“CSC never responded when Sherbrooke and Taranenko reported the vulnerability via emails and a phone call in January”
CSC ServiceWorks claims more than a million laundry and vending machines. Two UC Santa Cruz students used its app API to run them for free and give an account millions of dollars in credit. CSC ignored the emails and the phone call, then quietly wiped the fake balance. It patched the money and left the hole.