One Flip is All It Takes: Identifying Syscall-Guard Variables for Data-Only Attacks

From a channel Lumen includes in full: Black Hat's briefings are peer-selected security research talks — exploitation, cryptography, hardware and cloud attacks — presented by the researchers who did the work, usually with full technical detail and disclosure timelines.

A 29-minute video from Black Hat's catalogue; the title names its topic.

Video by Black Hat, played through YouTube's embedded player.