Critical IBM FTM Flaws Let Attackers Execute Code and Access Payment Systems
IBM patched critical flaws in Financial Transaction Manager, including unauthenticated RCE vulnerabilities with CVSS scores up to 9.9.
3
Stories per day · 30 days
3 stories, newest first · one card per story
Stories tagged #payment-security
Your Shredded Visa Card May Still Work at the Checkout
UMass Amherst researchers demonstrated expired Visa contactless cards can complete real purchases via relay attacks exploiting Visa Kernel 3's unsigned expiry date handling.
1
Researchers find a loophole that lets expired credit cards make unauthorized payments
UMass Amherst researchers showed at USENIX Security 2026 that NFC relay attacks can rewrite unprotected expiration dates, letting expired Visa contactless cards keep making payments.
1