Fresh ATM Crypto Software Bugs: Jackpot or Bust?

Researcher Matt Burch disclosed nine vulnerabilities in CryptWare's CryptoPro Secure Disk—an FDE and pre-boot authentication product integrated into some enterprise fleets and parts of Diebold's Vynamic Security Suite—that allow pre-boot arbitrary code execution, plaintext mounting on failure, on-disk exposure of key material/configuration, and Secure Boot bypass. Chained together these flaws enable recovery of Windows decryption keys and a standard ATM jackpotting flow to steal cash; Diebold disputes the extent of the impact to its ATMs but acknowledges limited component usage and worked with the vendor to address at least two issues in a December 2025 update.