Ledger plans to release its Android-based Atom wallet in mid-2027, after a breach that onchain researchers put at up to $93.2 million. It plans no trade-ins for customers hit by the tampering, so victims who want the new hardware will pay for it.
Perspective Coverage
11 publishers
- Builder
- Builder 33%
- Operator
- Operator 34%
- Investor
- Investor 33%
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+30
- Incentives65
- Confidence62
MediaMarktSaturn removed all Ledger products from its stores and online platforms over tampering reports. The public German evidence is an X user's claim that two wallets held cellular modules. Ledger did not answer Cointelegraph on whether it has confirmed any tampered device in Europe.
Perspective Coverage
6 publishers
- Builder
- Builder 23%
- Operator
- Operator 42%
- Investor
- Investor 35%
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence60
FBI drops Accenture as contractor over unpatched PeopleSoft that ShinyHunters breached
FBI dropped Accenture last week for failing to patch the Oracle PeopleSoft platform ShinyHunters breached, Reuters reported. Google separately says attackers hijacked the .as, .gh and .sl registries.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap
- Not scored
- Incentives
- Not scored
- Confidence45
buildOne report1 publisher A repo's .git/config can make a coding agent's background git call run any command
Manifold Security's GitSpawn lets a repo's .git/config run any command through a coding agent's background git calls, with no approval prompt. It needs the repo to arrive as files, since git clone never carries that config; a client's zip will do.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+8
- Incentives35
- Confidence55
Bitdefender found ad-fraud malware preinstalled in the firmware of thousands of cheap MediaTek-based Android phones in more than 150 countries. The implant cannot be uninstalled, so the point of purchase is where a buyer can keep it out.
Perspective Coverage
9 publishers
- Builder
- Builder 22%
- Operator
- Operator 57%
- Investor
- Investor 21%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+10
- Incentives40
- Confidence70
buildOne report1 publisher Japan tells companies to patch and harden logins after a Times Car leak exposed 6.6 million accounts
Japan's government told ministries, local authorities and companies to patch known flaws and tighten supplier security after 20-plus firms disclosed attacks. For operators the practical items are supplier maps, contractor logins and how long ID images are kept.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence50
More than 20 major Japanese companies have disclosed cyberattacks in recent weeks, the Financial Times reported. Tokyo's instructions to ministries and companies are basic. The recent cases put operators' exposure in their vendors and their ID handling.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+30
- Incentives35
- Confidence55
21 state attorneys general ask FCC to resolve TP-Link's China ties before approving new routers
Nebraska Attorney General Mike Hilgers led 21 states in asking the FCC to address TP-Link's China ties before it approves new router models. Nebraska's office puts TP-Link at 60 percent or more of the US retail market for Wi-Fi systems and small-office routers.
Publishers:protectthegoodlife.nebraska.gov
Reality
- Evidence30
- Adoption
- Not scored
- Hype gap
- Not scored
- Incentives70
- Confidence40
A national emergency declaration turns grid supply-chain preference into prohibition. What counts as prohibited will not be defined for roughly another four months.
Perspective Coverage
6 publishers
- Builder
- Builder 23%
- Operator
- Operator 57%
- Investor
- Investor 20%
Reality
- Evidence78
- Adoption
- Not scored
- Hype gap+30
- Incentives
- Not scored
- Confidence70
Black Kite's 2026 report locates the target set in the mid-market supplier layer that larger manufacturers buy from, and the Bank of England has already tied one carmaker's shutdown to a slowdown in UK growth figures.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+12
- Incentives
- Not scored
- Confidence62
Codex's read-only mode handed a cloned repository command execution on the host
Oren Yomtov of Accomplish found two ways out of the Codex sandbox, both silent and neither stopped by an approval prompt. OpenAI patched them within eight days, and other researchers have found the same design in rival agents.
Reality
- Evidence68
- Adoption45
- Hype gap−5
- Incentives55
- Confidence62
Asus clears the approval queue that now gates new foreign-made routers in the US
Asus is the biggest name so far through the Conditional Approval process that the Defense and Homeland Security departments run. Applicants hand over a component-level supply chain report and a time-bound plan to build the router in the US.
Reality
- Evidence60
- Adoption68
- Hype gap+28
- Incentives58
- Confidence55
Iran's mapped playbook runs on 130 well-known techniques across five groups
A CyberScoop op-ed argues that a prolonged conflict with Iran will show up as sustained low-grade disruption at small operators and sub-tier defense suppliers, and that US agencies should be wargaming it now.
Reality
- Evidence26
- Adoption20
- Hype gap+18
- Incentives55
- Confidence38
Dependabot now authenticates to GHCR with the same token Actions already carries
The PAT in dependabot.yml can finally come out, but only after an admin adds the repository to the package's Manage Actions access list, and GitHub keeps the old credential working, leaving half-done migrations indistinguishable from finished ones.
Reality
- Evidence45
- Adoption25
- Hype gap0
- Incentives55
- Confidence50