$86 Million Crypto Heist Linked to Ledger Signer Hardware Implant

A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers.
The post $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant appeared first on SecurityWeek.
Continue reading $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant→

Meta outlines Muse Wonder safeguards for AI agents acting on your behalf

Meta’s Muse Wonder and Muse Wonder Full models are built for AI agents that handle tasks such as preparing insurance claims, reviewing leases and developing software. The models combine document analysis and tool use with the ability to retain relevant… Continue reading Meta outlines Muse Wonder safeguards for AI agents acting on your behalf→

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)

GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to execute arbitrary code on GitLab servers. About CVE-2026-97229 CVE-2026-97… Continue reading GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)→

npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover

Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker only needed to register a GitHub repository name the maintainer had left behi… Continue reading npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover→