Critical Alby Hub flaw could allow takeover of internet-exposed Bitcoin wallets

Alby reported a critical flaw in Alby Hub that could allow an attacker to take over a wallet and send its funds when the Hub's management interface is reachable from the internet. Alby said one user has been affected so far; it has not stated whether any money was lost.