Fresh ATM Crypto Software Bugs: Jackpot or Bust?

A researcher, Matt Burch, discovered nine vulnerabilities in CryptoPro Secure Disk, a full-disk encryption solution used by ATM manufacturer Diebold Nixdorf. These vulnerabilities could allow attackers to bypass encryption, steal cash, and potentially run arbitrary code on ATMs. While Diebold disputes the severity of the findings and claims they don't use BitLocker or CryptoPro for BitLocker, the vulnerabilities are theoretically applicable to their HDE component. The issue highlights a broader concern about the security of encryption and key management in ATM systems, with CryptoPro being widely used across various organizations.