ATM Software Flaws Left Piles of Cash for Anyone Who Knew to Look

Diebold Nixdorf’s Vynamic Security Suite (VSS) contains multiple vulnerabilities in its disk-encryption/integrity-check workflow: an unencrypted pre-boot Linux partition that performs integrity checks can be exploited to decrypt ATM hard drives. Researcher Burch identified six different paths to achieve this outcome and reported them to the vendor.