[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fagOrE4-whVQq3AEncKDbefsoeZacdfnA94ZDBl-u7gg":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":136},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"2cb9406f-e830-41b5-9965-be235c600d7b","Fresh ATM Crypto Software Bugs: Jackpot or Bust?","fresh-atm-crypto-software-bugs-jackpot-or-bust-5b85df","Organizations, and possibly ATMs, are at risk of compromise, thanks to holes in a Microsoft BitLocker security wrapper.","New vulnerabilities have been discovered in a Microsoft BitLocker security wrapper that could allow attackers to compromise ATMs and other organizations. These flaws could enable unauthorized access to sensitive data and systems, potentially leading to financial losses or further network intrusion.","Microsoft BitLocker security wrapper flaws expose ATMs and organizations to compromise.","https:\u002F\u002Fwww.darkreading.com\u002Fvulnerabilities-threats\u002Fatm-crypto-software-bugs-jackpot-bust","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblte0e54c7d31cab23e\u002F6a5000c3376bd6f180079dbb\u002FATM-AM29-Getty.jpg?width=720&quality=80&disable=upscale","2026-07-10T14:00:00+00:00","2026-07-10T14:00:22.688044+00:00",7,[17,20],{"name":18,"type":19},"BitLocker","product",{"name":21,"type":22},"Microsoft","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":25,"name":26,"slug":27},null,"Vulnerabilities","vulnerabilities",[29,34,36,41],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"0493c7e9-989a-4692-b4e6-136f5ec09675","Cryptography","cryptography",{"category":35},{"id":23,"icon":25,"name":26,"slug":27},{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[],[21,18],{"controls":49,"vendors":130},[50,79,104],{"slug":51,"name":52,"problem":53,"products":54},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":80,"name":81,"problem":82,"products":83},"patch-management","Automated patch management","Known holes get closed in days, not months.",[84,92,96],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":80,"product_name":93,"url":94,"description":95},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":105,"name":106,"problem":107,"products":108},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[109,117,122],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":118,"product_name":119,"url":120,"description":121},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",[131],{"slug":132,"name":21,"logo_path":133,"roles":134},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png",[135],"affected",{"slug":137,"title":138,"body":139,"framework_refs":140,"framework_notes":151},"atm-crypto-software-flaws-risk-jackpotting-and-network-intrusion","ATM Crypto Software Flaws Risk Jackpotting and Network Intrusion","Newly discovered vulnerabilities in a Microsoft BitLocker security wrapper used in ATM software expose critical financial infrastructure to unauthorized access and potential jackpotting attacks. The root issue stems from unpatched or improperly configured cryptographic security layers that attackers can exploit to bypass protections on sensitive systems. ATMs represent high-value, often under-monitored endpoints that may lag significantly behind on security patches due to operational uptime requirements. This matters because a single compromised ATM can serve as a pivot point for deeper network intrusion into financial institution infrastructure, amplifying the blast radius far beyond cash dispensing.",[141,142,143,144,145,146,147,148,149,150],"CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-53 SC-7: Boundary Protection","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","PCI DSS Requirement 6.3: Security Vulnerabilities Identified and Managed","PCI DSS Requirement 11.3: Penetration Testing","ITIL Change Management: Emergency Change Procedures",{}]