Atredian Matt Burch (@emptynebuli.bsky.social) will be presenting his ATM supply chain research and demonstrating new exploitation tooling at #GrrCon! 📅 Friday, Sept 25 @ Noon 🔗 Abstract: buff.ly/GvZm49g
Sam
@bespokebugs.bsky.social
Principal Research Consultant at Atredis Partners
Next week at @blackhatofficial.bsky.social, join Matt Burch (@emptynebuli.bsky.social) as he dives into the ATM supply chain. If you are attending Black Hat, add this to your schedule! 📅 AUG 5 at 2:35 PM 📍 South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec #BlackHat
Black Hat USA 2026
Black Hat USA 2026
blackhat.com
If you are heading to @defcon.bsky.social this summer, don't miss Atredian Matt Burch (@emptynebuli.bsky.social) and his continued CryptoPro research in Compounding Interest: Exploiting the ATM Supply Chain. See you at Track 4, Saturday Aug 8 at 12:30. defcon.org/html/defcon-...
DEF CON® 34 Hacking Conference - Main Stage Talks
1.1 Million Cameras, One Wildcard: Architectural Surveillance in an IoT Cloud Sammy Azdoufal
defcon.org
@defcon.bsky.social 32 Matt (@emptynebuli.bsky.social) released 6 CE bugs affecting Diebold Nixdorf.. and now he is back with 9 more via the CryptoPro supply chain! 👀 Come join his #BHUSA briefing on Wednesday August 5th - you won't want to miss it! 🏧 🏦 @blackhatofficial.bsky.social
Black Hat USA 2026
Black Hat USA 2026
blackhat.com
"Bad News for the Average Pentester" ... But who wants to be average? Here's some thoughts from Shawn on why Human-Powered Pentesting is here to stay. www.atredis.com/blog/2026/5/...
Bad News for the Average Pentester — Atredis Partners
With the changes to the market of late, Atredis has actually been exceedingly busy. We've been working with AI and related tech since we started the company over a dozen years ago, but in the last…
atredis.com
We decided to revisit an old research problem with some new LLM powered tooling. Check out our latest blog post to see how we approached this research, and the new Java deserialization gadget chains it discovered in just two days! www.atredis.com/blog/2026/3/12/findings-gadgets-like-its-2026
Findings Gadgets Like it’s 2026 — Atredis Partners
Java deserialization vulnerabilities have been of interest to me for nearly a decade. In 2016, my team published a blog post titled "What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your…
atredis.com
On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable's Nessus Agent. No public PoC was available, so we made one; check it out here github.com/atredispartn...
proof-of-concept/cve-2025-36632 at main · atredispartners/proof-of-concept
Proof of concepts and other snippets. Contribute to atredispartners/proof-of-concept development by creating an account on GitHub.
github.com
Last week, hardware. This week, firmware! Sam is back with a deep dive into his LiDAR Detector and demos a couple prototypes! www.atredis.com/blog/2025/12...
The second post about my LiDAR Detector: www.atredis.com/blog/2025/12...
Designing a Passive LiDAR Detector Device - Firmware — Atredis Partners
Welcome back! In the last post I described the process of examining the iPhone Pro TrueDepth LiDAR and developing concepts for hardware to detect it. Here I will describe the firmware for this devi...
atredis.com
look what you made me do, @sa.my www.atredis.com/blog/2025/11...
Designing a Passive LiDAR Detector Device - Hardware — Atredis Partners
At DEF CON 32, Samy Kamkar gave a talk about laser microphones. That was the only talk I made a point to watch live that year. Kamkar never disappoints and I have fond memories of trying to use a lase...
atredis.com
Say Cheese, Computer! Designing a Sensor for Passive Detection of iPhone TrueDepth LiDAR www.atredis.com/blog/2025/11/20/designing-a-passive-lidar-detection-sensor
Let's Hack Something Cute! A Reverse Engineering Journey into the Drawbot with Jessie www.atredis.com/blog/2025/9/...
Drawbot: Let’s Hack Something Cute! — Atredis Partners
The Target A few months ago I realized I was overdue for a fun, quirky hardware project. Every so often I like to see what new and interesting electronic children's toys are out there. When looking,…
atredis.com
DEF CON 32 video (Optical Espionage: Using Lasers to Hear Keystrokes Through Glass Windows) and code/DSP/hardware released for high-fidelity RF-modulated laser microphone that converts infrared light into keystrokes github.com/samyk/rflase...
GitHub - samyk/rflasermic: RF-modulated high fidelity laser microphone and keystroke sniffer
RF-modulated high fidelity laser microphone and keystroke sniffer - samyk/rflasermic
github.com
@sa.my hey buddy, big fan. i was watching your DEFCON32 talk about laser mics and such back then and toward the end when you talked about the lidar on your iphone, it inspired me to make a truedepth lidar detector! id love to show you a demo. thanks for inspiring me all these years!
Be sure to watch Matt Burch's (@emptynebuli.bsky.social) @CypherCon.bsky.social talk, Where's the Money: Defeating ATM Disk Encryption! buff.ly/wWaSlle
We recently identified a number of privilege escalation vulnerabilities in Lenovo Vantage on Windows; check out our latest blog for a technical deep dive www.atredis.com/blog/2025/7/...
Uncovering Privilege Escalation Bugs in Lenovo Vantage — Atredis Partners
Atredis Partners is an advanced security services and research consulting firm.
atredis.com
Where do the Ads in Trackmania come from? In-game ads and reverse engineering tips in this mini-post from Jordan www.atredis.com/blog/2025/5/...
A Peek into an In-Game Ad Client — Atredis Partners
A little bit ago I re-installed the racing game Trackmania, and I noticed I got product ads displayed at me in-game alongside the racetrack. Where were those coming from?
atredis.com
In case you missed it. Don't miss @emptynebuli.bsky.social presenting at #HackSpaceCon in Cape Canaveral on May 14th! 💰 🚀 buff.ly/tRaisC8
Don’t miss Atredian Bill Carver talking about Ransomware Readiness @bsidesbuffalo.bsky.social - Hope to see you there on June 7th!
BSides Buffalo 2025
Mobile app & schedule website
bsides-buffalo-2025.sessionize.com
Don't miss @emptynebuli.bsky.social presenting at #HackSpaceCon in Cape Canaveral on May 14th! 💰 🚀 No ticket? No Problem! 👀 We have a few extra 👀 Reply to the post and we will hook you up! buff.ly/tRaisC8
Sam @bespokebugs.bsky.social wanted to answer the question "can you 3D print pogo pin harnesses?" So, he ran some experiments this week to find out. Check out the blog post and grab the models to try for yourself! atredis.squarespace.com/blog/2025/4/... #pogopin #probe #3dprinting #atredis
