Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker.
Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that company to reach the wallets, both companies said late last week.
Web3Auth then used the attacker’s own route to empty other at-risk wallets before the attacker
SOURCE:
Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave
The login systems behind two car brands’ mobile apps could be taken over completely, two security researchers found, allowing them
A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis’s Threat Research Unit