Atredis Partners
@atredispartners.bsky.social
Atredis is a 100% worker-owned team of world-class security researchers and consultants. We do risk-centric, research-driven security testing and consulting. https://atredis.com
In 1hr at @blackhatofficial.bsky.social, join Matt Burch (@emptynebuli.bsky.social) as he dives into the ATM supply chain. Matt will be disclosing 9 CVEs and officially releasing his tooling, ragavan. 📅 2:35 PM in South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec #BlackHat
Black Hat USA 2026
Black Hat USA 2026
blackhat.com
Tomorrow at @blackhatofficial.bsky.social, join Matt Burch (@emptynebuli.bsky.social) as he dives into the ATM supply chain. If you are attending Black Hat, add this to your schedule! 📅 AUG 5 at 2:35 PM 📍 South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec #BlackHat
Black Hat USA 2026
Black Hat USA 2026
blackhat.com
9 CVEs, 1 new tool, and a deep dive into the ATM supply chain. @defcon.bsky.social is exactly 1 week out! Catch Matt Burch (@emptynebuli.bsky.social) present Compounding Interest: Exploiting the ATM Supply Chain. 🗓️ AUG 8, 12:30PM 📍 Main Track 4 #DEFCON #DEFCON34 #Hacking
DEF CON® 34 Hacking Conference - Main Stage Talks
1.1 Million Cameras, One Wildcard: Architectural Surveillance in an IoT Cloud Sammy Azdoufal
defcon.org
Next week at @blackhatofficial.bsky.social, join Matt Burch (@emptynebuli.bsky.social) as he dives into the ATM supply chain. If you are attending Black Hat, add this to your schedule! 📅 AUG 5 at 2:35 PM 📍 South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec #BlackHat
Black Hat USA 2026
Black Hat USA 2026
blackhat.com
Are you itching to try out Matt Burch's (@emptynebuli.bsky.social) ATM research from @BlackHatofficial.bsky.social + @defcon.bsky.social? CryptoPro will be part of Capture the Coin CTF via @paymentvillage.bsky.social. Drop by and test drive ragavan 🏧 #BlackHat #DefCon defcon.org/html/defcon-...
DEF CON® 34 Hacking Conference - Contests
$$$$$_<CAPTURE_THE_COIN>_$$$$$ $unL1ght Sh4d0w5 5N4CK3Y ?Cube Adversary Wars CTF AI Art Battle AI Village Plays Pokemon: DEF CON Edition Apex Park (Cloud Village CTF) Aw, man...pages! BadgeLife…
defcon.org
If you are heading to @defcon.bsky.social this summer, don't miss Atredian Matt Burch (@emptynebuli.bsky.social) and his continued CryptoPro research in Compounding Interest: Exploiting the ATM Supply Chain. See you at Track 4, Saturday Aug 8 at 12:30. defcon.org/html/defcon-...
DEF CON® 34 Hacking Conference - Main Stage Talks
1.1 Million Cameras, One Wildcard: Architectural Surveillance in an IoT Cloud Sammy Azdoufal
defcon.org
@defcon.bsky.social 32 Matt (@emptynebuli.bsky.social) released 6 CE bugs affecting Diebold Nixdorf.. and now he is back with 9 more via the CryptoPro supply chain! 👀 Come join his #BHUSA briefing on Wednesday August 5th - you won't want to miss it! 🏧 🏦 @blackhatofficial.bsky.social
Black Hat USA 2026
Black Hat USA 2026
blackhat.com
Atredian Matt (@emptynebuli.bsky.social) spoke with @DarkReading.bsky.social about his upcoming @BlackHatofficial.bsky.social talk "The Cost of Obscurity: Exploiting the ATM Supply Chain" 🔒️ 💵 Bottom line: Disk encryption doesn't help if the keys are stored right next to the lock.
Fresh ATM Crypto Software Bugs: Jackpot or Bust?
Organizations, and possibly ATMs, are at risk of compromise, thanks to holes in a Microsoft BitLocker security wrapper.
darkreading.com
"Bad News for the Average Pentester" ... But who wants to be average? Here's some thoughts from Shawn on why Human-Powered Pentesting is here to stay. www.atredis.com/blog/2026/5/...
Bad News for the Average Pentester — Atredis Partners
With the changes to the market of late, Atredis has actually been exceedingly busy. We've been working with AI and related tech since we started the company over a dozen years ago, but in the last…
atredis.com
We decided to revisit an old research problem with some new LLM powered tooling. Check out our latest blog post to see how we approached this research, and the new Java deserialization gadget chains it discovered in just two days! www.atredis.com/blog/2026/3/12/findings-gadgets-like-its-2026
Findings Gadgets Like it’s 2026 — Atredis Partners
Java deserialization vulnerabilities have been of interest to me for nearly a decade. In 2016, my team published a blog post titled "What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your…
atredis.com
On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable's Nessus Agent. No public PoC was available, so we made one; check it out here github.com/atredispartn...
proof-of-concept/cve-2025-36632 at main · atredispartners/proof-of-concept
Proof of concepts and other snippets. Contribute to atredispartners/proof-of-concept development by creating an account on GitHub.
github.com
Atredis identified a vulnerability in the way Rapid7's Nexpose was generating passwords to protect its Java KeyStore which is used to encrypt saved credentials. This vulnerability was reported to Rapid7 and a patch is being rolled out today! Check out the details here: github.com/atredispartn...
