Conclusions and Key Takeaways from Day 1
summary
Day one surfaces concrete trends: surprisingly few AI or Web3 submissions, a surge in hardware-track proposals that focus on firmware and software reverse engineering rather than low‑level decapping, and vendors resisting SBOM/HBOM disclosure for three reasons (technical infeasibility, cleanup before publishing, or hiding OSS composition). Review finds long attacker dwell times (about 2.5 years in a recent breach), renewed vulnerabilities in legacy protocols (Exchange, SMB, SSH), and geographic research shifts to LatAm, Eastern Europe and SE Asia — all amid rising systemic complexity and supply‑chain fragility.
AI-written summary · about
chapters (14)
- 0:00Introduction and panel
- 3:51Trends in submissions
- 7:49Hardware research landscape
- 11:04Application security status
- 13:13Software supply chain risk
- 17:11S-BOM and vendor accountability
- 20:53Cloud security challenges
- 22:43Future of security talent
- 26:31Geographic research shifts
- 28:52Budget-conscious risk reduction
- 30:11Complexity and operational risk
- 33:57The insider threat challenge
- 37:35Audience Q&A: S-BOM and design
- 41:17Hardware risks and wrap-up
related talks
41mLocknote: Conclusions and Key Takeaways from Day 1 locknote
41mLocknote: Conclusions and Key Takeaways from Day 1
30mLocknote: Conclusions and Key Takeaways from Day 1
01h 03mTrends and Top Takeaways
52mLocknote: Conclusions and Key Takeaways
44mLocknote: Conclusions and Key Takeaways From Black Hat Europe 2017
35mWelcome & Opening Remarks
50mSoftware Supply Chain: Panel on Threat Intel, Trends, Mitigation Strategies