In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days
Source SecurityWeek
Mentions 2 CVEs
Mentioned vulnerabilities
Description
This news roundup highlights multiple cybersecurity threats and developments including ransomware attacks targeting Synology NAS devices exploiting a patched vulnerability, a Chinese-language attack framework abusing a Flowise code injection flaw, LLMJacking incidents involving hijacked enterprise AI access generating fraudulent bills up to $1 million, and a reported hardware implant in Trezor wallets sold by a reseller that could steal recovery seeds. Additionally, SAP vulnerabilities are being weaponized within days of patch release, increasing ransomware interest. Chainalysis disclosed a breach exposing sensitive user credentials, and phishing campaigns impersonate major AI and tech events. These incidents collectively illustrate evolving threat tactics across hardware, software, AI, and cloud environments.