Atredian Matt Burch (@emptynebuli@mastodon.social) recently spoke with #DarkReading about his upcoming #BlackHat talk "The Cost of Obscurity: Exploiting the ATM Supply Chain" and the 9 CVEs found in CryptoPro Secure Disk. 🔒️ 💵
Bottom line: Disk encryption doesn't help much if the keys are stored right next to the lock. Read the full story here: https://buff.ly/E1BRVhk #BlackHat #DefCon #Infosec #Cybersecurity
Remote
Atredis
@atredis@infosec.exchange
Atredis is a 100% worker-owned team of world-class security researchers and consultants. We do risk-centric, research-driven security testing and consulting. https://atredis.com
0 Followers
0 Following
8 Posts
Joined February 25, 2025
Open post
If you missed the @defcon@defcon.social main stage talk "Compounding Interest: Exploiting the ATM Supply Chain," you have 1hr to catch Matt Burch's (@emptynebuli@mastodon.social) encore at #PaymentVillage.
🗓️ AUG 8, 4:00PM
📍 Payment Village
#DEFCON #DEFCON34 #Hacking
https://www.paymentvillage.org/
1
0
0
0
Open post
9 CVEs, 1 new tool (ragavan), and a deep dive into exploiting the ATM supply chain.
@defcon@defcon.social is exactly one week out! Make sure to catch Matt Burch (@emptynebuli@mastodon.social) present Compounding Interest: Exploiting the ATM Supply Chain.
🗓️ AUG 8, 12:30PM
📍 Main Track 4
#DEFCON #DEFCON34 #Hacking
https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627
1
0
3
1
Open post
On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable's Nessus Agent. No public PoC was available, so we made one; check it out here https://github.com/atredispartners/proof-of-concept/tree/main/cve-2025-36632
5
0
5
0
Open post
#DEFCON 32 Matt (@emptynebuli@mastodon.social) released 6 CE bugs affecting Diebold Nixdorf.. and now he is back with 9 more via the CryptoPro supply chain! 👀 Come join his #BHUSA briefing on Wednesday August 5th - you won't want to miss it! 🏧 🏦
https://blackhat.com/us-26/briefings/schedule/index.html#the-cost-of-obscurity-exploiting-the-atm-supply-chain-51998
0
0
1
1
Open post
Are you itching to try out Matt Burch's (@emptynebuli@mastodon.social) ATM research from @BHUSA + #DEFCON? CryptoPro will be part of Capture the Coin CTF via #PaymentVillage. Drop by and test drive ragavan 🏧 #BlackHat #InfoSec 🏧 💰️
https://defcon.org/html/defcon-34/dc-34-contests.html#orga_41412
0
0
0
0
Open post
Next week at #BlackHat, join Matt Burch (@emptynebuli@mastodon.social) as he takes the stage and dives into the ATM supply chain.
In his briefing, Matt will be disclosing 9 CVEs affecting CryptWare CryptoPro and officially releasing his tooling, ragavan. If you are attending Black Hat, add this to your schedule!
📅 Wednesday, August 5 at 2:35 PM
📍 South Seas C&D, Level 3
#BHUSA2026 #Cybersecurity #InfoSec
https://blackhat.com/us-26/briefings/schedule/index.html?day=wednesday#the-cost-of-obscurity-exploiting-the-atm-supply-chain-51998
0
0
0
1
Open post
0
0
0
0