#Defcon las vegas 2022 update#
#Defcon las vegas 2022 Pc#

#Defcon las vegas 2022 update#

ESET provided Black Hat attendees with an update on cyberattacks against Ukraine. Ukraine war and Log4j also were major themes at each of the conferences.

However, he did express pessimism that US cyber-defenses were too focused on nation state attackers versus more mundane and pressing concerns, in his estimation, such as ransomware. The main Black Hat keynote was from Chris Krebs, former Cybersecurity and Infrastructure Security Agency (CISA), who shared his optimism when it comes to the US approach to information security. Things keeping them up are SMS codes flunk MFA, an “invisible finger to take control” of your touchscreen device and a Microsoft hiccup when launching its Early Launch Antimalware (ELAM).

#Defcon las vegas 2022 Pc#

Found by Faraday Security and discussed at DEF CON, the eCos SDK is used in a variety of routers, access points and network repeaters, according to his report.įor fans of FUD, PC Magazine has a nice rundown of “ The 14 Scariest Things We Saw at Black Hat 2022“. Journalist Eduard Kovacs reported on a high-severity Realtek bug in the company’s eCos SDK. Researcher James Kettle debuted a new class of HTTP request smuggling attack that allowed him to compromise Amazon and Akamai, break TLS, and exploit Apache servers, according to reporting from Portswigger’s The Daily Swig. Belgian researcher Lennert Wouters revealed at Black Hat how he mounted a successful fault injection attack on a user terminal used to manage the satellite. Starlink, the satellite operated by SpaceX that provides internet access to over 36 countries, was shown vulnerable to a hack via a $25 modchip. Pen Test Partners revealed a flaw in the Electronic Flight Bag tablets used by some Boeing aircraft pilots that could have allowed an adversary to modify data “and cause pilots to make dangerous miscalculations,” according to a Reuters report. Video conferencing darling Zoom was highlighted at DEF CON by Patrick Wardle, founder of the Objective-See Foundation, for a hacking technique that allowed him, using the macOS version of Zoom, to elevated privileges and gain access to the entire macOS operating system.

Here is a roundup of leading research, themes and buzz from this year’s shows. Attendance for events was up from the previous year, which in 2021 was muted by lower attendance and COVID fears. The past week, while not ‘typical’, was a nod to normalcy for attendees. The week even included a rare Las Vegas flash flood (not a new DDoS technique) on Thursday creating chaos in one casinos. The weeklong collection of cybersecurity conferences featured an eclectic mix of attendees to learn, network, hack and have fun. There was nothing typical this year at BSides LV, Black Hat USA and DEF CON – also known collectively as Hacker Summer Camp.