Atredis

· 1w ago

Hello @bsidesatl@infosec.exchange!
Join Atredians @pbrass@infosec.exchange and Matt at 11:30 in Conference E to learn how to leverage LLMs for targeted vulnerability discovery within larger engagements.
They will be discussing how they found two VMWare vCenter zero-days and how you can too!
https://pretalx.com/bsidesatl-2026/talk/SSG3KH/
#bsidesatl #atredis #vmware #zeroday #ai #llm

pretalx.com

You want some zero days with that netpen? Finding your own way in with LLMs :: BSides Atlanta 2026 :: pretalx

3

0

2

0

· 2mo ago

Are you planning your @defcon@defcon.social week? Be sure to add the CAPTURE_THE_COIN CTF from Payment Village to your list. Don't miss Matt Burch's encore presentation of "Compounding Interest: Exploiting the ATM Supply Chain." Watch the talk, then put those TTPs to the test in the CryptoPro CTF.
https://buff.ly/yfRaHli

buff.ly

DEF CON® 34 Hacking Conference - Contests

Contests Page for DEF CON 34. Compete in feats of hacking might.

6

1

5

0

· 2mo ago

Are you itching to try out Matt Burch's (@emptynebuli@mastodon.social) ATM research from @BHUSA + #DEFCON? CryptoPro will be part of Capture the Coin CTF via #PaymentVillage. Drop by and test drive ragavan 🏧 #BlackHat #InfoSec 🏧 💰️ https://defcon.org/html/defcon-34/dc-34-contests.html#orga_41412

DEF CON® 34 Hacking Conference - Contests

Contests Page for DEF CON 34. Compete in feats of hacking might.

6

0

3

1

· 1mo ago

🚨 Our research just hit WIRED!

Atredian Matt Burch's (@emptynebuli@mastodon.social) latest deep dive into ATM vulnerabilities highlights gaps in the ATM software supply chain, allowing for malicious system access through the controls designed to protect the platform! Read the full story on how these flaws extend far beyond your local cash machine: https://buff.ly/GKJwanu

WIRED

ATM Flaws Reveal Key Weaknesses in the Software Supply Chain

A security researcher discovered nine vulnerabilities impacting ATM encryption and authentication software. But the problems extend far beyond your local cash machine.

1

0

1

0

· 3mo ago

Atredian Matt Burch (@emptynebuli@mastodon.social) recently spoke with #DarkReading about his upcoming #BlackHat talk "The Cost of Obscurity: Exploiting the ATM Supply Chain" and the 9 CVEs found in CryptoPro Secure Disk. 🔒️ 💵 Bottom line: Disk encryption doesn't help much if the keys are stored right next to the lock. Read the full story here: https://buff.ly/E1BRVhk #BlackHat #DefCon #Infosec #Cybersecurity

Dark Reading

Fresh ATM Crypto Software Bugs: Jackpot or Bust?

Organizations, and possibly ATMs, are at risk of compromise, thanks to holes in a Microsoft BitLocker security wrapper.

4

0

2

0

· 2mo ago

If you are heading to #DefCon this summer, don't miss Atredian Matt Burch (@emptynebuli@mastodon.social) and his continued CryptoPro research in Compounding Interest: Exploiting the ATM Supply Chain. He will be presenting on the main stage Track 4, Saturday Aug 8 at 12:30. Looking forward to seeing you there!
https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627

DEF CON® 34 Hacking Conference - Main Stage Talks

Speakers Page for DEF CON 34

3

0

3

0

#BHUSA2026 #Cybersecurity #InfoSec
https://blackhat.com/us-26/briefings/schedule/index.html?day=wednesday#the-cost-of-obscurity-exploiting-the-atm-supply-chain-51998

· 2mo ago

Tomorrow at #BlackHat, join Matt Burch (@emptynebuli@mastodon.social) as he takes the stage and dives into the ATM supply chain.

In his briefing, Matt will be disclosing 9 CVEs affecting CryptWare CryptoPro and officially releasing his tooling, ragavan. If you are attending Black Hat, add this to your schedule!

📅 Wednesday, August 5 at 2:35 PM
📍 South Seas C&D, Level 3

Black Hat

2

0

· 2mo ago

If you missed the @defcon@defcon.social main stage talk "Compounding Interest: Exploiting the ATM Supply Chain," you have 1hr to catch Matt Burch's (@emptynebuli@mastodon.social) encore at #PaymentVillage. 🗓️ AUG 8, 4:00PM 📍 Payment Village #DEFCON #DEFCON34 #Hacking https://www.paymentvillage.org/

paymentvillage.org

Payment Village

Payment Village at DEF CON 34

1

0

1

0

· 2mo ago

Atredians are in the air headed to Vegas for #BlackHat and #DEFCON! We always look forward to learning, sharing, and connecting with the community. If you see one of our shirts in the hall be sure to stop us and say hi!

