[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWvycTdjYkT6nvdwyoFVzjn-KlcFqScTktVxJNSyyVAU":3},{"article":4,"iocs":40,"watch_terms":41,"solutions":42,"lesson":102},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":22,"category":23,"article_tags":27},"525d26e8-05f2-45d1-ad6a-ae8eddbda572","Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports","ledger-finds-unauthorized-hardware-implant-in-cryptobilis-sold-wallet-amid-fund--001d5c","Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via CryptoBilis following reports of stolen funds linked to devices sold by the reseller. On Friday, the company said it was investigating reports of loss of funds from users in Southeast Asia who had purchased products from CryptoBilis. The incident is said to have resulted in losses totaling more than $86","Ledger has halted sales through reseller CryptoBilis due to reports of over $86 million in stolen funds from users in Southeast Asia. The company is investigating, and has confirmed one affected user's device contained an unauthorized hardware implant. Ledger advises users who purchased from CryptoBilis in the last 90 days to avoid setting up their devices or to move assets if already set up.","Ledger pauses sales via CryptoBilis after reports of $86M fund theft linked to tampered hardware wallets.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Fledger-finds-unauthorized-hardware.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEg4nzJQQovkKtR-dl3ihW4VRAfIxiKwNwwVEHyH06we8iIkQbaxVqhryWIwB9MflLHfBYAd_opklCfnkLxg-GKqB2yt4CisdNcf2lRvOoaYHo9Pa6m1OWatzNsFHmY1ICBH_0P2XX4ykgFE7Gqviz0C0_8J0Qqz36_3gygDyHbot9z5obuYEHunIFsZmPQV\u002Fs1600\u002Fledgers.jpg","2026-10-12T11:21:48+00:00","2026-10-12T14:00:08.523184+00:00",8,[17,20],{"name":18,"type":19},"Ledger","vendor",{"name":21,"type":19},"CryptoBilis","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":22,"icon":24,"name":25,"slug":26},null,"Supply Chain","supply-chain",[28,30,35],{"category":29},{"id":22,"icon":24,"name":25,"slug":26},{"category":31},{"id":32,"icon":24,"name":33,"slug":34},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":36},{"id":37,"icon":24,"name":38,"slug":39},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21],{"controls":43,"vendors":101},[44,72],{"slug":45,"name":46,"problem":47,"products":48},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[49,56,64],{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":51,"url":54,"description":55},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"slug":73,"name":74,"problem":75,"products":76},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[77,85,93],{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",[],{"slug":103,"title":104,"body":105,"framework_refs":106,"framework_notes":115},"hardware-implants-in-resold-crypto-wallets-expose-supply-chain-risk","Hardware Implants in Resold Crypto Wallets Expose Supply Chain Risk","Ledger hardware wallets sold through unauthorized or compromised reseller CryptoBilis were found to contain physical hardware implants, enabling attackers to steal over $86 million from users in Southeast Asia. This attack exploits the critical gap between manufacturer quality controls and third-party reseller channels, where tampered devices can reach end users without any visible signs of compromise. Unlike software-based attacks, hardware implants are extremely difficult for consumers to detect without specialized equipment, making supply chain integrity essential. This incident underscores that even security-focused hardware products are vulnerable when distribution channels are not rigorously vetted and monitored.",[107,108,109,110,111,112,113,114],"NIST SP 800-161 (Supply Chain Risk Management)","CIS Control 15 – Service Provider Management","NIST SP 800-53 SA-12 (Supply Chain Protection)","ISO 28000 – Supply Chain Security Management","NIST CSF ID.SC-4 (Suppliers and third-party partners are routinely assessed)","GDPR Article 32 – Security of Processing","NIST SP 800-53 PE-16 (Delivery and Removal of Physical Assets)","CIS Control 3 – Data Protection",{}]