Trezor warns of suspected crypto-theft implant in hardware wallet
2026-10-30T19:23:22Z•540dd99c8213acdda158eb11fbd7e50ae92b1eaa05889a3c5f01188c7d95b357
CVE-2026-20127APTCisco SD-WANDiameterDrupal Commerce CoreGPU infrastructureGitLabKeyDriftSS7SSH backdooractive exploitationbrowser hijackingcrypto miningcryptocurrency theftdata breachhardware walletmalicious extensionsmobile malwaresupply-chain compromisezero-day/exploitation
What happened
BleepingComputer security feed covering multiple October 2026 incidents, including active exploitation of critical GitLab and Drupal vulnerabilities, exploitation of Cisco SD-WAN flaw CVE-2026-20127 to deploy KeyDrift malware, malicious developer extensions planting SSH backdoors, crypto theft and supply-chain compromises, malware campaigns targeting GPU infrastructure, third-party data exposure, and malicious browser/mobile applications.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 540dd99c8213acdda158eb11fbd7e50ae92b1eaa05889a3c5f01188c7d95b357
- Enrichment time
- 2026-10-30T19:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.