Atredis

We found several vulnerabilities leading to remote code execution on the Foresight Sports GC3 golf launch monitor; check the details out here https://github.com/atredispartners/advisories/blob/master/2026/ATREDIS-2026-0010.md
#golf #hacking

Hello @bsidesatl@infosec.exchange!
Join Atredians @pbrass@infosec.exchange and Matt at 11:30 in Conference E to learn how to leverage LLMs for targeted vulnerability discovery within larger engagements.
They will be discussing how they found two VMWare vCenter zero-days and how you can too!
https://pretalx.com/bsidesatl-2026/talk/SSG3KH/
#bsidesatl #atredis #vmware #zeroday #ai #llm

Are you planning your @defcon@defcon.social week? Be sure to add the CAPTURE_THE_COIN CTF from Payment Village to your list. Don't miss Matt Burch's encore presentation of "Compounding Interest: Exploiting the ATM Supply Chain." Watch the talk, then put those TTPs to the test in the CryptoPro CTF.
https://buff.ly/yfRaHli

🚨 Our research just hit WIRED!

Atredian Matt Burch's (@emptynebuli@mastodon.social) latest deep dive into ATM vulnerabilities highlights gaps in the ATM software supply chain, allowing for malicious system access through the controls designed to protect the platform! Read the full story on how these flaws extend far beyond your local cash machine: https://buff.ly/GKJwanu

If you are heading to #DefCon this summer, don't miss Atredian Matt Burch (@emptynebuli@mastodon.social) and his continued CryptoPro research in Compounding Interest: Exploiting the ATM Supply Chain. He will be presenting on the main stage Track 4, Saturday Aug 8 at 12:30. Looking forward to seeing you there!
https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627

Tomorrow at #BlackHat, join Matt Burch (@emptynebuli@mastodon.social) as he takes the stage and dives into the ATM supply chain.

In his briefing, Matt will be disclosing 9 CVEs affecting CryptWare CryptoPro and officially releasing his tooling, ragavan. If you are attending Black Hat, add this to your schedule!

📅 Wednesday, August 5 at 2:35 PM
📍 South Seas C&D, Level 3

#BHUSA2026 #Cybersecurity #InfoSec
https://blackhat.com/us-26/briefings/schedule/index.html?day=wednesday#the-cost-of-obscurity-exploiting-the-atm-supply-chain-51998

On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable's Nessus Agent. No public PoC was available, so we made one; check it out here https://github.com/atredispartners/proof-of-concept/tree/main/cve-2025-36632

"Bad News for the Average Pentester" ... But who wants to be average?

Here's some thoughts from Shawn on why Human-Powered Pentesting is here to stay.

https://www.atredis.com/blog/2026/5/15/bad-news-for-the-average-pentester

Thank you @bsidesatl@infosec.exchange! If you're looking for the plugin discussed in Phil and Matt's talk, you can get it here:
https://github.com/atredispartners/proof-of-concept

See you next year! 👋

Atredian Matt Burch (@emptynebuli@mastodon.social) will be presenting his ATM supply chain research and demonstrating new exploitation tooling at #GrrCon!

📅 Friday, Sept 25 @ Noon
🔗 Abstract: https://buff.ly/GvZm49g

This September Atredian Matt Burch (@emptynebuli@mastodon.social) will be presenting "Compounding Interest: Exploiting the ATM Supply Chain" at #GrrCon in GrandRapids MI. Come see how supply chain gaps can provide significant adversary advantage.

📅 Friday, Sept 25 @ Noon
🔗 Abstract: https://grrcon.com/presentations/#burch

You have 1hr to catch Matt Burch (@emptynebuli@mastodon.social) present Compounding Interest: Exploiting the ATM Supply Chain at @defcon@defcon.social.

🗓️ AUG 8, 12:30PM
📍 Main Track 4
#DEFCON #DEFCON34 #Hacking
https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627

Tomorrow catch Matt Burch (@emptynebuli@mastodon.social) present Compounding Interest: Exploiting the ATM Supply Chain at @defcon@defcon.social.

🗓️ AUG 8, 12:30PM
📍 Main Track 4
#DEFCON #DEFCON34 #Hacking
https://defcon.org/html/defcon-34/dc-34-speakers.html#content_66627

In 1 hr at #BlackHat, join Matt Burch (@emptynebuli@mastodon.social) as he takes the stage and dives into the ATM supply chain. Matt will be disclosing 9 CVEs affecting CryptWare CryptoPro and officially releasing his tooling, ragavan.

📅 2:35 PM in South Seas C&D, Level 3

#BHUSA2026 #Cybersecurity #InfoSec
https://blackhat.com/us-26/briefings/schedule/index.html?day=wednesday#the-cost-of-obscurity-exploiting-the-atm-supply-chain-51998