--- title: Fresh ATM Crypto Software Bugs: Jackpot or Bust? | daily.dev description: Security researcher Matt Burch discovered nine vulnerabilities in CryptWare CryptoPro Secure Disk, a full-disk encryption and pre-boot authentication solution... canonical: https://daily.dev/posts/fresh-atm-crypto-software-bugs-jackpot-or-bust--lah4xbpml twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Fresh ATM Crypto Software Bugs: Jackpot or Bust? | daily.dev og:description: Security researcher Matt Burch discovered nine vulnerabilities in CryptWare CryptoPro Secure Disk, a full-disk encryption and pre-boot authentication solution... og:url: https://daily.dev/posts/fresh-atm-crypto-software-bugs-jackpot-or-bust--lah4xbpml og:image: https://api.daily.dev/og/posts/LaH4xbpMl.png og:image:alt: Fresh ATM Crypto Software Bugs: Jackpot or Bust? og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Fresh ATM Crypto Software Bugs: Jackpot or Bust? **[Dark Reading](https://daily.dev/sources/dr)** · 7 min read · 0 upvotes · 0 comments ## Summary Security researcher Matt Burch discovered nine vulnerabilities in CryptWare CryptoPro Secure Disk, a full-disk encryption and pre-boot authentication solution used in both enterprise Windows environments and ATM security suites. Key flaws include decryption failures defaulting to plaintext mounting, a superficial LUKS encryption check that can be spoofed, and cryptographic key material stored insecurely on disk. Combined, these issues allowed Burch to run arbitrary code during pre-boot, recover decryption keys, and execute a standard ATM jackpotting attack. ATM giant Diebold Nixdorf disputes the severity, acknowledging only two of nine vulnerabilities are theoretically applicable to its systems and claiming a December 2025 patch addressed them. Beyond ATMs, CryptoPro claims over 500,000 enterprise licenses across 20 industries, making the broader organizational risk significant regardless of the ATM angle. The findings will be presented at Black Hat USA 2026. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Ploutus Malware: Uptick in ATM jackpotting incidents prompts FBI warning](https://daily.dev/posts/ploutus-malware-uptick-in-atm-jackpotting-incidents-prompts-fbi-warning-u5fgl74tp) · InfoSec Write-ups · 0 upvotes · 0 comments - [Hackers steal $3.6 million from crypto ATM giant Bitcoin Depot](https://daily.dev/posts/hackers-steal-3-6-million-from-crypto-atm-giant-bitcoin-depot-zy1khutys) · BleepingComputer · 0 upvotes · 0 comments - [Schneier on Security](https://daily.dev/posts/schneier-on-security-jnh2t0p3j) · Schneier on Security · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/fresh-atm-crypto-software-bugs-jackpot-or-bust--lah4xbpml) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Fresh ATM Crypto Software Bugs: Jackpot or Bust?","url":"https://daily.dev/posts/fresh-atm-crypto-software-bugs-jackpot-or-bust--lah4xbpml","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/fresh-atm-crypto-software-bugs-jackpot-or-bust--lah4xbpml"},"datePublished":"2026-07-10T14:04:16.977Z","dateModified":"2026-08-24T06:52:48.618Z","description":"Security researcher Matt Burch discovered nine vulnerabilities in CryptWare CryptoPro Secure Disk, a full-disk encryption and pre-boot authentication solution...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b8da70d2c8b76ec57d34b59d99b957b2?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b8da70d2c8b76ec57d34b59d99b957b2?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Dark Reading","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Dark Reading","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/dr","url":"https://daily.dev/sources/dr"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/fresh-atm-crypto-software-bugs-jackpot-or-bust--lah4xbpml","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Dark Reading","item":"https://daily.dev/sources/dr"},{"@type":"ListItem","position":3,"name":"Fresh ATM Crypto Software Bugs: Jackpot or Bust?"}]} ```