ATM Flaws Reveal Key Weaknesses in the Software Supply Chain

Security researcher Matt Burch disclosed nine vulnerabilities in CryptoPro Secure Disk, a disk-encryption and pre-boot authentication suite used by ATMs and other critical-industry devices, that could bypass integrity checks and expose encrypted data. CryptWare patched the flaws in versions 7.7.2 and 7.7.3, and Diebold Nixdorf applied fixes for the two bugs affecting its Vynamic Security suite, highlighting the multi-step difficulty of delivering patches across a broad software supply chain.