KioSoft’s Epic Delay: Vulnerability Patch Takes Over a Year, Free Card Top-Ups Abound!
SEC Consult discovered a flaw in KioSoft’s NFC cards that lets hackers conjure free balance top-ups, turning laundromat visits into magical money-making escapades. Despite the urgency, KioSoft took over a year to patch the vulnerability, leaving hackers more time to wash and dry their ill-gotten gains.
Hot Take:
***You know it’s a red flag when fixing a security flaw takes longer than your laundry cycle. KioSoft’s vulnerability saga is the ‘Lost Sock’ of cybersecurity: mysterious, frustrating, and probably lurking somewhere in the dryer of negligence.***
Key Points:
– KioSoft took over a year to address a significant vulnerability in its NFC-based payment cards.
– The vulnerability allows hackers to top-up card balances for free using known MiFare card security flaws.
– SEC Consult discovered the issue in 2023 and struggled with delayed responses from KioSoft.
– A firmware patch was eventually released in 2025, but SEC Consult couldn’t verify it.
– KioSoft claimed most of their products don’t use the vulnerable technology.