Security· ★★★· bearish·

Foundation Ties Passport Phishing Emails to Compromised Cloudflare API Keys

  • —Phishing emails were sent via compromised Cloudflare API keys
  • —Recipients reported exposure of personal and purchase details
  • —Foundation said Passport hardware and funds were not affected
Why it matters: The breach hits customers of a hardware wallet maker, raising the risk of targeted phishing against holders and putting pressure on the vendor.
Source: The Defiant