Keystone says a security incident on its official website resulted in the exposure of device authentication keys and some customer information; it will deactivate the old keys, destroy 18,835 devices, and suspend shipments for some orders.
Railway reportedly disclosed anomalous activity in the system that stores customer environment variables, and some variables may have been obtained in plaintext by unauthorized parties. The platform temporarily suspended builds and deployments and now requires users to rotate keys and redeploy applications.
NGRAVE stated that attackers compromised LIQUID push service provider access permissions and sent phishing links; the company stated that ZERO hardware wallets and LIQUID code were not compromised.