Black Hat USA 2016 - Help Net Security
Summary: Help Net Security compiled a set of podcast interviews and presentations from Black Hat USA 2016 in Las Vegas, covering topics including FourV Systems' GreySpark tool for measuring IT security health, cyber security and risk management trends, and how corporate IT is being stretched thin. The collection also covers the HEIST vulnerability presented by Mathy Vanhoef and Tom Van Goethem, research showing malicious code can be hidden in digitally signed executables without invalidating the certificate, and a Microsoft-described extension of the "Evil Maid" attack that bypasses local Windows authentication to defeat full disk encryption.
Key Takeaway: Two of the items here undercut controls security leaders rely on: a signed certificate no longer guarantees an executable is clean, and local Windows authentication can be bypassed to defeat full disk encryption.
Read the original at Help Net Security ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026