We were glad to announce that TeamT5 was again accepted at Black Hat USA. And this time, our vulnerability research team, D39, presented their latest exploit research on Samsung S10 secure bootloader at the Black Hat Briefings. We were very honored to share our research findings with researchers and security experts all over the world in this annual flagship conference.
TeamT5's vulnerability researcher presented on Black Hat USA 2020.
About D39's Vulnerability Research Finding
D39 has been focusing on vulnerability research and has identified several critical security flaws. We have found several vulnerabilities in Samsung Secure boot, which can break through Samsung Knox protections. In Black Hat USA 2020, we elaborated how did we discover and exploit the vulnerabilities in detail, demonstrated the exploit on a Samsung Galaxy S10 smartphone, and had a discussion on the possible impact of these vulnerabilities.
Disclosure Timeline
2019-10-02 Report Vulnerability I
2019-10-08 Informed Vulnerability I duplicated
2019-10-11 Report Vulnerability II
2020-01-06 Samsung Patched, SVE-2019-15872
2020-01-21 Report Vulnerability III
2020-05-06 Samsung Patched, SVE-2020-16712
Timeline of the vulnerability disclosure, patch release and assignment of SVE IDs.
About Black Hat
Black Hat is the world’s leading information security event, and remains the best and biggest event of its kind. It provides attendees with cutting-edge security research, development and trends, and has the ability to define tomorrow’s information security landscape. Black Hat USA 2020 went fully virtual this year, held over the same dates from 1 to 6 August, in light of the coronavirus pandemic.
*Image courtesy of Black Hat from https://www.blackhat.com/us-20/