TWO STUDENTS FIND SECURITY BUG THAT COULD LET MILLIONS DO LAUNDRY FOR FREE

Summary from the TLDR InfoSec newsletter

Students have discovered a security flaw in internet-connected laundry machines used by millions of college students that allows free operation and manipulation of account balances through an app's API vulnerability. The vulnerability affects over a million machines across North America and Europe owned by CSC ServiceWorks.