As cited
Copy frozen at (site build).
Week in review: Hidden implant in Ledger wallets linked to $93M theft, 1,500+ npm packages exposed
A week in review article covering multiple cybersecurity stories, including a hidden implant discovered in Ledger hardware wallets connected to a $93 million theft and the exposure of over 1,500 npm packages. The piece also highlights AWS's release of Strands Box, an open-source sandbox for artificial intelligence (AI) agents with operating-system isolation capabilities currently available in developer preview for Apple silicon Macs.
Why it matters: Hardware wallet users face financial risk from supply chain compromises in Ledger devices; developers using npm packages need to audit dependencies for exposed code; security teams should evaluate AWS Strands Box for safely testing AI agents in their environments.
- Source published
- First seen by Cybersecurity Tracker