Sign in

Atredis Partners

@atredispartners.bsky.social
45 followers 17 following 49 posts

Atredis is a 100% worker-owned team of world-class security researchers and consultants. We do risk-centric, research-driven security testing and consulting. atredis.com

PostsRepliesMedia
Atredis Partners @atredispartners.bsky.social · 18/09/2026
Atredian Matt Burch (@emptynebuli.bsky.social) will be presenting his ATM supply chain research and demonstrating new exploitation tooling at #GrrCon! 📅 Friday, Sept 25 @ Noon 🔗 Abstract: buff.ly/GvZm49g
023
Atredis Partners @atredispartners.bsky.social · 31/08/2026
🚨 Our research just hit WIRED! Atredian Matt Burch's (@emptynebuli.bsky.social) latest ATM research highlights gaps in the ATM supply chain, allowing for malicious system access via the controls designed to protect the platform! Read the full story regarding your local cash machine: buff.ly/GKJwanu
wired.com
ATM Flaws Reveal Key Weaknesses in the Software Supply Chain
A security researcher discovered nine vulnerabilities impacting ATM encryption and authentication software. But the problems extend far beyond your local cash machine.
000
Atredis Partners @atredispartners.bsky.social · 31/08/2026
This September Atredian Matt Burch (@emptynebuli.bsky.social) will be presenting "Compounding Interest: Exploiting the ATM Supply Chain" at #GrrCon in GrandRapids MI. Come learn about the ATM supply chain attack surface. 📅 Friday, Sept 25 @ Noon 🔗 Abstract: grrcon.com/presentation...
grrcon.com
Presentations 2026 - GrrCON Cyber Security and Hacker conference
Presentations 2026 GrrCON 2026 Presentations Two days. Four tracks. No egos. No divas. Just a good time and good content. Keynotes Thursday · OpeningGrrCON Awakening: Truth, Tactic, Talent - How…
010
Atredis Partners @atredispartners.bsky.social · 08/08/2026
If you missed the @defcon.bsky.social main stage talk "Compounding Interest: Exploiting the ATM Supply Chain," you have 1hr to catch Matt Burch's (@emptynebuli.bsky.social) encore at @paymentvillage.bsky.social. 🗓️ AUG 8, 4:00PM 📍 Payment Village #DEFCON #DEFCON34 #Hacking www.paymentvillage.org
paymentvillage.org
Payment Village
Payment Village at DEF CON 34
010
Atredis Partners @atredispartners.bsky.social · 08/08/2026
You have 1hr to catch Matt Burch (@emptynebuli.bsky.social) present Compounding Interest: Exploiting the ATM Supply Chain at @defcon.bsky.social. 🗓️ AUG 8, 12:30PM 📍 Main Track 4 #DEFCON #DEFCON34 #Hacking
defcon.org
DEF CON® 34 Hacking Conference - Main Stage Talks
1.1 Million Cameras, One Wildcard: Architectural Surveillance in an IoT Cloud Sammy Azdoufal
031
Atredis Partners @atredispartners.bsky.social · 07/08/2026
Tomorrow catch Matt Burch (@emptynebuli.bsky.social) present Compounding Interest: Exploiting the ATM Supply Chain at @defcon.bsky.social. 🗓️ AUG 8, 12:30PM 📍 Main Track 4 #DEFCON #DEFCON34 #Hacking
defcon.org
DEF CON® 34 Hacking Conference - Main Stage Talks
1.1 Million Cameras, One Wildcard: Architectural Surveillance in an IoT Cloud Sammy Azdoufal
011
Atredis Partners @atredispartners.bsky.social · 06/08/2026
Planning your @defcon.bsky.social week? Add CAPTURE_THE_COIN CTF from @paymentvillage.bsky.social to your list and catch Matt Burch's encore presentation of "Compounding Interest: Exploiting the ATM Supply Chain." Watch the talk, then put those TTPs to the test in the CryptoPro CTF. buff.ly/yfRaHli
buff.ly
DEF CON® 34 Hacking Conference - Contests
Contests Page for DEF CON 34. Compete in feats of hacking might.
000
Atredis Partners @atredispartners.bsky.social · 05/08/2026
In 1hr at @blackhatofficial.bsky.social, join Matt Burch (@emptynebuli.bsky.social) as he dives into the ATM supply chain. Matt will be disclosing 9 CVEs and officially releasing his tooling, ragavan. 📅 2:35 PM in South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec #BlackHat
blackhat.com
Black Hat USA 2026
Black Hat USA 2026
021
Atredis Partners @atredispartners.bsky.social · 04/08/2026
Tomorrow at @blackhatofficial.bsky.social, join Matt Burch (@emptynebuli.bsky.social) as he dives into the ATM supply chain. If you are attending Black Hat, add this to your schedule! 📅 AUG 5 at 2:35 PM 📍 South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec #BlackHat
blackhat.com
Black Hat USA 2026
Black Hat USA 2026
002
Atredis Partners @atredispartners.bsky.social · 04/08/2026
Atredians are in the air headed to Vegas for #BlackHat and #DEFCON! We always look forward to learning, sharing, and connecting with the community. If you see one of our shirts in the hall be sure to stop us and say hi!
031
Atredis Partners @atredispartners.bsky.social · 30/07/2026
9 CVEs, 1 new tool, and a deep dive into the ATM supply chain. @defcon.bsky.social is exactly 1 week out! Catch Matt Burch (@emptynebuli.bsky.social) present Compounding Interest: Exploiting the ATM Supply Chain. 🗓️ AUG 8, 12:30PM 📍 Main Track 4 #DEFCON #DEFCON34 #Hacking
defcon.org
DEF CON® 34 Hacking Conference - Main Stage Talks
1.1 Million Cameras, One Wildcard: Architectural Surveillance in an IoT Cloud Sammy Azdoufal
000
Atredis Partners @atredispartners.bsky.social · 28/07/2026
Next week at @blackhatofficial.bsky.social, join Matt Burch (@emptynebuli.bsky.social) as he dives into the ATM supply chain. If you are attending Black Hat, add this to your schedule! 📅 AUG 5 at 2:35 PM 📍 South Seas C&D, Level 3 #BHUSA2026 #Cybersecurity #InfoSec #BlackHat
blackhat.com
Black Hat USA 2026
Black Hat USA 2026
012
Atredis Partners @atredispartners.bsky.social · 25/07/2026
Are you itching to try out Matt Burch's (@emptynebuli.bsky.social) ATM research from @BlackHatofficial.bsky.social + @defcon.bsky.social? CryptoPro will be part of Capture the Coin CTF via @paymentvillage.bsky.social. Drop by and test drive ragavan 🏧 #BlackHat #DefCon defcon.org/html/defcon-...
defcon.org
DEF CON® 34 Hacking Conference - Contests
$$$$$_<CAPTURE_THE_COIN>_$$$$$ $unL1ght Sh4d0w5 5N4CK3Y ?Cube Adversary Wars CTF AI Art Battle AI Village Plays Pokemon: DEF CON Edition Apex Park (Cloud Village CTF) Aw, man...pages! BadgeLife…
001
Atredis Partners @atredispartners.bsky.social · 21/07/2026
If you are heading to @defcon.bsky.social this summer, don't miss Atredian Matt Burch (@emptynebuli.bsky.social) and his continued CryptoPro research in Compounding Interest: Exploiting the ATM Supply Chain. See you at Track 4, Saturday Aug 8 at 12:30. defcon.org/html/defcon-...
defcon.org
DEF CON® 34 Hacking Conference - Main Stage Talks
1.1 Million Cameras, One Wildcard: Architectural Surveillance in an IoT Cloud Sammy Azdoufal
003
Atredis Partners @atredispartners.bsky.social · 13/07/2026
@defcon.bsky.social 32 Matt (@emptynebuli.bsky.social) released 6 CE bugs affecting Diebold Nixdorf.. and now he is back with 9 more via the CryptoPro supply chain! 👀 Come join his #BHUSA briefing on Wednesday August 5th - you won't want to miss it! 🏧 🏦 @blackhatofficial.bsky.social
blackhat.com
Black Hat USA 2026
Black Hat USA 2026
013
Atredis Partners @atredispartners.bsky.social · 10/07/2026
Atredian Matt (@emptynebuli.bsky.social) spoke with @DarkReading.bsky.social about his upcoming @BlackHatofficial.bsky.social talk "The Cost of Obscurity: Exploiting the ATM Supply Chain" 🔒️ 💵 Bottom line: Disk encryption doesn't help if the keys are stored right next to the lock.
darkreading.com
Fresh ATM Crypto Software Bugs: Jackpot or Bust?
