"Security Flaw Exposes Millions of Hotel Door Locks to Hackers"

Researchers have disclosed a series of security flaws, dubbed "Unsaflok," that impact 3 million Saflok electronic RFID locks deployed in 13,000 hotels worldwide, allowing attackers to easily unlock any door in a hotel by forging a pair of keycards. The vulnerabilities were discovered by a team of researchers who reverse-engineered Dormakaba's front desk software and a lock programming device, enabling them to create forged keycards that could open any room on the property. While the manufacturer is actively working to mitigate the flaw, as of March 2024, 64% of the locks remain vulnerable, and guests can check their keycard type using the NFC Taginfo app to determine if their locks are vulnerable.