EMV security protocol questioned

A group of Cambridge University scientists have discovered a flaw in the EMV smart card protocol, which they said enables criminals to use genuine cards to make a payment without knowing the personal identification number (PIN) related to the card. Moreover, the criminals can remain undetected even when the merchant has an online connection to the banking network.