hat USA

Plus, hear from key figures about the history and the enduring influence of The Cult of the Dead Cow this August in Las Vegas.

The cybersecurity community is larger and more vibrant than ever, and Black Hat USA is the place to be if you want to learn all about it while you’re right in the thick of it.

There are some great opportunities among the crop of new Briefings recently confirmed for the Black Hat USA 2019 community track, which aims to provide a forum for idea sharing and discussion on relevant issues.

Selling 0-Days to Governments and Offensive Security Companies promises to give you a fascinating look inside a community which few understand: those in the business of selling 0-day vulnerabilities. In this 50-minute Briefing you’ll learn about a vulnerability brokerage company called Q-recon and get an inside look at how this market works, from the perspectives of researchers, brokers, and clients. You’ll also walk away with a better understanding of who’s selling 0-days and to whom, what the process is like, and how to sell 0-days yourself!

Hacking Your Non-Compete is a must-see if you’ve ever contemplated leaving one company to join another. In the course of this 50-minute Briefing you’ll get a practical rundown of the working details of non-compete agreements, operating agreements between tech company founders, and what to do when something goes wrong.

You’ll study real cases involving competing with a former employer, learn about soliciting work from a current client at your new company and how to protect intellectual property you bring to a new employer. You'll also learn from a computer forensics investigator where people typically go wrong and how to transition from one employer to the next, and from a technology and intellectual property attorney on the real legal outcomes of those cases.

Making Big Things Better the Dead Cow Way is a unique opportunity for Black Hat USA attendees to hear, firsthand, how The Cult of the Dead Cow shaped the culture and community of the entire security industry. In this session, three key figures from the 35-year-old group's history — Mudge Zatko, Chris Rioux, and Deth Vegetable — will discuss the cDc's evolution from teenage misfits into industry leaders, its many contributions, and the enduring lessons for other hackers out to make a difference.

They will be questioned by Joseph Menn, author of "Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World,” which will be published June 4. Notably, cDc Minister of Propaganda Deth Veggie will be appearing for the first time under his real name to discuss the group's formative years, how he engaged with the media for fame and infamy, and the current presidential bid of group alumnus Beto O’Rourke.

For more information about these Briefings and many more check out the Black Hat USA Briefings page, which is regularly updated with new content as we get closer to the event.

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
Commentary
What the FedEx Logo Taught Me About Cybersecurity
Matt Shea, Head of Federal @ MixMode,  6/4/2021
Edge-DRsplash-10-edge-articles
A View From Inside a Deception
Sara Peters, Senior Editor at Dark Reading,  6/2/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-31811
PUBLISHED: 2021-06-12
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
CVE-2021-31812
PUBLISHED: 2021-06-12
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
CVE-2021-32552
PUBLISHED: 2021-06-12
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package apport hooks, it could expose private data to other local users.
CVE-2021-32553
PUBLISHED: 2021-06-12
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users.
CVE-2021-32554
PUBLISHED: 2021-06-12
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users.