Two UC Santa Cruz students discovered a security vulnerability in CSC ServiceWorks laundry machines, affecting over a million internet-connected machines and enabling free laundry cycles. The bug, found by Alexander Sherbrooke and Iakov Taranenko, allows running machines for free, posing risks like potential overheating and fires if safety rules are disregarded. Despite reporting the flaw months ago, CSC ServiceWorks has not addressed it, highlighting the importance of security checks for technology vendors
The students' investigations and efforts to alert CSC and Carnegie Mellon University's CERT Coordination Centre have been met with silence, underscoring the need for organizations to take immediate actions to protect their systems from exploitation and ensure safety. https://cybersecuritynews.com/students-uncover-security-bug/