Black Hat 2024: Insights, Highlights, and Our Unforgettable Experience

Our CEO, Sherri Davidoff, moderated a fascinating panel titled “How Hackers Changed the Media (and the Media Changed Hackers).”

Black Hat 2024 was an electrifying experience for cybersecurity professionals around the globe, and our team at LMG Security was thrilled to be part of the action once again. Known for its cutting-edge content and intense discussions, Black Hat USA 2024 provided an excellent platform for us to share our expertise and learn from the best in the field. In this blog post, we’ll dive into our experiences at Black Hat 2024, highlighting key sessions, groundbreaking discoveries, and our own contributions to this dynamic event. So, let’s explore the excitement and insights that Black Hat 2024 brought to our cybersecurity community!

A Stellar Lineup of Talks and Presentations

This year’s Black Hat 2024 was packed with informative sessions and briefings that shed light on emerging threats and innovative defenses in cybersecurity. Nvidia’s security architect presented a thought-provoking session on AI and the top threats to security arising from it. The talk identified three primary threats: plugin vulnerabilities, indirect prompt injection (which involves results tampering and corruption), and insecure permissions that can lead to data leakage. These issues are becoming increasingly relevant as AI technologies continue to evolve and integrate deeper into cybersecurity frameworks.

Another significant highlight at Black Hat 2024 was the disclosure of a major vulnerability in Microsoft products. Alon Leviev from SafeBreach presented a critical vulnerability in Windows Update, revealing how this flaw allows for downgrade attacks. This technique can effectively revert a Windows 10 or 11 system to an older, vulnerable version by manipulating the update mechanism. The implications of this vulnerability are profound, as it undermines the very foundation of Windows security by bypassing its usual checks and controls.

Teaching Ransomware Defense to Seasoned Professionals: Our 360 Ransomware Class

A picture of one of our two “360 Ransomware” class at Black Hat 2024 that was led by Sherri Davidoff and Matt Durrin.

Our “360 Ransomware” class at Black Hat 2024 was a standout success! Led by our very own Sherri Davidoff and Matt Durrin, this class was packed with eager participants ready to learn about ransomware response, detection, negotiation, recovery, and prevention. The engagement was incredible; we had a full house and even extended our discussions over a delightful dinner. The hands-on nature of the course allowed participants to simulate real-world ransomware scenarios, making it a truly immersive learning experience.

Exploring Media Dynamics in Cybersecurity

Our CEO, Sherri Davidoff, also moderated a fascinating panel titled “How Hackers Changed the Media (and the Media Changed Hackers).” This session delved into the complex relationship between ransomware gangs and journalists, exploring how criminals attempt to manipulate media coverage to their advantage. The panel featured esteemed professionals, including Robert McMillan from The Wall Street Journal, a leading TechCrunch reporter, and Sadia Mirza, a seasoned data breach attorney. The discussion was dynamic and engaging, highlighting the ethical dilemmas journalists face and the strategies they use to report fairly while not giving undue power to cybercriminals.

Career Insights: From Technical Roles to Strategic Leadership

Sherri also shared her journey from technical roles to strategic leadership as a virtual CISO (vCISO) on another panel at Black Hat USA 2024. Moderated by Ricki Burke, this panel provided invaluable insights for those looking to transition into leadership roles in cybersecurity. It was an excellent opportunity for attendees to gain a better understanding of the skills and mindset required to move from a technical focus to a more strategic, leadership-oriented position.

Chatting about cybersecurity over dinner at Black Hat 2024!

Networking and Fun at Top Golf

At Black Hat, the intense learning and knowledge sharing is not confined to the conference sessions and trainings. There are so many experts at the show that even casual conversations can provide meaningful insights. To facilitate these interactions, our team also had a fantastic time networking with clients, friends, and fellow security professionals at our Top Golf event. It was a great mix of fun, food, and meaningful conversations about the future of cybersecurity.

Wrapping Up Black Hat 2024

As always, Black Hat USA 2024 was an unforgettable experience, filled with learning, networking, and fun. From exploring the latest threats and vulnerabilities to teaching the next generation of cybersecurity experts, our team at LMG Security was proud to be part of such a vibrant and impactful event. We’re already looking forward to next year and can’t wait to see what new developments will shape the future of cybersecurity.

We hope you found this Black Hat 2024 recap useful! Please contact us if you need help with technical testing, advisory services, cybersecurity solutions, or training.