Attackers escape the kiosk application sandbox to access the underlying operating system through input field exploits, keyboard shortcut injection, or peripheral manipulation, gaining full control of the kiosk device.
Immediate Response
1Remotely reboot affected kiosks to restore the locked-down application environment.
2Disable physical USB ports and peripheral access on all kiosk devices.
3Review kiosk system logs for evidence of OS-level access or command execution.
4Assess whether any sensitive data was accessed during the breakout.
