Get the latest tech news

ATM Software Flaws Left Piles of Cash for Anyone Who Knew to Look


Six vulnerabilities in ATM-maker Diebold Nixdorf’s popular Vynamic Security Suite could have been exploited to control ATMs using “relatively simplistic attacks.”

Unlocking them with safecracking techniques, rigging them to steal users' personal data and PIN numbers, crafting and refining ATM malware and, of course, hacking them to spit out all their cash. The vulnerabilities, which the company says have all been patched, could be exploited by attackers to bypass an unpatched ATM's hard drive encryption and take full control of the machine. Burch found that he could manipulate the location of critical system validation files to redirect code execution; or, in other words, grant himself control of the ATM.

Get the Android app

Or read this on Wired

Read more on:

Photo of flaws

flaws

Photo of attackers

attackers

Photo of cash machines

cash machines

Related news:

News photo

Critical Bug in Docker Engine Allowed Attackers to Bypass Authorization Plugins

News photo

PKfail Secure Boot bypass lets attackers install UEFI malware

News photo

How AI is closing identity and endpoint gaps that attackers exploit