Summary
Researchers at the University of Massachusetts Amherst have discovered a vulnerability allowing expired contactless Visa credit cards to be used for purchases by manipulating the expiry date read by terminals. This attack requires physical possession of the card and two smartphones, and while EMV protections exist, they were not enabled on tested cards or terminals.