Top Security Takeaways from Black Hat USA 2022 and DEF CON 30

NetSPI recap of Black Hat 2021 and DEF CON 29: CISA's new Joint Cyber Defense Collaborative, warnings about escalating software supply chain attacks, and a notably thinner hybrid-event crowd.

NetSPI's Black Hat and DEF CON research shows z/OS Unix is an overlooked mainframe attack surface, with paths from authenticated user to APF-authorized code execution and UID 0.

NetSPI agents recap DEF CON 32: six zero-days found in ATM disk encryption software, General Paul Nakasone on US cyber strategy, and proactive security lessons from talks and workshops.

NetSPI leadership distills four key themes from Black Hat USA 2024, where the team demoed its CAASM solution, unveiled a $500 laser hardware hacking tool, and paired EASM with CAASM for CTEM.

Highlights from a virtual Black Hat 2020: election security keynote stress-testing democracy, calls for ethical hackers to volunteer, and industry action items from a pandemic-shaped agenda.

Despite strong talks and big attendance, Black Hat 2011 lacked industry buzz—no unifying vision beyond government speakers, and the latest security roll-ups by IBM and HP appeared to be flailing.