Keystone discloses Nexus app cyberattack, its third security disclosure in two weeks

Keystone told users on Friday, November 6, to update its Nexus app to version 1.3.7 after a cyberattack disrupted some app services and prevented a number of users from running the app for a period. The hardware wallet maker said it responded and strengthened server security, and its investigation had not found signs that users’ assets or personal data were compromised; it also told users to confirm the developer is Yanssie HK Limited. The disclosure was Keystone’s third security disclosure in roughly two weeks. Earlier, it said an intruder accessed its Shopify-powered store, with 25,964 buyer records containing shipping and order information stolen, and that the same attacker took a WebAuth authenticity key, leading it to scrap 18,835 unsold units.