Vulnerability in ATMs exploited to steal cash without modifying account balances (digit.in)

Appears to be poor system design, but also clever discover and exploit. The amount involved here is meager (less than USD 3000). Hopefully the vulnerability is now patched otherwise this news just published a manual for millions of opportunities.