Microsoft will stop XP support soon. That mean no more security updates, assuming the ATMs that run XP are even doing updates, which they probably aren’t since they aren’t connected to the Internet. Or maybe some are even if they aren’t supposed to be, which might even be more unsettling..
ATMs use a special embedded version of XP which will be supported longer than regular XP. However, we are trusting the security of our ATM transactions to creaky versions of Windows which have probably never been updated. This should make cybercriminals happy.
Most of these are running on Embedded XP, which has a different end-support date. The end-support date is not a drop-dead date though. You can purchase extended support from MS, it’s just not free anymore.