Hey friendsky! My husband is looking for work - he's very good at Linux, cloud, AWS, and networking stuff. He's got an extensive home lab and manages all of our services. Seattle or remote. But he's bad at networking so I'm trying to leverage my network on his behalf. Cheers!

After weeks of biting my nails in suspense. I am excited to announce my continued ATM research has been accepted to @defcon.bsky.social !!!!! Don't miss my new research Compounding Interest: Exploiting the ATM Supply Chain 💰💰

If you've had an actual relationship with a woman you wouldn't need this.

It's basically summer which means you should be thinking about what video games you should be playing. We submit into record Command & Conquer Generals

We're looking for a cover for the next issue of Phrack! Retro sci-fi, terminals, dystopian systems, chrome futures, hacker manuals from an alternate timeline. Make something timeless and strange. Send your work or idea to [email protected] Deadline June 30th

Confession time: I use agentic coding all day, every day. It makes me much more productive. But I am also terrified of skill atrophy, I feel like I need to break out pen & paper to force myself to "weight-lift" mentally so I don't forget how to think. How do y'all handle this?

I wanted to share that I have joined the @paymentvillage.bsky.social team and am looking forward to @defcon.bsky.social this summer 😉

"Bad News for the Average Pentester" ... But who wants to be average? Here's some thoughts from Shawn on why Human-Powered Pentesting is here to stay. www.atredis.com/blog/2026/5/...

The Junkyard Call for Bugs is officially open! 👾 www.districtcon.org/junkyard For additional information, please reference our Disclosure Guidance doc: lnkd.in/ewjswJyf And if you missed last years presentations, check them out on YouTube now: www.youtube.com/@DistrictCon...

I've seen rumblings, but what's the latest status on what we're all moving to for referencing vulns now that CVEs are looking like they are going to die?

DistrictCon Year 1 Talks are officially live on our YouTube Channel! Check it out: youtube.com/watch?v=RDqX... A HUGE shoutout to our incredible speaker line up that came out through the snow to share their amazing content with us.

Feb. 6-7, 2027 | See you there 🪩✌️

Attention all men. More of this, please.

What a fall from grace for HackerOne, once my favourite bug-bounty platform. 😬 "HackerOne triage analyst incorrectly closes the report as a duplicate [...]" clickup.com/blog/april-2...

The CEO of Theori / Xint has a thread explaining why they chose to release the vulnerability details in a way that left all of the Linux distros in the dark. TL;DR: With AI in the mix, the old way of coordinating vulnerabilities doesn't scale anymore.

if you find a cool security bug I bet you could make the most money from it by selling it to an AI startup so they can pretend their tooling found it

Pandas are my spirit animal

I've just put out a new video, What is dependency confusion, and how to exploit it. www.youtube.com/watch?v=sn7z... If you like this type of content, and think training like this could help your organisation, please get in touch.

We decided to revisit an old research problem with some new LLM powered tooling. Check out our latest blog post to see how we approached this research, and the new Java deserialization gadget chains it discovered in just two days! www.atredis.com/blog/2026/3/12/findings-gadgets-like-its-2026

On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable's Nessus Agent. No public PoC was available, so we made one; check it out here github.com/atredispartn...

Another day, another audit of a vibe coded app with almost no security controls. 🫗

Atredis identified a vulnerability in the way Rapid7's Nexpose was generating passwords to protect its Java KeyStore which is used to encrypt saved credentials. This vulnerability was reported to Rapid7 and a patch is being rolled out today! Check out the details here: github.com/atredispartn...

Tanium is great enterprise c2.

