深夜刷到一堆钱包相关的：Keystone官网泄露、27000台云主机被塞恶意软件、Electrum调费漏洞、x100治理被夺。主题很统一，入口多半不在AI猜的那个地方，绕在供应链和权限分配上。自己那台VPS和插件版本明天再核一遍。
0
0
0
21
リスクから見る retweeted
The FBI continues to warn about two critical security flaws in PHP, a programming language used to build many websites and online services. Attackers could exploit these vulnerabilities to break into systems, putting sensitive information and business operations at risk. Security nd should be applied immediately.
If you are a business owner or website operator, check whether your systems are affected. Contact your IT support team, website developer, or hosting provider for help identifying vulnerable systems and applying the necessary updates.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information on these vulnerabilities (CVE-2026-109618 and CVE-2026-109619), follow PHP’s announcements on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
If you are a business owner or website operator, check whether your systems are affected. Contact your IT support team, website developer, or hosting provider for help identifying vulnerable systems and applying the necessary updates.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information on these vulnerabilities (CVE-2026-109618 and CVE-2026-109619), follow PHP’s announcements on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
170
1,253
4,819
364,341
RT @levelsio: Maybe important to repost this now that everyone is getting hacked
If you have a VPS, I recommend you to get if off the publ…
If you have a VPS, I recommend you to get if off the publ…
0
413
0
RT @evilcos: 随机提醒下，及时更新你的 iPhone/iPad 系统，小心你已安装的某些 App 被投毒了 DarkSword…
这玩意主要目标是针对 iPhone 币圈用户的钱包…定点攻击，定点盗币。利用 iOS 相关漏洞突破沙盒，窃取 Keychain 里的各…
这玩意主要目标是针对 iPhone 币圈用户的钱包…定点攻击，定点盗币。利用 iOS 相关漏洞突破沙盒，窃取 Keychain 里的各…
0
59
0
リスクから見る retweeted
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
344
4,174
18,606
7,049,159
リスクから見る retweeted
UPDATE: 🚨 Ledger is asking resellers and distributors in Indonesia, Singapore, Thailand, Philippines, Vietnam, Malaysia, and Hong Kong to suspend sales while its investigation into tampered devices continues.
25
20
189
89,170
リスクから見る retweeted
BTC速報：Ledgerの公式発表によると
１．犯罪シンジケートが組織的にサプライチェーン攻撃
２．多額のコスト、長い月日をかけた大掛かりな攻撃
３．一度購入したものを改造し、代理店に戻した
４．対象は東南アジア、ドイツ(EU)は改ざんの確認なし
５．Ledger自体の脆弱性やシステム問題ではない
gerも怪しいなどがありましたが、今のところ日本は安心して良さげ。
ヤフオクやメルカリなど不明な二次流通、そもそもの購入元が怪しいなどがなければ安全？
#イーサリアム #Ethereum #ETH #仮想通貨 #暗号資産 #DeFi #NFT #リップル #ソラナ #ビットコイン #Ledger
１．犯罪シンジケートが組織的にサプライチェーン攻撃
２．多額のコスト、長い月日をかけた大掛かりな攻撃
３．一度購入したものを改造し、代理店に戻した
４．対象は東南アジア、ドイツ(EU)は改ざんの確認なし
５．Ledger自体の脆弱性やシステム問題ではない
gerも怪しいなどがありましたが、今のところ日本は安心して良さげ。
ヤフオクやメルカリなど不明な二次流通、そもそもの購入元が怪しいなどがなければ安全？
#イーサリアム #Ethereum #ETH #仮想通貨 #暗号資産 #DeFi #NFT #リップル #ソラナ #ビットコイン #Ledger
注意：ハードウェアウォレット最大手の一つ、Ledgerがサプライチェーン攻撃を受けて「物理的にバックドアを可能とする電子回路が組み込まれていた」ことが判明、特にアジアを中心として販売停止を要請
１．販売停止対象国
・インドネシア
・マレーシア
・フィリピン
・シンガポール
・タイ
来LedgerのようなハードウェアウォレットはSecure Elementによってセキュリティ侵害されず、物理的な攻撃にも比較的強い。一方で今回は表示されたニーモニックフレーズ(リカバリーフレーズ）を記録されているため、そもそも初期段階で漏れていたことになります。
３．被害範囲拡大の可能性
またユーザーからドイツでも疑いのあるLedgerが報告されているため、基本的には関連しないウォレットへ資産退避が望ましいでしょう。
被害は主にTRONがベースとなっており、イーサリアム、ビットコインの順でハッキングが確認されています。
直近のMetamaskの攻撃は恐らくAI起因であると推測される一方、完全に物理的なサプライチェーン攻撃はLedgerの落ち度🤔
#イーサリアム #Ethereum #ETH #仮想通貨 #暗号資産 #DeFi #NFT #ビットコイン #Ledger #ソラナ #TRON #リップル #SOL #XRP
3
13
60
16,810
リスクから見る retweeted
Incident Update - Oct 13th, 2026
Ledger is asking resellers and distributors in Southeast Asia and Hong Kong to suspend sales of Ledger devices while the investigation is ongoing. This includes taking products off the shelves.
