logo

Week in review: Hidden implant in Ledger wallets linked to $93M theft, 1,500+ npm packages exposed

ID: 5cab9315-e38d-5493-91e0-3ac3a886448e

STIX ID: report--5cab9315-e38d-5493-91e0-3ac3a886448e

Feed Name: Help Net Security

Threat Score
75/100

Date Published: 2026-10-18

Date Updated: 2026-10-18

Author: Help Net Security

...
...

**Executive summary:** This is a weekly cybersecurity news roundup covering a broad set of active threats and research: exploited CVEs and zero-days (Microsoft CVE-2026-96951, GitLab CVE-2026-97229, chained Ivanti zero-days), supply-chain and package-takeover issues (npm Trusted Publishing exposures), malware and trojans (KGB RAT, infostealers), large fraud/phishing campaigns and scams, a hardware wallet theft incident, DDoS trends, and multiple operational and product-security updates and advisories.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.