Organizations, and possibly ATMs, are at risk of compromise, thanks to holes in a Microsoft BitLocker security wrapper.
012
Atredis Partners @atredispartners.bsky.social · 16/05/2026
"Bad News for the Average Pentester" ... But who wants to be average? Here's some thoughts from Shawn on why Human-Powered Pentesting is here to stay. www.atredis.com/blog/2026/5/...
atredis.com
Bad News for the Average Pentester — Atredis Partners
With the changes to the market of late, Atredis has actually been exceedingly busy. We've been working with AI and related tech since we started the company over a dozen years ago, but in the last…
035
Atredis Partners @atredispartners.bsky.social · 12/03/2026
We decided to revisit an old research problem with some new LLM powered tooling. Check out our latest blog post to see how we approached this research, and the new Java deserialization gadget chains it discovered in just two days! www.atredis.com/blog/2026/3/12/findings-gadgets-like-its-2026
atredis.com
Findings Gadgets Like it’s 2026 — Atredis Partners
Java deserialization vulnerabilities have been of interest to me for nearly a decade. In 2016, my team published a blog post titled "What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your…
045
Atredis Partners @atredispartners.bsky.social · 26/02/2026
On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable's Nessus Agent. No public PoC was available, so we made one; check it out here github.com/atredispartn...
github.com
proof-of-concept/cve-2025-36632 at main · atredispartners/proof-of-concept
Proof of concepts and other snippets. Contribute to atredispartners/proof-of-concept development by creating an account on GitHub.
034
Atredis Partners @atredispartners.bsky.social · 09/02/2026
Atredis identified a vulnerability in the way Rapid7's Nexpose was generating passwords to protect its Java KeyStore which is used to encrypt saved credentials. This vulnerability was reported to Rapid7 and a patch is being rolled out today! Check out the details here: github.com/atredispartn...
002
Atredis Partners @atredispartners.bsky.social · 28/01/2026
Command & Conquer'd: worming RCEs through a classic multiplayer game. Check out the full writeup from our @districtcon.bsky.social Junkyard submission here: www.atredis.com/blog/2026/1/... By @droner.bsky.social and @jordan9001.bsky.social #Security #modding #rce
atredis.com
General Graboids: Worms and Remote Code Execution in Command & Conquer — Atredis Partners
[this work was conducted collaboratively by Bryan Alexander and Jordan Whitehead] This post details several vulnerabilities discovered in the popular online game Command & Conquer: Generals. We…
0109
Atredis Partners @atredispartners.bsky.social · 12/12/2025
Last week, hardware. This week, firmware! Sam is back with a deep dive into his LiDAR Detector and demos a couple prototypes! www.atredis.com/blog/2025/12...
024
Atredis Partners @atredispartners.bsky.social · 05/12/2025
Say Cheese, Computer! Designing a Sensor for Passive Detection of iPhone TrueDepth LiDAR www.atredis.com/blog/2025/11/20/designing-a-passive-lidar-detection-sensor
013
Atredis Partners @atredispartners.bsky.social · 13/11/2025
Let's Hack Something Cute! A Reverse Engineering Journey into the Drawbot with Jessie www.atredis.com/blog/2025/9/...
atredis.com
Drawbot: Let’s Hack Something Cute! — Atredis Partners
The Target A few months ago I realized I was overdue for a fun, quirky hardware project. Every so often I like to see what new and interesting electronic children's toys are out there. When looking,…
033
Atredis Partners @atredispartners.bsky.social · 12/09/2025
In case you missed it, be sure to watch Atredian Matt Burch's (@emptynebuli.bsky.social) #HackSpaceCon talk, Where's the Money: Defeating ATM Disk Encryption! buff.ly/RqUmthH
buildcyber.ai
Build Cyber
001
Atredis Partners @atredispartners.bsky.social · 28/08/2025
Check out our latest blog from Matt Burch (@emptynebuli.bsky.social ) detailing new supplemental findings from his DefCon32 talk Where's the Money: Defeating ATM Disk Encryption: www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057
atredis.com
Where’s the Money - Supplemental Findings — Atredis Partners
While creating the content for my DefCon 32 talk, Where’s the Money: Defeating ATM Disk Encryption, I observed two additional vulnerabilities that had been overlooked in the heat of the research.…
023
Atredis Partners @atredispartners.bsky.social · 18/07/2025
ICYMI, @synacktiv.com's Pwn2Own walkthrough, exploiting a Tesla Wall via the charging port is a good Friday read. After a firmware downgrade, they found a debug shell via the access point used during setup, ultimately using this to gain EIP. www.synacktiv.com/en/publicati...
