Affected scope
Keystone 3 Pro before 2.4.0
What the attack requires
Physical possession, correct PIN, unlocked device, approved USB connection and attacker-controlled computer.
What changed
2.4.0 released April 1, 2026.
What this finding establishes
Joint audit in March; July security update. No evidence of attacks on users reported.