Google Security at Black Hat 2026

Improve your skills with direct, hands-on training from Mandiant frontline cybersecurity experts. The following courses will be running during August 1-5:

• The FLARE Team's Advanced Guide to Defeating Modern Malware: Taught by senior reverse engineers from Mandiant’s FLARE team | Aug 1-4
• Syntactical Supremacy: Defeating and Designing Nation-State Obfuscation: Taught by senior reverse engineers from Mandiant’s FLARE team | Aug 1-2
• capa: Beyond Disassembly: Dynamic Matching for Static Blindspots: Taught by Mandiant's FLARE team | Aug 5
• From Alert to Remediation: Windows Enterprise Incident Response: fundamental investigative techniques and digital forensics skills training with Mandiant | Aug 1-4

Google is hitting the stage with sessions accepted through the official Call for Papers.

• Render Safe: Reverse Engineering and Exploiting an EOD Robot (40 min)  Cyber-Physical Systems & IoT, Hardware / Embedded
• Bring Your Own COM - Session Pivoting and Lateral Movement via Ephemeral COM Registration (30 min) Enterprise Security, Exploit Development & Vulnerability Discovery
• A 0-Click Exploit Chain for the Pixel 10 (40 min) Mobile, Exploit Development & Vulnerability Discovery
• GPUBreach: Privilege Escalation Attacks on GPUs Using Rowhammer (40 min) Hardware / Embedded, Exploit Development & Vulnerability Discovery
• Time for ACKrobatics: Abusing TCP Timestamps to Improve Remote Timing Attacks (40 min) Cryptography, Network Security
• One Key to Rule Them All: Taking Over a Flagship Cloud Service (40 min) Cloud Security

Join us for our dedicated speaking sessions to dive deeper into the latest cybersecurity innovations and threat intelligence.

• When AI Makes Everyone a Hacker, Context is the Secret Weapon (Workshop) | Aug 5, 10:15 - 11:00am | Oceanside E | Speakers: Mika Maymon, Product Mgr (Wiz); Gal Nagli, Head of Threat Exposure (Wiz)
• The Snowball Effect: A Practical Playbook for Supply Chain Incident Response (Workshop) | Aug 5, 11:15 - 12:00pm | Oceanside E | Speakers: Shira Ayal, Incident Response Specialist (Wiz), Yuval Dan, Incident Response Expert (Wiz)
•  Inside a Cloud Extortion Attack: A Case Study from the Front Lines (Session) | Aug 5, 3:15 - 3:35pm | Pulse Stage, Expo | Speakers: Yotam Meitar, Director, Cloud Response (Wiz)
• The AI-Enhanced Attacker (Session) | Aug 6, 2:05 - 2:25pm | Pulse Stage 2, Expo | Speaker: John Hultquist, Chief Analyst, Google Threat Intelligence Group