Best Talks at CODE BLUE 2025

1. 1

   AI Accelerated Exploiting: Compromising MTE Enabled Pixel from DSP Coprocessor

   Bing-Jhong Jheng, Pan ZhengPeng

   This talk, presented by Bing-Jhong Jheng (Billy) and Pan ZhengPeng (Peter) from STAR LABS, delves into the discovery and exploitation of a novel vulnerability within the Graphics System Processor (GSP) Digital Signal Processor (DSP) coprocessor found in Google Pixel devices…

   0 Dr. Zero MUST SEE ★★★★★ H Heather Calloway STRONG ACCEPT ★★★★☆
2. 2

   Dancing with Exynos Coprocessor: Pwning Samsung for fun and “profit”

   Bing-Jhong Jheng, Muhammad Ramdhan, Pan ZhengPeng

   This talk, "Dancing with Exynos Coprocessor: Pwning Samsung for fun and 'profit'," delivered by researchers from STAR LABS, delves into the critical security vulnerabilities discovered within Samsung's proprietary Exynos System-on-Chip (SOC), specifically targeting its Neural…

   0 Dr. Zero MUST SEE ★★★★★ H Heather Calloway STRONG ACCEPT ★★★★☆
3. 3

   Cache the Frames, Catch the Vulnerabilities in Kernel Streaming

   Angelboy Yang

   In this compelling talk at CODE BLUE, Angelboy Yang, a Senior Security Researcher at DEVCORE, delves deep into the intricate world of **Windows Kernel Streaming (KS)**, a critical framework within the Windows operating system responsible for handling multimedia data from…

   0 Dr. Zero MUST SEE ★★★★★ H Heather Calloway STRONG ACCEPT ★★★★☆
4. 4

   PerfektBlue: Universal 1-click Exploit to Pwn Automotive Industry - Mercedes-Benz, Volkswagen, Skoda

   Mikhail Evdokimov

   Mikhail Evdokimov's CODE BLUE talk, "PerfektBlue: Universal 1-click Exploit to Pwn Automotive Industry," unveiled a sophisticated attack chain capable of achieving remote code execution (RCE) on millions of vehicles from leading manufacturers like Volkswagen, Mercedes-Benz…

   0 Dr. Zero MUST SEE ★★★★★ H Heather Calloway STRONG ACCEPT ★★★★☆
5. 5

   Exploiting Blind Memory Corruption in Cloud Services

   Anthony Weems, Stefan Schiller, Simon Scannell

   This talk, "Exploiting Blind Memory Corruption in Cloud Services," delivered by Simon Scannell, Anthony Weems, and Stefan Schiller from the Google Cloud Vulnerability Research team, addresses a critical yet often underestimated area of cloud security: **memory corruption**…

   0 Dr. Zero MUST SEE ★★★★★ H Heather Calloway STRONG ACCEPT ★★★★☆
6. 6

   Don't judge an audiobook by its cover: taking over your Amazon account with a Kindle

   Valentino Ricotta

   In a compelling presentation at CODE BLUE, security researcher Valentino Ricotta unveiled a critical chain of vulnerabilities that could allow an attacker to remotely compromise an Amazon Kindle device and subsequently take over the victim's entire Amazon account. Titled "Don't…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆
7. 7

   Breaking the Sound Barrier: Exploiting CoreAudio via Mach Message Fuzzing

   Dillon Franke

   In this compelling talk at CODE BLUE, Dillon Franke, a Senior Security Engineer at Google and a researcher with Google Project Zero, unveiled groundbreaking research into exploiting **CoreAudio** on macOS and iOS. The presentation, titled "Breaking the Sound Barrier: Exploiting…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆
8. 8

   Dissecting FINALDRAFT: Actionable Intel from a State-Sponsored Multi-Platform Backdoor

   Salim Bitam

   In a revealing presentation at CODE BLUE, Salim Bitam, a Senior Security Research Engineer at Elastic Security Labs, unveiled the intricacies of **FINALDRAFT**, a sophisticated multi-platform backdoor attributed to a state-sponsored threat actor. This talk, titled "Dissecting…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆
9. 9

   BOOTKITTY: Multi-OS Trust Chain compromise from Bootkit to Rootkit

   Junho Lee, HyunA Seo

   The "BOOTKITTY: Multi-OS Trust Chain compromise from Bootkit to Rootkit" presentation at CODE BLUE by Junho Lee and HyunA Seo delved into the alarming capabilities of a novel hybrid bootkit designed to compromise the boot process across Windows, Linux, and Android operating…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆
10. 10

    Cloud-Wide Contamination: Chaining SSRFs for Tenant Compromise in Azure (CVE-2025-29972)

    Vladimir Tokarev

    In a compelling presentation at CODE BLUE, Vladimir Tokarev, a Senior Vulnerability Researcher at Cyera (formerly with Microsoft's Azure Network Security Research team), unveiled a critical vulnerability chain designated as **CVE-2025-29972**. This research, conducted during…

    0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆

View all talks at CODE BLUE 2025 →