All In One Login

Users across Brazil are reporting that Banco do Brasil's app and online banking services are offline. Complaints about failed logins and inaccessible services circulated widely, with many asking whether the outage is widespread. The bank has not been confirmed as issuing a public statement about the disruption.

Customers of a digital-only bank are reporting that they were locked out of their accounts until they entered their occupation, with one noting the list of industry options was unusual and omitted common categories like farming, government, professional services and consulting. Observers see it as a new compliance or know-your-customer requirement being pushed through online banking apps.

A vulnerability tracked as EUVD-2026-117334 affects the All In One Login WordPress plugin before version 2.5.0. The plugin fails to adequately limit the number of attempts that can be made against the short numeric code it uses, allowing attackers to brute-force their way past the login protection. Site administrators using the plugin are advised to update to version 2.5.0 or later to secure their login pages.

A developer announced Poweur ID, an open identity system that users hold themselves rather than relying on a central provider. Each ID combines a readable name, such as one hosted on a personal domain, with cryptographic keys stored on the user's own devices. The same identifier signs users in to apps via OIDC and IndieAuth, receives end-to-end encrypted messages, and supports encrypted sharing. Early reactions come from the open social web community, where interest in self-hosted identity is strong.

Reddit is planning to require users to log in to an account in order to browse its content, a change from the open access the platform has historically offered. Testing of the mandatory login requirement is set to begin soon. If rolled out broadly, the move would affect anonymous browsing and could draw criticism from users who value the site's openness.