From the article:

In a video, researchers demonstrated making a contactless Visa payment of £1,000 from a locked iPhone. Apple said the matter was "a concern with a Visa system". Visa said payments were secure and attacks of this type were impractical outside of a lab.

Even if they want to blame Visa, Apple always touted the security measures THEY took so I am curious how they will square (pun not intended) this.

> The problem, researchers say, applies to Visa cards set up in 'Express Transit' mode in an iPhone's wallet.

> "Express Transit" is an Apple Pay feature which enables commuters to make quick contactless payments without unlocking their phone, for example touching-in and touching-out at a London Underground ticket barrier.

At least this does not apply to all VISA wallet cards.