← Feed

Posts

• View post

  "Bad News for the Average Pentester" ... But who wants to be average? Here's some thoughts from Shawn on why Human-Powered Pentesting is here to stay. https://www.atredis.com/blog/2026/5/15/bad-news-for-the-average-pentester

• View post

  If you are heading to #DefCon this summer, don't miss Atredian Matt Burch (@emptynebuli) and his continued CryptoPro research in Compounding Interest: Exploiting the ATM Supply Chain. He will be presenting on the main stage Track 4, Saturday Aug 8 at 12:30. Looking forward to seeing you there! https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627

• View post

  Tomorrow at #BlackHat, join Matt Burch (@emptynebuli) as he takes the stage and dives into the ATM supply chain. In his briefing, Matt will be disclosing 9 CVEs affecting CryptWare CryptoPro and officially releasing his tooling, ragavan. If you are attending Black Hat, add this to your schedule! 📅 Wednesday, August 5 at 2:35 PM 📍 South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec https://blackhat.com/us-26/briefings/schedule/index.html?day=wednesday#the-cost-of-obscurity-explo...

• View post

  In 1 hr at #BlackHat, join Matt Burch (@emptynebuli) as he takes the stage and dives into the ATM supply chain. Matt will be disclosing 9 CVEs affecting CryptWare CryptoPro and officially releasing his tooling, ragavan. 📅 2:35 PM in South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec https://blackhat.com/us-26/briefings/schedule/index.html?day=wednesday#the-cost-of-obscurity-exploiting-the-atm-supply-chain-51998

• View post

  Are you planning your @defcon week? Be sure to add the CAPTURE_THE_COIN CTF from Payment Village to your list. Don't miss Matt Burch's encore presentation of "Compounding Interest: Exploiting the ATM Supply Chain." Watch the talk, then put those TTPs to the test in the CryptoPro CTF. https://buff.ly/yfRaHli

• View post

  Tomorrow catch Matt Burch (@emptynebuli) present Compounding Interest: Exploiting the ATM Supply Chain at @defcon. 🗓️ AUG 8, 12:30PM 📍 Main Track 4 #DEFCON #DEFCON34 #Hacking https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627

• View post

  You have 1hr to catch Matt Burch (@emptynebuli) present Compounding Interest: Exploiting the ATM Supply Chain at @defcon. 🗓️ AUG 8, 12:30PM 📍 Main Track 4 #DEFCON #DEFCON34 #Hacking https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627

• View post

  This September Atredian Matt Burch (@emptynebuli) will be presenting "Compounding Interest: Exploiting the ATM Supply Chain" at #GrrCon in GrandRapids MI. Come see how supply chain gaps can provide significant adversary advantage. 📅 Friday, Sept 25 @ Noon 🔗 Abstract: https://grrcon.com/presentations/#burch

• View post

  🚨 Our research just hit WIRED! Atredian Matt Burch's (@emptynebuli) latest deep dive into ATM vulnerabilities highlights gaps in the ATM software supply chain, allowing for malicious system access through the controls designed to protect the platform! Read the full story on how these flaws extend far beyond your local cash machine: https://buff.ly/GKJwanu

• View post

  Atredian Matt Burch (@emptynebuli) will be presenting his ATM supply chain research and demonstrating new exploitation tooling at #GrrCon! 📅 Friday, Sept 25 @ Noon 🔗 Abstract: https://buff.ly/GvZm49g

• View post

  Hello @bsidesatl! Join Atredians @pbrass and Matt at 11:30 in Conference E to learn how to leverage LLMs for targeted vulnerability discovery within larger engagements. They will be discussing how they found two VMWare vCenter zero-days and how you can too! https://pretalx.com/bsidesatl-2026/talk/SSG3KH/ #bsidesatl #atredis #vmware #zeroday #ai #llm

• View post

  Thank you @bsidesatl! If you're looking for the plugin discussed in Phil and Matt's talk, you can get it here: https://github.com/atredispartners/proof-of-concept See you next year! 👋

• View post

  We found several vulnerabilities leading to remote code execution on the Foresight Sports GC3 golf launch monitor; check the details out here https://github.com/atredispartners/advisories/blob/master/2026/ATREDIS-2026-0010.md #golf #hacking

• View post

  If you missed the @defcon@defcon.social main stage talk "Compounding Interest: Exploiting the ATM Supply Chain," you have 1hr to catch Matt Burch's (@emptynebuli@mastodon.social) encore at #PaymentVillage. 🗓️ AUG 8, 4:00PM 📍 Payment Village #DEFCON #DEFCON34 #Hacking https://www.paymentvillage.org/

• View post

  Atredians are in the air headed to Vegas for #BlackHat and #DEFCON! We always look forward to learning, sharing, and connecting with the community. If you see one of our shirts in the hall be sure to stop us and say hi!

• View post

  9 CVEs, 1 new tool (ragavan), and a deep dive into exploiting the ATM supply chain. @defcon@defcon.social is exactly one week out! Make sure to catch Matt Burch (@emptynebuli@mastodon.social) present Compounding Interest: Exploiting the ATM Supply Chain. 🗓️ AUG 8, 12:30PM 📍 Main Track 4 #DEFCON #DEFCON34 #Hacking https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627

• View post

  Next week at #BlackHat, join Matt Burch (@emptynebuli@mastodon.social) as he takes the stage and dives into the ATM supply chain. In his briefing, Matt will be disclosing 9 CVEs affecting CryptWare CryptoPro and officially releasing his tooling, ragavan. If you are attending Black Hat, add this to your schedule! 📅 Wednesday, August 5 at 2:35 PM 📍 South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec https://blackhat.com/us-26/briefings/schedule/index.html?day=wednesday#the-cost-of-ob...

• View post

  Are you itching to try out Matt Burch's (@emptynebuli@mastodon.social) ATM research from @BHUSA + #DEFCON? CryptoPro will be part of Capture the Coin CTF via #PaymentVillage. Drop by and test drive ragavan 🏧 #BlackHat #InfoSec 🏧 💰️ https://defcon.org/html/defcon-34/dc-34-contests.html#orga_41412

• View post

  #DEFCON 32 Matt (@emptynebuli@mastodon.social) released 6 CE bugs affecting Diebold Nixdorf.. and now he is back with 9 more via the CryptoPro supply chain! 👀 Come join his #BHUSA briefing on Wednesday August 5th - you won't want to miss it! 🏧 🏦 https://blackhat.com/us-26/briefings/schedule/index.html#the-cost-of-obscurity-exploiting-the-atm-supply-chain-51998

• View post

  Atredian Matt Burch (@emptynebuli@mastodon.social) recently spoke with #DarkReading about his upcoming #BlackHat talk "The Cost of Obscurity: Exploiting the ATM Supply Chain" and the 9 CVEs found in CryptoPro Secure Disk. 🔒️ 💵 Bottom line: Disk encryption doesn't help much if the keys are stored right next to the lock. Read the full story here: https://buff.ly/E1BRVhk #BlackHat #DefCon #Infosec #Cybersecurity

• View post

  On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable's Nessus Agent. No public PoC was available, so we made one; check it out here https://github.com/atredispartners/proof-of-concept/tree/main/cve-2025-36632