[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2UhtHbPDVAHfe_gKktMG9ZlzKHZSh0HK9uwh5eDH_i8":3},{"article":4,"iocs":48,"watch_terms":52,"solutions":53,"lesson":139},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"8d15ba39-6de6-43a2-80ca-28e20743256d","$86 Million Crypto Heist Linked to Ledger Signer Hardware Implant","86-million-crypto-heist-linked-to-ledger-signer-hardware-implant-6377b2","A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers. The post $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant appeared first on SecurityWeek.","An unauthorized hardware implant discovered in Ledger signers sold through reseller CryptoBilis has been linked to the theft of at least $86 million in cryptocurrency. The implant, soldered onto the device's circuit boards, intercepts user data displayed on the screen, including recovery phrases, and transmits it to attackers via LTE. Ledger has advised users who purchased from the affected reseller to stop using their devices and consider moving assets.","Hardware implant in Ledger signers linked to $86M crypto heist.","https:\u002F\u002Fwww.securityweek.com\u002F86-million-crypto-heist-linked-to-ledger-signer-hardware-implant\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F01\u002Fcryptocurrency.jpeg","2026-10-13T10:36:05+00:00","2026-10-13T12:00:08.141464+00:00",8,[17,20,23],{"name":18,"type":19},"Ledger signers","product",{"name":21,"type":22},"Ledger","vendor",{"name":24,"type":22},"CryptoBilis","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":25,"icon":27,"name":28,"slug":29},null,"Supply Chain","supply-chain",[31,33,38,43],{"category":32},{"id":25,"icon":27,"name":28,"slug":29},{"category":34},{"id":35,"icon":27,"name":36,"slug":37},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":39},{"id":40,"icon":27,"name":41,"slug":42},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":44},{"id":45,"icon":27,"name":46,"slug":47},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[49],{"type":42,"value":50,"context":51},"hardware implant","Unauthorized circuit board designed to intercept user data and transmit it to attackers.",[21,24,18],{"controls":54,"vendors":138},[55,83,109],{"slug":56,"name":57,"problem":58,"products":59},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[60,67,75],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":62,"url":65,"description":66},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"slug":84,"name":85,"problem":86,"products":87},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":105,"product_name":106,"url":107,"description":108},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"slug":110,"name":111,"problem":112,"products":113},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[114,122,130],{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",[],{"slug":140,"title":141,"body":142,"framework_refs":143,"framework_notes":152},"hardware-implant-in-reseller-crypto-wallets-drains-86m","Hardware Implant in Reseller Crypto Wallets Drains $86M","Attackers compromised the hardware supply chain by physically implanting malicious components inside Ledger signing devices before they reached end users, enabling silent interception of recovery phrases via LTE transmission. This attack highlights the critical danger of purchasing security-sensitive hardware through unofficial or third-party resellers, where physical integrity cannot be guaranteed. Recovery phrases represent the ultimate cryptographic secret — once captured, all assets in a wallet are permanently at risk with no recourse. The incident underscores that even purpose-built security hardware provides zero protection if the device itself has been tampered with prior to delivery.",[144,145,146,147,148,149,150,151],"CIS Control 2: Inventory and Control of Software\u002FHardware Assets","CIS Control 15: Service Provider Management","NIST SP 800-161: Supply Chain Risk Management Practices","NIST SR-11: Component Authenticity","NIST SA-12: Supply Chain Protection","ISO\u002FIEC 27036: Information Security for Supplier Relationships","NIST CSF ID.SC-2: Suppliers and third-party partners of information systems are identified and prioritized","NIST CSF PR.AT-1: All users are informed and trained on supply chain risks",{}]