Atredis
atredis@infosec.exchange
<p>Atredis is a 100% worker-owned team of world-class security researchers and consultants. We do risk-centric, research-driven security testing and consulting. <a href="https://atredis.com" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="">atredis.com</span><span class="invisible"></span></a></p>
Posts
-
View post
If you missed the @defcon@defcon.social main stage talk "Compounding Interest: Exploiting the ATM Supply Chain," you have 1hr to catch Matt Burch's (@emptynebuli@mastodon.social) encore at #PaymentVillage. ๐๏ธ AUG 8, 4:00PM ๐ Payment Village #DEFCON #DEFCON34 #Hacking https://www.paymentvillage.org/
-
View post
Atredians are in the air headed to Vegas for #BlackHat and #DEFCON! We always look forward to learning, sharing, and connecting with the community. If you see one of our shirts in the hall be sure to stop us and say hi!
-
View post
9 CVEs, 1 new tool (ragavan), and a deep dive into exploiting the ATM supply chain. @defcon@defcon.social is exactly one week out! Make sure to catch Matt Burch (@emptynebuli@mastodon.social) present Compounding Interest: Exploiting the ATM Supply Chain. ๐๏ธ AUG 8, 12:30PM ๐ Main Track 4 #DEFCON #DEFCON34 #Hacking https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627
-
View post
Next week at #BlackHat, join Matt Burch (@emptynebuli@mastodon.social) as he takes the stage and dives into the ATM supply chain. In his briefing, Matt will be disclosing 9 CVEs affecting CryptWare CryptoPro and officially releasing his tooling, ragavan. If you are attending Black Hat, add this to your schedule! ๐ Wednesday, August 5 at 2:35 PM ๐ South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec https://blackhat.com/us-26/briefings/schedule/index.html?day=wednesday#the-cost-of-ob...
-
View post
Are you itching to try out Matt Burch's (@emptynebuli@mastodon.social) ATM research from @BHUSA + #DEFCON? CryptoPro will be part of Capture the Coin CTF via #PaymentVillage. Drop by and test drive ragavan ๐ง #BlackHat #InfoSec ๐ง ๐ฐ๏ธ https://defcon.org/html/defcon-34/dc-34-contests.html#orga_41412
-
View post
#DEFCON 32 Matt (@emptynebuli@mastodon.social) released 6 CE bugs affecting Diebold Nixdorf.. and now he is back with 9 more via the CryptoPro supply chain! ๐ Come join his #BHUSA briefing on Wednesday August 5th - you won't want to miss it! ๐ง ๐ฆ https://blackhat.com/us-26/briefings/schedule/index.html#the-cost-of-obscurity-exploiting-the-atm-supply-chain-51998
-
View post
Atredian Matt Burch (@emptynebuli@mastodon.social) recently spoke with #DarkReading about his upcoming #BlackHat talk "The Cost of Obscurity: Exploiting the ATM Supply Chain" and the 9 CVEs found in CryptoPro Secure Disk. ๐๏ธ ๐ต Bottom line: Disk encryption doesn't help much if the keys are stored right next to the lock. Read the full story here: https://buff.ly/E1BRVhk #BlackHat #DefCon #Infosec #Cybersecurity
-
View post
On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable&#39;s Nessus Agent. No public PoC was available, so we made one; check it out here https://github.com/atredispartners/proof-of-concept/tree/main/cve-2025-36632