Published 6 hours ago • loading... • Updated 3 hours ago
Foundation Warns Passport Users After Cloudflare API Key Breach
Foundation said attackers used compromised Cloudflare API keys and a backend flaw to send convincing emails, but Passport devices and customer funds remain secure.
Foundation warns Passport owners after compromised Cloudflare API keys enabled fraudulent emails from official domains, while hardware and funds remain secure.
The Foundation revoked all Cloudflare API keys and shut down the fake callback site; the phishing emails had reached Passport recipients from official domain names.