Breaking things first, since 1998.
The hacks you already know — the Jeep, the ATM, the satellite, the casino card shuffler — were ours. A quarter-century of research that set the agenda for entire industries.
Cloning RFID access badges
Showing how trivially physical access controls could be duplicated — years before it was common knowledge.
HardwareSounding the alarm on the smart grid
Founder Joshua Pennell demonstrates smart-meter and AMI weaknesses — an early warning for critical infrastructure.
Joshua PennellCritical InfrastructureMaking an ATM spit out cash on stage
Barnaby Jack’s “jackpotting” at Black Hat — the hack everyone remembers, and the one that put embedded-device security on the map.
Barnaby JackEmbeddedProving cyber risk can be life-or-death
Barnaby Jack’s research into wirelessly compromising pacemakers and insulin pumps forced the medical-device industry to take security seriously.
Barnaby JackMedicalBackdoors in the world’s satellite terminals
Ruben Santamarta uncovers hardcoded keys and backdoors across Inmarsat and Iridium SATCOM gear — on ships, aircraft, and military systems.
Ruben SantamartaSatelliteKilling a Jeep from miles away
Charlie Miller & Chris Valasek remotely disabled a Jeep Cherokee’s transmission on the highway — triggering a 1.4-million-vehicle recall and rewriting automotive security.
Charlie Miller & Chris ValasekAutomotiveGrounding in-flight entertainment
Vulnerabilities in Panasonic IFE systems flown by major airlines.
AviationHacking robots before Skynet
Dozens of vulnerabilities across consumer and industrial robots — plus AmosConnect maritime comms — before the machines could be weaponized.
RoboticsRansomware for robots
Turning a factory and healthcare robot into a hostage, and vulnerabilities in Extreme Networks WingOS.
RoboticsReaching into the Boeing 787’s network
Ruben Santamarta’s Black Hat research on vulnerabilities touching the 787’s avionics network.
Ruben SantamartaAviationDriving away in a Tesla Model Y
Josep Pi Rodriguez relays an NFC key to unlock and drive a Tesla Model Y at DEF CON 30.
Josep Pi RodriguezAutomotiveBeating the casino card shuffler
Rigging an automated card-shuffler (ShuffleMaster) to know the deck — plus fault-injection attacks on drones.
EmbeddedAMD Sinkclose & a license-plate jailbreak
A decades-old flaw granting deep access to AMD chips — and Josep Pi Rodriguez jailbreaking Reviver digital license plates.
Josep Pi RodriguezSiliconWinning the Raspberry Pi RP2350 challenge
Extracting antifuse secrets from the RP2350 via FIB/PVC — beating a global field to claim the prize.
SiliconThe security gap in AI-generated code
Randy Flood’s study of 27 AI models and 730 prompts finds 31.6% of generated code fully exploitable — no model was 100% secure.
Randy FloodAI/ML