Specifically the countries are: Indonesia, Singapore, Thailand, Philippines, Vietnam, Malaysia, and Hong Kong.
To be clear, as the investigation continues, the only confirmed incidents remain contained to Southeast Asia. We have not verified a drain linked to a device bought elsewhere.
The investigation is ongoing to determine who tampered with these devices and where in the distribution chain it happened. The Ledger Donjon will analyze the devices it receives, and Ledger Customer Support will provide guidance to users who reach out through our official channel: support.ledger.com.
We understand this is concerning, and will continue to provide updates from the Ledger Donjon as the investigation progresses. Stay vigilant.
We have no indication that Ledger's infrastructure, systems or services or direct sales channel have been compromised.
Ledger is asking resellers and distributors in Southeast Asia and Hong Kong to suspend sales of Ledger devices while the investigation is ongoing. This includes taking products off the shelves.
Specifically the countries are: Indonesia, Singapore, Thailand, Philippines, Vietnam, Malaysia, and Hong Kong.
To be clear, as the investigation continues, the only confirmed incidents remain contained to Southeast Asia. We have not verified a drain linked to a device bought elsewhere.
The investigation is ongoing to determine who tampered with these devices and where in the distribution chain it happened. The Ledger Donjon will analyze the devices it receives, and Ledger Customer Support will provide guidance to users who reach out through our official channel: support.ledger.com.
We understand this is concerning, and will continue to provide updates from the Ledger Donjon as the investigation progresses. Stay vigilant.
We have no indication that Ledger's infrastructure, systems or services or direct sales channel have been compromised.
260
264
1,511
312,573
リスクから見る retweeted
the ledger story just got 10x worse
it's not just southeast asia anymore. the same spy chips were just found inside ledgers bought from mediamarkt in europe
two different store locations. same modification. antenna. LTE module. identical setup
these weren't returns. the store confirmed they came directly from the distributor
the distributor? aqipa gmbh. they supply over 1,000 stores across 11 european countries
this means the compromise is happening BEFORE the devices reach the shelves
you walk into a legit electronics store. buy a ledger off the shelf. sealed box. receipt and everything
and there's a spy chip inside it
first it was a compromised reseller in southeast asia
this is no longer an isolated incident. this is a supply chain crisis
it's not just southeast asia anymore. the same spy chips were just found inside ledgers bought from mediamarkt in europe
two different store locations. same modification. antenna. LTE module. identical setup
these weren't returns. the store confirmed they came directly from the distributor
the distributor? aqipa gmbh. they supply over 1,000 stores across 11 european countries
this means the compromise is happening BEFORE the devices reach the shelves
you walk into a legit electronics store. buy a ledger off the shelf. sealed box. receipt and everything
and there's a spy chip inside it
first it was a compromised reseller in southeast asia
this is no longer an isolated incident. this is a supply chain crisis
196
300
2,437
382,870
リスクから見る retweeted
Ledger改造端末事件の顛末をCB Terminalの編集部にまとめてもらいました。図解ちゃんと描けるようになっててホンマ賢い😇
【特集】Ledger改造端末で約9,300万ドル流出、代理店CryptoBilisのサプライチェーン攻撃事件まとめ
cb-terminal.dev/ja/topic/af80c…
Ledgerの正規代理店CryptoBilisで売られた端末の利用者から、分析会社の集計で約9,300万ドルが流出した。Ledgerは端末の改造を確認している。事件の経緯をまとめました。
1
21
66
9,137
RT @mono_i_love: 自身のLedger端末を分解する人が続いた結果、欧州の正規販売店で購入した端末でもスパイ基板を発見したという報告が相次ぐ。
長年ハードウェアウォレットを推奨していた人も、工場・通信事業者・販売店、店舗・ドライバーまで信用しなければならないので「…
長年ハードウェアウォレットを推奨していた人も、工場・通信事業者・販売店、店舗・ドライバーまで信用しなければならないので「…
0
137
0
RT @mono_i_love: Ledger nano Xに埋め込まれたスパイ装置の解説記事。大体こういう感じらしい。
ディスプレイの下に隠された追加基板があり、基盤のMCUが画面へ送られる表示信号を読み取って、表示された内容（シードフレーズを含む）を復元。
そのデータを…
ディスプレイの下に隠された追加基板があり、基盤のMCUが画面へ送られる表示信号を読み取って、表示された内容（シードフレーズを含む）を復元。
そのデータを…
0
420
0
リスクから見る retweeted
SBI証券の不正利用対策もやりました
パスキー認証は設定していましたが、ログインパスワードが有効のままだとメルアドを乗っ取られると簡単にログイン出来てしまうので無効にしておきました
パスキー認証は設定していましたが、ログインパスワードが有効のままだとメルアドを乗っ取られると簡単にログイン出来てしまうので無効にしておきました
26
892
6,391
1,459,384
a veces las cosas no salen como uno quiere, es por eso que existe el $$$$.. *DEDICADO A TODOS LOS QUE SE HACEN LLAMAR POLITICOS...*
0
0
0