Microsoft will stop XP support soon. That mean no more security updates, assuming the ATMs that run XP are even doing updates, which they probably aren’t since they aren’t connected to the Internet. Or maybe some are even if they aren’t supposed to be, which might even be more unsettling..
ATMs use a special embedded version of XP which will be supported longer than regular XP. However, we are trusting the security of our ATM transactions to creaky versions of Windows which have probably never been updated. This should make cybercriminals happy.