synacktiv.com
Exploiting the Tesla Wall connector from its charge port connector
An interesting attack surface Over the past few years, Synacktiv has been analyzing Tesla vehicles for the Pwn2Own competition.
001
Atredis Partners @atredispartners.bsky.social · 09/07/2025
We recently identified a number of privilege escalation vulnerabilities in Lenovo Vantage on Windows; check out our latest blog for a technical deep dive www.atredis.com/blog/2025/7/...
atredis.com
Uncovering Privilege Escalation Bugs in Lenovo Vantage — Atredis Partners
Atredis Partners is an advanced security services and research consulting firm.
035
Atredis Partners @atredispartners.bsky.social · 27/06/2025
Be sure to watch Matt Burch's (@emptynebuli.bsky.social) @CypherCon.bsky.social talk, Where's the Money: Defeating ATM Disk Encryption! buff.ly/wWaSlle
022
Atredis Partners @atredispartners.bsky.social · 27/05/2025
Where do the Ads in Trackmania come from? In-game ads and reverse engineering tips in this mini-post from Jordan www.atredis.com/blog/2025/5/...
atredis.com
A Peek into an In-Game Ad Client — Atredis Partners
A little bit ago I re-installed the racing game Trackmania, and I noticed I got product ads displayed at me in-game alongside the racetrack. Where were those coming from?
023
Atredis Partners @atredispartners.bsky.social · 16/05/2025
Sam wanted to answer the question "can you 3D print pogo pin harnesses?" So, he ran some experiments this week to find out. Check out the blog post and grab the models to try for yourself! buff.ly/xWcWE5W #pogopin #probe #3dprinting #atredis
020
Atredis Partners @atredispartners.bsky.social · 09/05/2025
In case you missed it. Don't miss @emptynebuli.bsky.social presenting at #HackSpaceCon in Cape Canaveral on May 14th! 💰 🚀 buff.ly/tRaisC8
001
Atredis Partners @atredispartners.bsky.social · 09/05/2025
Don’t miss Atredian Bill Carver talking about Ransomware Readiness @bsidesbuffalo.bsky.social - Hope to see you there on June 7th!
bsides-buffalo-2025.sessionize.com
BSides Buffalo 2025
Mobile app & schedule website
002
Atredis Partners @atredispartners.bsky.social · 02/05/2025
Don't miss @emptynebuli.bsky.social presenting at #HackSpaceCon in Cape Canaveral on May 14th! 💰 🚀 No ticket? No Problem! 👀 We have a few extra 👀 Reply to the post and we will hook you up! buff.ly/tRaisC8
021
Atredis Partners @atredispartners.bsky.social · 25/04/2025
Sam @bespokebugs.bsky.social wanted to answer the question "can you 3D print pogo pin harnesses?" So, he ran some experiments this week to find out. Check out the blog post and grab the models to try for yourself! atredis.squarespace.com/blog/2025/4/... #pogopin #probe #3dprinting #atredis
014
Atredis Partners @atredispartners.bsky.social · 14/04/2025
Don't miss Atredian Matt Burch (@emptynebuli.bsky.social) presenting "Where's the Money: Defeating ATM Disk Encryption" at #HackSpaceCon! buff.ly/zHBii72
021
Atredis Partners @atredispartners.bsky.social · 07/04/2025
Be sure to watch Chris's @districtcon.bsky.social talk, DaBootZone: Breaking the DA1469x Boot ROM! buff.ly/Xw3Hhpi
030
Atredis Partners @atredispartners.bsky.social · 31/03/2025
In case you missed it, happening this week: Catch Atredian Matt Burch's talk about ATM Hacking on April 4th @cyphercon.bsky.social buff.ly/If1XTou
010
Atredis Partners @atredispartners.bsky.social · 28/03/2025
Proud to be a sponsor of @BsidesBuffalo.bsky.social! Hope to see you there on June 7th!
