Keep Your ATM’s Software Up to Date
The short version
- An ATM is a computer. Like any computer, it needs regular software updates to stay secure.
- Updates fix weaknesses that criminals try to use, including in attacks that force an ATM to pay out cash.
- Triton ATMs only accept software that has been digitally signed by Triton, so a fake update won’t load.
- Dash pushes updates to your ATM remotely, so there’s nothing for you to do.
Your ATM is a computer
Inside every ATM is a small computer. It runs the screen, reads cards, talks to the PIN pad, sends each transaction to the bank network and tells the cash dispenser what to pay out. The software that does all this is written by the ATM’s maker and updated over time.
Dash runs Triton Argo ATMs. Triton says its ATMs run on an embedded version of Windows that it has tailored to protect against fraud, malware and jackpotting. That protection only stays strong if the software is kept current.
Why updates matter
No software is perfect. Over time, researchers and criminals find weaknesses. When a maker learns of one, it releases a fix. Until the fix is installed, the weakness stays open.
The Australian Cyber Security Centre (ACSC) says applying patches is critical to keeping systems secure. Patching is one of its Essential Eight strategies. For internet-facing systems, the ACSC recommends applying patches within two weeks, or within 48 hours if the vendor rates the issue critical or a working exploit exists.
The ACSC also warns that if a maker stops supporting a product with updates, you should think about upgrading to a newer one. That applies to ATMs too.
A real example
In 2010, a security researcher showed at a conference that he could make two brands of ATM pay out cash. Triton was one of them. Triton and the other maker released new firmware to fix the problem and urged ATM owners to install it straight away. ATMs that got the update were protected. ATMs that didn’t stayed exposed.
What’s in an ATM update
Updates can include:
- Security fixes that close known weaknesses.
- Card and network changes so your ATM keeps working with the banks and card schemes.
- Fixes for faults that cause errors or downtime.
- New features, such as screen and advertising options.
Only genuine software can load
An update is only useful if it’s genuine. Triton requires any software load on a Triton ATM to be digitally signed by Triton using its private key. If someone tries to load software that isn’t signed, the ATM won’t run it. This is one of the main defences against malware that tries to make an ATM pay out cash.
The FBI’s February 2026 advisory on ATM jackpotting describes criminals removing or replacing an ATM’s hard drive to install malware. It recommends checking that the software on an ATM matches a known, approved version. Signed software and regular updates both help here.
How Dash handles updates
Dash pushes updates to your ATM remotely, so there’s nothing for you to do. We test updates before they go out across the network, and we schedule them for quiet times so your customers aren’t affected.
Your ATM may restart briefly while an update is installed. This is normal. If it doesn’t come back into service, our monitoring will flag it and we’ll follow up.
What you can do
- Keep the ATM powered on and connected. Updates can’t reach an ATM that’s switched off or has its network cable unplugged.
- Don’t let anyone load software on site unless Dash has told you to expect them. Ask for ID and call us to check.
- Tell us about anything unusual, such as odd messages on the screen or a technician you weren’t expecting.
How Dash protects your ATM
- Remote updates. Security fixes reach your ATM without a site visit.
- Genuine Triton software, digitally signed so fake updates won’t load.
- Managed for you: installation, cash logistics, fault alerts, reconciliation and national field service, all visible in the Dash web portal.
- Contactless and tap-ready. Customers tap a card or phone, then enter their PIN, on a large touchscreen.
See the options to buy an ATM, or how we manage ATM networks.
FAQ
Do I need to update my ATM myself?
No. Dash pushes updates to your ATM remotely, so there’s nothing for you to do.
Can someone install fake software on my ATM?
Triton ATMs only run software that has been digitally signed by Triton. Even so, never let anyone work inside your ATM unless Dash has told you to expect them.
Who do I call if something looks wrong?
Call Dash support on 1300 125 592 or email support@dashatm.com.au.
Dash ATM has built and managed ATM networks across Australia since 2012, led by founder Paul Wrigley, in the ATM industry since 2002. Keep cash local.
Sources: ACSC: Patching applications and operating systems · ACSC: Small business cyber security guide · Threatpost: ATM makers release fixes for jackpotting flaw (2010) · ATMIA: Triton security and Windows · ATMIA: Triton Systems showroom · FBI FLASH-20260219-001: ATM jackpotting