Hardware Vulnerabilities Courses and Certifications

Exploiting Modern Microarchitectures - Meltdown, Spectre, & Other Hardware Attacks

Explore modern microarchitecture vulnerabilities like Meltdown and Spectre. Learn about hardware attacks, their mitigations, and the industry's approach to balancing performance and security.

• YouTube
• 1 hour 24 minutes
• On-Demand
• Free Video

OWASP Foundation

Exploiting Hardware Glitches and Side Channels in Perfect Software

Uncover vulnerabilities in flawless software through hardware glitches and side-channel attacks. Learn advanced exploitation techniques for enhancing cybersecurity defenses.

• YouTube
• 51 minutes
• On-Demand
• Free Video

IEEE

Are We Susceptible to Rowhammer? An End-to-End Methodology for Cloud Providers

Comprehensive methodology for cloud providers to assess DRAM vulnerability to Rowhammer attacks, including near-optimal instruction sequences and row adjacency mapping techniques for modern Intel platforms.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Between Physical and Sofware: Fault Attacks, Side Channels, and Mitigations

Explore software-based fault attacks, including Rowhammer and Plundervolt, and their connections to transient-execution attacks. Implement attacks, learn mitigations, and understand the power of manipulating applications and devices.

• edX
• 10 weeks, 3-4 hours a week
• On-Demand
• Free Online Course (Audit)

Black Hat

POSWorld - Should You Be Afraid of Hands-On Payment Devices

Explore the vulnerabilities of Point of Sale terminals, uncovering security flaws in hardware, software, and file systems that enable cloning and fraud in the dark market.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Black Hat

Behind the Speculative Curtain - The True Story of Fighting Meltdown and Spectre

Insider account of the urgent response to Meltdown and Spectre vulnerabilities, revealing the challenges and decisions faced by cybersecurity experts during a critical disclosure situation.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Black Hat

Taking DMA Attacks to the Next Level

Unveils a novel, undetectable DMA attack exploiting DDR4 hardware vulnerabilities, enabling arbitrary memory access in live systems using a custom FPGA probe during sleep state.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Black Hat

Can You Trust Me Now? An Exploration Into the Mobile Threat Landscape

Comprehensive exploration of mobile security, examining hardware, software, and network components across platforms to uncover vulnerabilities and discuss protective measures for data and devices.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Black Hat

Learn How to Control Every Room at a Luxury Hotel Remotely

Descubre cómo controlar remotamente todos los dispositivos de un hotel de lujo, explorando vulnerabilidades en sistemas de automatización y sus implicaciones para la seguridad hotelera y de los huéspedes.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Black Hat

Smart Nest Thermostat - A Smart Spy in Your Home

Explore security vulnerabilities in Nest thermostats, including hardware-level attacks and potential for remote exploitation. Learn about risks to privacy and home security posed by compromised smart home devices.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Black Hat

Hiding at Depth - Exploring, Subverting and Breaking NAND Flash Memory

Explore NAND Flash vulnerabilities, learn to hide and discover files on mobile devices, and understand implications for digital forensics and device security. Open-source tools for Android demonstrated.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Leaky Processors - Stealing Your Secrets With Foreshadow

Explore the Foreshadow vulnerability in modern processors and its implications for data security. Learn about potential exploits and mitigation strategies.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Black Hat

Torturing OpenSSL

Explore hardware vulnerabilities in secure systems through a side-channel attack on RSA signatures, demonstrating how induced faults can compromise software-secure systems and extract private keys.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

secwestnet

Speculative Execution Vulnerabilities: From Spectre to Control Flow Hijack

Comprehensive exploration of speculative execution attacks, from original Spectre to new vulnerabilities. Clear explanations of exploitation challenges and processor vulnerabilities, with insights on high-resolution timers as potential weapons.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Free Video

media.ccc.de

Wallet.fail

Comprehensive analysis of security vulnerabilities in popular cryptocurrency hardware wallets, demonstrating architectural, physical, and software flaws through live hacking demonstrations and detailed explanations.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk