A SSLippery Slope: Unraveling the Hidden Dangers of Certificate Misuse @BlackHatOfficialYT

Black Hat | A SSLippery Slope: Unraveling the Hidden Dangers of Certificate Misuse @BlackHatOfficialYT | Uploaded 7 months ago | Updated 11 hours ago
Digital signatures are fundamental for verifying the authenticity and integrity of untrusted data in the digital world. They ensure that software, firmware, and other digital content are not tampered with during transmission or at rest. Code signing certificates are significantly more challenging to obtain when compared to alternatives like SSL or S/MIME certificates. The latter only has a single criterion- proof of control over a domain, while the former requires significant validation of the publisher itself....

By: Bill Demirkapi

Full Abstract and Presentation Materials: blackhat.com/us-23/briefings/schedule/#a-sslippery-slope-unraveling-the-hidden-dangers-of-certificate-misuse-33364

Weaponizing Plain Text: ANSI Escape Sequences as a Forensic Nightmare

The Yandex Leak: How a Russian Search Giant Uses Consumer Data

Me and My Evil Digital Twin: The Psychology of Human Exploitation by AI Assistants

From BYOVD to a 0-day: Unveiling Advanced Exploits in Cyber Recruiting Scams

AutoSpill: Zero Effort Credential Stealing from Mobile Password Managers

Close Encounters of the Advanced Persistent Kind: Leveraging Rootkits for Post-Exploitation

What We Can Learn from Ukraines Cyber Defenders about Building a More Resilient Future

New Techniques for Split-Second DNS Rebinding

The Key to Remote Vehicle Control: Autonomous Driving Domain Controller