Command & Conquer'd: worming RCEs through a classic multiplayer game. Check out the full writeup from our @districtcon.bsky.social Junkyard submission here: www.atredis.com/blog/2026/1/... By @droner.bsky.social and @jordan9001.bsky.social #Security #modding #rce
General Graboids: Worms and Remote Code Execution in Command & Conquer — Atredis Partners
[this work was conducted collaboratively by Bryan Alexander and Jordan Whitehead] This post details several vulnerabilities discovered in the popular online game Command & Conquer: Generals. We…
atredis.com
Last week, hardware. This week, firmware! Sam is back with a deep dive into his LiDAR Detector and demos a couple prototypes! www.atredis.com/blog/2025/12...
Say Cheese, Computer! Designing a Sensor for Passive Detection of iPhone TrueDepth LiDAR www.atredis.com/blog/2025/11/20/designing-a-passive-lidar-detection-sensor
Let's Hack Something Cute! A Reverse Engineering Journey into the Drawbot with Jessie www.atredis.com/blog/2025/9/...
Drawbot: Let’s Hack Something Cute! — Atredis Partners
The Target A few months ago I realized I was overdue for a fun, quirky hardware project. Every so often I like to see what new and interesting electronic children's toys are out there. When looking,…
atredis.com
In case you missed it, be sure to watch Atredian Matt Burch's (@emptynebuli.bsky.social) #HackSpaceCon talk, Where's the Money: Defeating ATM Disk Encryption! buff.ly/RqUmthH
Build Cyber
buildcyber.ai
Check out our latest blog from Matt Burch (@emptynebuli.bsky.social ) detailing new supplemental findings from his DefCon32 talk Where's the Money: Defeating ATM Disk Encryption: www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057
Where’s the Money - Supplemental Findings — Atredis Partners
While creating the content for my DefCon 32 talk, Where’s the Money: Defeating ATM Disk Encryption, I observed two additional vulnerabilities that had been overlooked in the heat of the research.…
atredis.com
ICYMI, @synacktiv.com's Pwn2Own walkthrough, exploiting a Tesla Wall via the charging port is a good Friday read. After a firmware downgrade, they found a debug shell via the access point used during setup, ultimately using this to gain EIP. www.synacktiv.com/en/publicati...
Exploiting the Tesla Wall connector from its charge port connector
An interesting attack surface Over the past few years, Synacktiv has been analyzing Tesla vehicles for the Pwn2Own competition.
synacktiv.com
We recently identified a number of privilege escalation vulnerabilities in Lenovo Vantage on Windows; check out our latest blog for a technical deep dive www.atredis.com/blog/2025/7/...
Uncovering Privilege Escalation Bugs in Lenovo Vantage — Atredis Partners
Atredis Partners is an advanced security services and research consulting firm.
atredis.com
Be sure to watch Matt Burch's (@emptynebuli.bsky.social) @CypherCon.bsky.social talk, Where's the Money: Defeating ATM Disk Encryption! buff.ly/wWaSlle
Where do the Ads in Trackmania come from? In-game ads and reverse engineering tips in this mini-post from Jordan www.atredis.com/blog/2025/5/...
A Peek into an In-Game Ad Client — Atredis Partners
A little bit ago I re-installed the racing game Trackmania, and I noticed I got product ads displayed at me in-game alongside the racetrack. Where were those coming from?
atredis.com
Sam wanted to answer the question "can you 3D print pogo pin harnesses?" So, he ran some experiments this week to find out. Check out the blog post and grab the models to try for yourself! buff.ly/xWcWE5W #pogopin #probe #3dprinting #atredis
In case you missed it. Don't miss @emptynebuli.bsky.social presenting at #HackSpaceCon in Cape Canaveral on May 14th! 💰 🚀 buff.ly/tRaisC8
Don’t miss Atredian Bill Carver talking about Ransomware Readiness @bsidesbuffalo.bsky.social - Hope to see you there on June 7th!
BSides Buffalo 2025
Mobile app & schedule website
bsides-buffalo-2025.sessionize.com
Don't miss @emptynebuli.bsky.social presenting at #HackSpaceCon in Cape Canaveral on May 14th! 💰 🚀 No ticket? No Problem! 👀 We have a few extra 👀 Reply to the post and we will hook you up! buff.ly/tRaisC8
Sam @bespokebugs.bsky.social wanted to answer the question "can you 3D print pogo pin harnesses?" So, he ran some experiments this week to find out. Check out the blog post and grab the models to try for yourself! atredis.squarespace.com/blog/2025/4/... #pogopin #probe #3dprinting #atredis
Don't miss Atredian Matt Burch (@emptynebuli.bsky.social) presenting "Where's the Money: Defeating ATM Disk Encryption" at #HackSpaceCon! buff.ly/zHBii72
Be sure to watch Chris's @districtcon.bsky.social talk, DaBootZone: Breaking the DA1469x Boot ROM! buff.ly/Xw3Hhpi
