Ledger asks sellers across Asia to halt sales after supply-chain attack
2026-10-14T19:23:21Z•ecea1c1936e3af7940ddea64dd4d6662b2879152574751d348bfde175d51e2b2
CVE-2026-39919Android malwareCisco Secure Email GatewayGhostscriptIvanti Connect SecureMicrosoft Patch Tuesdayactively exploitedbanking trojanhardware walletincident responsephishingremote code executionsupply-chain attackzero-day
What happened
A BleepingComputer feed covering multiple cybersecurity developments, including actively exploited zero-days in Cisco Secure Email Gateway and Ivanti Connect Secure, a critical Ghostscript remote-code-execution flaw (CVE-2026-39919), widespread Microsoft Patch Tuesday vulnerabilities, Android banking malware, phishing infrastructure disruption, and a suspected Ledger supply-chain tampering incident.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- ecea1c1936e3af7940ddea64dd4d6662b2879152574751d348bfde175d51e2b2
- Enrichment time
- 2026-10-14T19:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.