I feel the same way about coffee (one of the reasons I have beverage snob in my bio). I'll usually scout out good coffee places when I'm booking travel and if I'm going somewhere I absolutely know won't have good coffee around, I have a hand grinder, beans, and an aeropress that I can travel with.
On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable's Nessus Agent. No public PoC was available, so we made one; check it out here github.com/atredispartn...
add in some protein powder and readjust some of the quantities there, and it sounds like my protein shake I make for lunch every day!
Another day, another audit of a vibe coded app with almost no security controls. 🫗
Gotta ask, where did he score that hoodie? I've been looking for some tailscale swag!
😬
Atredis identified a vulnerability in the way Rapid7's Nexpose was generating passwords to protect its Java KeyStore which is used to encrypt saved credentials. This vulnerability was reported to Rapid7 and a patch is being rolled out today! Check out the details here: github.com/atredispartn...
Oh hell yea
That's dope! How comfortable is it?
Tanium is great enterprise c2.
Command & Conquer'd: worming RCEs through a classic multiplayer game. Check out the full writeup from our @districtcon.bsky.social Junkyard submission here:
www.atredis.com/blog/2026/1/...
By @droner.bsky.social and @jordan9001.bsky.social
#Security #modding #rce
[RSS] When NAS Vendors Forget How TLS Works
www.interruptlabs.co.uk ->
#QNAP #Synology #Pwn2Own #NoCVE
Original->
[RSS] Districton 1 Slides - Control the Variables and You Control the Code: Language-Level Vulnerabilities in Adobe ColdFusion
www.hoyahaxa.com ->
Original->
Thank you @districtcon.bsky.social, it was a wonderful conference, and we're looking forward to next year! ❤️
You like technical deep dives into binary exploitation and crazy heap wizardry? Then you'll like our blog post about unauth'ed RCE in NetSupport Manager aka CVE-2025-34164 & CVE-2025-34165 code-white.com/blog/2026-01...
If it's helpful for anyone reading replies in this thread. I just got off the phone with the hotel, they are currently fully booked on Sunday night, though that is subject to change based on cancellations. If you're scheduled to checkout on Sunday and a flight gets cancelled, be prepared.
DISTRICTCON IS STILL A GO! We are excited to see you all on Saturday, January 24 as we are still going through our normal programming!
While we are unable to process refunds, we are adding virtual components to Saturday AND Sunday including a livestream for public sessions for ticket holders.
This weekends weather forecast is a good reminder:
Fuck ice
Him or Jackson, maaayybeeee Nix.
Can't Josh Allen just pass the ball to himself?
love this as well
We still have seats open for @blackhoodie.bsky.social at @districtcon.bsky.social on January 23rd in Washington DC! The class will be reverse engineering their way through an integer overflow bug in libpng 🤓
blackhoodie.re/DistrictCon2...
🫂😂
It's so sad that he thinks we don't have eyes and haven't seen the videos ourselves. She was not "trying to ram the officer."
Fun fact: when you are trying to ram an officer, you turn the wheels towards them, not away from them.
Extra fun fact: shooting someone trying to ram you doesn't stop them.
Fuck ICE.
Any recommendations for exploit dev focused #CTF with an archive of challenges?
I'm looking for samples and interested in code comprehension, less interested in obfuscation/VMs.
Original->
We have 2 student sweepstake tickets up for grabs to attend RE//verse 2026! These cover conference admission and meals. Travel and hotel are not included, so you must be able to travel to Florida. Ticket is non-transferrable. Email scholarship@re-verse.io by Jan 16th with the following:
Blind trust: what is hidden behind the process of creating your PDF file?
swarm.ptsecurity.com/blind-trust-...
#vulnerability #cve #exploitation #infosec
I had my worst season this year despite having the number one overall pick in the draft. I just barely made the playoffs but got knocked out in the first round. Best of luck to you!
When the codebase you've been auditing for the past month is mature and secure by default.