bsky.app
BSides Buffalo (@bsidesbuffalo.bsky.social)
Excited to announce our latest Gold Sponsor for the 2025 conference, first-time sponsors Atredis! Atredis Partners is industry-leading, research-driven consulting, offering services in penetration…
012
Atredis Partners @atredispartners.bsky.social · 21/03/2025
Don't miss Atredian Matt Burch (@emptynebuli.bsky.social) on April 4th, talking about ATM Hacking on the Circle stage @cyphercon.bsky.social! cyphercon.com/portfolio/wh...
022
Atredis Partners @atredispartners.bsky.social · 19/03/2025
In case you missed it: @tomprogramming.bsky.social explores creating and hijacking Node.js DLLs with @ziglang.bsky.social in the latest blog post! buff.ly/D1s2iF3
t.co
Node is a loader — Atredis Partners
Atredis Partners is an advanced security services and research consulting firm.
000
Atredis Partners @atredispartners.bsky.social · 17/03/2025
In case you missed it: Want to learn more about the upcoming changes to the HIPAA Security Rule? Our Risk and Advisory team gives a rundown of the proposed changes here:
buff.ly
Advisory Blog Series: HIPAA Security Rule Updates — Atredis Partners
As you may have already heard, the HIPAA Security Rule is undergoing a much-needed update. We wanted to discuss what Covered Entities and Business Associates - now referred to as “Regulated Entities”…
110
Atredis Partners @atredispartners.bsky.social · 17/03/2025
This is why we started this company in the first place, and it always feels soooo good to hear it from folks. Thank you for making our day @cyberdude83.bsky.social.🥲
010
Atredis Partners @atredispartners.bsky.social · 14/03/2025
We recently discovered a local privilege escalation in Kolide; it impacts Kolide >= 1.5.3, < 1.12.3 on Windows machines. Check out our full disclosure here
buff.ly
advisories/ATREDIS-2025-0001.md at master · atredispartners/advisories
Atredis Partners Security Advisories. Contribute to atredispartners/advisories development by creating an account on GitHub.
025
Atredis Partners @atredispartners.bsky.social · 11/03/2025
@tomprogramming.bsky.social explores creating and hijacking Node.js DLLs with @ziglang.bsky.social in the latest blog post! buff.ly/D1s2iF3
t.co
Node is a loader — Atredis Partners
Atredis Partners is an advanced security services and research consulting firm.
002
Atredis Partners @atredispartners.bsky.social · 28/02/2025
In case you missed it:
buff.ly
Atredis Partners (@atredispartners.bsky.social)
Catch Chris' talk DaBootZone: Breaking the DA1469x BootROM @districtcon.bsky.social ! Stream: https://buff.ly/4bcOsmj Slides: https://buff.ly/4gT3bDW Info: https://buff.ly/4gT3dM4
010
Atredis Partners @atredispartners.bsky.social · 28/02/2025
Catch Atredian Matt Burch's talk about ATM Hacking on April 4th @cyphercon.bsky.social buff.ly/If1XTou
022
Atredis Partners @atredispartners.bsky.social · 21/02/2025
Catch Chris' talk DaBootZone: Breaking the DA1469x BootROM @districtcon.bsky.social ! Stream: buff.ly/4bcOsmj Slides: buff.ly/4gT3bDW Info: buff.ly/4gT3dM4
buff.ly
dabootzone_districtcon.pdf
045
Atredis Partners @atredispartners.bsky.social · 21/02/2025
Want to learn more about the upcoming changes to the HIPAA Security Rule? Our Risk and Advisory team gives a rundown of the proposed changes here:
buff.ly
Advisory Blog Series: HIPAA Security Rule Updates — Atredis Partners
As you may have already heard, the HIPAA Security Rule is undergoing a much-needed update. We wanted to discuss what Covered Entities and Business Associates - now referred to as “Regulated Entities”…
032