Elektrine lite

โ† Feed

Atredis

atredis@infosec.exchange

<p>Atredis is a 100% worker-owned team of world-class security researchers and consultants. We do risk-centric, research-driven security testing and consulting. <a href="https://atredis.com" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="">atredis.com</span><span class="invisible"></span></a></p>

Posts

  • View post

    If you missed the @defcon@defcon.social main stage talk &quot;Compounding Interest: Exploiting the ATM Supply Chain,&quot; you have 1hr to catch Matt Burch&#39;s (@emptynebuli@mastodon.social) encore at #PaymentVillage. ๐Ÿ—“๏ธ AUG 8, 4:00PM ๐Ÿ“ Payment Village #DEFCON #DEFCON34 #Hacking https://www.paymentvillage.org/

  • View post

    Atredians are in the air headed to Vegas for #BlackHat and #DEFCON! We always look forward to learning, sharing, and connecting with the community. If you see one of our shirts in the hall be sure to stop us and say hi!

  • View post

    9 CVEs, 1 new tool (ragavan), and a deep dive into exploiting the ATM supply chain. @defcon@defcon.social is exactly one week out! Make sure to catch Matt Burch (@emptynebuli@mastodon.social) present Compounding Interest: Exploiting the ATM Supply Chain. ๐Ÿ—“๏ธ AUG 8, 12:30PM ๐Ÿ“ Main Track 4 #DEFCON #DEFCON34 #Hacking https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627

  • View post

    Next week at #BlackHat, join Matt Burch (@emptynebuli@mastodon.social) as he takes the stage and dives into the ATM supply chain. In his briefing, Matt will be disclosing 9 CVEs affecting CryptWare CryptoPro and officially releasing his tooling, ragavan. If you are attending Black Hat, add this to your schedule! ๐Ÿ“… Wednesday, August 5 at 2:35 PM ๐Ÿ“ South Seas C&amp;D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec https://blackhat.com/us-26/briefings/schedule/index.html?day=wednesday#the-cost-of-ob...

  • View post

    Are you itching to try out Matt Burch&#39;s (@emptynebuli@mastodon.social) ATM research from @BHUSA + #DEFCON? CryptoPro will be part of Capture the Coin CTF via #PaymentVillage. Drop by and test drive ragavan ๐Ÿง #BlackHat #InfoSec ๐Ÿง ๐Ÿ’ฐ๏ธ https://defcon.org/html/defcon-34/dc-34-contests.html#orga_41412

  • View post

    #DEFCON 32 Matt (@emptynebuli@mastodon.social) released 6 CE bugs affecting Diebold Nixdorf.. and now he is back with 9 more via the CryptoPro supply chain! ๐Ÿ‘€ Come join his #BHUSA briefing on Wednesday August 5th - you won&#39;t want to miss it! ๐Ÿง ๐Ÿฆ https://blackhat.com/us-26/briefings/schedule/index.html#the-cost-of-obscurity-exploiting-the-atm-supply-chain-51998

  • View post

    Atredian Matt Burch (@emptynebuli@mastodon.social) recently spoke with #DarkReading about his upcoming #BlackHat talk &quot;The Cost of Obscurity: Exploiting the ATM Supply Chain&quot; and the 9 CVEs found in CryptoPro Secure Disk. ๐Ÿ”’๏ธ ๐Ÿ’ต Bottom line: Disk encryption doesn&#39;t help much if the keys are stored right next to the lock. Read the full story here: https://buff.ly/E1BRVhk #BlackHat #DefCon #Infosec #Cybersecurity

  • View post

    On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable&amp;#39;s Nessus Agent. No public PoC was available, so we made one; check it out here https://github.com/atredispartners/proof-of-concept/tree/main/cve-2025-36632