Week in review: Hidden implant in Ledger wallets linked to $93M theft, 1,500+ npm packages exposed
ID: 5cab9315-e38d-5493-91e0-3ac3a886448e
STIX ID: report--5cab9315-e38d-5493-91e0-3ac3a886448e
Feed Name: Help Net Security
**Executive summary:** This is a weekly cybersecurity news roundup covering a broad set of active threats and research: exploited CVEs and zero-days (Microsoft CVE-2026-96951, GitLab CVE-2026-97229, chained Ivanti zero-days), supply-chain and package-takeover issues (npm Trusted Publishing exposures), malware and trojans (KGB RAT, infostealers), large fraud/phishing campaigns and scams, a hardware wallet theft incident, DDoS trends, and multiple operational and product-security updates and advisories.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
