Black Hat Usa 2025 Lost In Translation Exploiting Unicode Normalization

Summary

As web applications evolve, so do their data processing pipelines—handling This talk demonstrates new exploit techniques that leverage The flexibility and power of large language models (LLMs) are now well understood, driving their integration into a wide array of ... We transformed a single, isolated container in Azure Container Instances (ACI) for GPU into a full tenant-isolation breach and a ... While baseband modems are the unseen engines of cellular communication, their proprietary nature, closed-source development, ... In this talk, we will introduce a novel gradient-based prompt-injection technique that can generate universal triggers to manipulate ... Android key attestation provides a way for a device's secure hardware to verify that cryptographic material is in secure hardware, ... Many AI frameworks present attackers with a new attack potential by introducing unsafe serialization formats, such as Pickle and ... Control Flow Integrity (CFI) has emerged as the definitive defense against code-reuse attacks, enforcing strict execution flow ... Anomaly Detection Betrayed Us, so We Gave It a New Job: Enhancing Command Line Classification with Benign Anomalous ... Vulnerability discovery traditionally relies on two primary approaches: manual auditing and fuzzing. Each method possesses ... The macOS threat landscape has changed considerably in recent years with the ever-increasing prevalence of macOS malware. The firmware and secrets in automotive processors (such as in ECUs & co) are often protected using a variety of hardware ... Nostr is an emerging open-source, decentralized social networking protocol with over 1.1 million users—and a critical blind spot ...