Command & Conquer'd: worming RCEs through a classic multiplayer game. Check out the full writeup from our @districtcon.bsky.social Junkyard submission here: www.atredis.com/blog/2026/1/... By @droner.bsky.social and @jordan9001.bsky.social #Security #modding #rce

[RSS] When NAS Vendors Forget How TLS Works www.interruptlabs.co.uk -> #QNAP #Synology #Pwn2Own #NoCVE Original->

[RSS] Districton 1 Slides - Control the Variables and You Control the Code: Language-Level Vulnerabilities in Adobe ColdFusion www.hoyahaxa.com -> Original->

Thank you @districtcon.bsky.social, it was a wonderful conference, and we're looking forward to next year! ❤️

You like technical deep dives into binary exploitation and crazy heap wizardry? Then you'll like our blog post about unauth'ed RCE in NetSupport Manager aka CVE-2025-34164 & CVE-2025-34165 code-white.com/blog/2026-01...

DISTRICTCON IS STILL A GO! We are excited to see you all on Saturday, January 24 as we are still going through our normal programming! While we are unable to process refunds, we are adding virtual components to Saturday AND Sunday including a livestream for public sessions for ticket holders.

This weekends weather forecast is a good reminder: Fuck ice

We still have seats open for @blackhoodie.bsky.social at @districtcon.bsky.social on January 23rd in Washington DC! The class will be reverse engineering their way through an integer overflow bug in libpng 🤓 blackhoodie.re/DistrictCon2...

It's so sad that he thinks we don't have eyes and haven't seen the videos ourselves. She was not "trying to ram the officer." Fun fact: when you are trying to ram an officer, you turn the wheels towards them, not away from them. Extra fun fact: shooting someone trying to ram you doesn't stop them.

Fuck ICE.

Any recommendations for exploit dev focused #CTF with an archive of challenges? I'm looking for samples and interested in code comprehension, less interested in obfuscation/VMs. Original->

We have 2 student sweepstake tickets up for grabs to attend RE//verse 2026! These cover conference admission and meals. Travel and hotel are not included, so you must be able to travel to Florida. Ticket is non-transferrable. Email [email protected] by Jan 16th with the following:

Blind trust: what is hidden behind the process of creating your PDF file? swarm.ptsecurity.com/blind-trust-... #vulnerability #cve #exploitation #infosec

When the codebase you've been auditing for the past month is mature and secure by default.

Last week, hardware. This week, firmware! Sam is back with a deep dive into his LiDAR Detector and demos a couple prototypes! www.atredis.com/blog/2025/12...

Our LG refrigerator is 2 years old and cost $2,100 when we bought it. The condenser fan motor is failing and LG wants to charge $400 to fix it. Have they considered making better quality products? Jesus christ, we'll fix it ourselves.

had to make a gif of the goodest boy

Say Cheese, Computer! Designing a Sensor for Passive Detection of iPhone TrueDepth LiDAR www.atredis.com/blog/2025/11/20/designing-a-passive-lidar-detection-sensor

VulnCheck is #hiring (senior) exploit developers in the U.S. and UK! If you love writing RCE exploits but also want to help customers detect exploitation and assess exposure, this is a fantastic place to learn and grow! Open roles here - we're also looking for UK engineers: www.vulncheck.com/careers

TL;DR Middle management is hard. Caring is required, but the kind of care you provide matters.

George says gobble gobble, happy thanksgiving, and fuck ICE.

Windows 11 requiring weird hacks to only use a local account. Microsoft are a bunch of cunts for forcing online account onto people.

Sometimes you audit a codebase and are just absolutely blown away by how elegant and well thought-out it is. 🤌

Our Black Friday Sale is now active! Take 42% off everything with code BLACKFRIDAY25. Grab the books you’ve been eyeing. Sale ends 12/2. https://nostarch.com/

We took WPScan's one-liner #security advisory for CVE-2025-9501 affecting the W3 Total Cache plugin for #WordPress, analysed its cache parsing internals and built a pre-auth RCE exploit for it 😎 www.rcesecurity.com/2025/11/expl... #infosec

We sold out of our GA tickets in 15 seconds 🤯 For students: Thanks to our community sponsors, our DistrictCon Scholars' Program application is open! For anyone else passionate about DisCo: Volunteer with us! You can also join our waitlist on Eventbrite! All info here: www.districtcon.org/tickets