1

0

· 2mo ago

9 CVEs, 1 new tool (ragavan), and a deep dive into exploiting the ATM supply chain. @defcon@defcon.social is exactly one week out! Make sure to catch Matt Burch (@emptynebuli@mastodon.social) present Compounding Interest: Exploiting the ATM Supply Chain. 🗓️ AUG 8, 12:30PM 📍 Main Track 4 #DEFCON #DEFCON34 #Hacking https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627

DEF CON® 34 Hacking Conference - Main Stage Talks

Speakers Page for DEF CON 34

1

0

3

1

· 2mo ago

Next week at #BlackHat, join Matt Burch (@emptynebuli@mastodon.social) as he takes the stage and dives into the ATM supply chain. In his briefing, Matt will be disclosing 9 CVEs affecting CryptWare CryptoPro and officially releasing his tooling, ragavan. If you are attending Black Hat, add this to your schedule! 📅 Wednesday, August 5 at 2:35 PM 📍 South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec https://blackhat.com/us-26/briefings/schedule/index.html?day=wednesday#the-cost-of-obscurity-exploiting-the-atm-supply-chain-51998

Black Hat

1

0

2

1

· 7mo ago

On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable's Nessus Agent. No public PoC was available, so we made one; check it out here https://github.com/atredispartners/proof-of-concept/tree/main/cve-2025-36632

GitHub

proof-of-concept/cve-2025-36632 at main · atredispartners/proof-of-concept

Proof of concepts and other snippets. Contribute to atredispartners/proof-of-concept development by creating an account on GitHub.

5

0

5

0

https://www.atredis.com/blog/2026/5/15/bad-news-for-the-average-pentester

· 4mo ago

"Bad News for the Average Pentester" ... But who wants to be average?

Here's some thoughts from Shawn on why Human-Powered Pentesting is here to stay.

Atredis Partners

Bad News for the Average Pentester

Automation has been declared the death of pentesting for 30 years. Why that's bad news for some and why Atredis bets on human-powered testing that uses AI, not AI-driven testing.

2

0

2

0

· 3mo ago

#DEFCON 32 Matt (@emptynebuli@mastodon.social) released 6 CE bugs affecting Diebold Nixdorf.. and now he is back with 9 more via the CryptoPro supply chain! 👀 Come join his #BHUSA briefing on Wednesday August 5th - you won't want to miss it! 🏧 🏦 https://blackhat.com/us-26/briefings/schedule/index.html#the-cost-of-obscurity-exploiting-the-atm-supply-chain-51998

Black Hat

0

1

· 1w ago

Thank you @bsidesatl@infosec.exchange! If you're looking for the plugin discussed in Phil and Matt's talk, you can get it here:
https://github.com/atredispartners/proof-of-concept

See you next year! 👋

GitHub

GitHub - atredispartners/proof-of-concept: Proof of concepts and other snippets

Proof of concepts and other snippets. Contribute to atredispartners/proof-of-concept development by creating an account on GitHub.

0

Cyber Security and Artificial Intelligence Conference - Cyber Security and Artificial Intelligence Conference

· 3w ago

Atredian Matt Burch (@emptynebuli@mastodon.social) will be presenting his ATM supply chain research and demonstrating new exploitation tooling at #GrrCon!

📅 Friday, Sept 25 @ Noon
🔗 Abstract: https://buff.ly/GvZm49g

Presentations 2026 - Cyber Security and Artificial Intelligence Conference

Presentations 2026 GrrCON 2026 Presentations Two days. Four tracks. No egos. No divas. Just a good time and good content. Keynotes Thursday · OpeningGrrCON Awakening: Truth, Tactic, Talent - How Humans WinDr. Louis DeWeaver, George Kamide, Dr. Chase Cunningham Thursday · AfternoonThe Alert Still Fires: Defending against Frontier Model Coordinated AttacksAoibh Wood Thursday ·

0

1

0

Cyber Security and Artificial Intelligence Conference - Cyber Security and Artificial Intelligence Conference

· 1mo ago

This September Atredian Matt Burch (@emptynebuli@mastodon.social) will be presenting "Compounding Interest: Exploiting the ATM Supply Chain" at #GrrCon in GrandRapids MI. Come see how supply chain gaps can provide significant adversary advantage.

📅 Friday, Sept 25 @ Noon
🔗 Abstract: https://grrcon.com/presentations/#burch

Presentations 2026 - Cyber Security and Artificial Intelligence Conference

Presentations 2026 GrrCON 2026 Presentations Two days. Four tracks. No egos. No divas. Just a good time and good content. Keynotes Thursday · OpeningGrrCON Awakening: Truth, Tactic, Talent - How Humans WinDr. Louis DeWeaver, George Kamide, Dr. Chase Cunningham Thursday · AfternoonThe Alert Still Fires: Defending against Frontier Model Coordinated AttacksAoibh Wood Thursday ·

0

· 2mo ago

You have 1hr to catch Matt Burch (@emptynebuli@mastodon.social) present Compounding Interest: Exploiting the ATM Supply Chain at @defcon@defcon.social.

🗓️ AUG 8, 12:30PM
📍 Main Track 4
#DEFCON #DEFCON34 #Hacking
https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627

DEF CON® 34 Hacking Conference - Main Stage Talks

Speakers Page for DEF CON 34

0

· 2mo ago

Tomorrow catch Matt Burch (@emptynebuli@mastodon.social) present Compounding Interest: Exploiting the ATM Supply Chain at @defcon@defcon.social.

🗓️ AUG 8, 12:30PM
📍 Main Track 4
#DEFCON #DEFCON34 #Hacking
https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627

DEF CON® 34 Hacking Conference - Main Stage Talks

Speakers Page for DEF CON 34

0

1

0

#BHUSA2026 #Cybersecurity #InfoSec
https://blackhat.com/us-26/briefings/schedule/index.html?day=wednesday#the-cost-of-obscurity-exploiting-the-atm-supply-chain-51998

· 2mo ago

In 1 hr at #BlackHat, join Matt Burch (@emptynebuli@mastodon.social) as he takes the stage and dives into the ATM supply chain. Matt will be disclosing 9 CVEs affecting CryptWare CryptoPro and officially releasing his tooling, ragavan.

📅 2:35 PM in South Seas C&D, Level 3