Physical

October 15, 2026

• Ledger implant reports have expanded to authorized European retail. Zero Day says a German owner found implants in two Nano X wallets purchased from MediaMarkt; separate reports now involve Flex and Stax devices. Ledger says it sees no evidence its own infrastructure or services were breached, and some broader reports remain independently unconfirmed. That materially widens yesterday’s implant story (earlier coverage). Zero Day (discussion) · Supply Chain & Hardware Security · also via supply chain

October 14, 2026

• An OpenAI engineering lead was arrested over a hidden recorder in an executive conference room. Abdulrahman Alfozan, 35, a Saudi national employed since July 2025, was arrested 9 October and charged with endeavoring to intercept oral communications. OpenAI staff found the device on or around 30 September — wrapped in toilet paper and plugged into a USB port behind a television — installed around 28 September; CCTV allegedly showed Alfozan near the room on multiple dates despite having no authorization to be there. He has been terminated (The Hacker News, DoJ). · Industry & Law Enforcement

October 11, 2026

• Ledger confirmed an unauthorized hardware implant inside at least one affected customer device, a material escalation in the wallet-draining investigation tied to Southeast Asian reseller CryptoBilis and more than $86M in suspected thefts. Mark Karpelès notes the implants have progressed from hand-soldered wires to mass-produced circuit boards designed to blend with original components. @DailyDarkWeb (earlier coverage) · Threat Activity

October 9, 2026

• A reported Ukrainian drone strike shut down a Yandex data centre in Sasovo, Ryazan; Yandex acknowledged a power outage on Telegram without linking it to the attack (The Record). · Threat Activity

September 4, 2026

• Germany's transmission grid took a second major physical sabotage attack, this time in North Rhine-Westphalia, following the earlier substation incident — a reminder that high-voltage infrastructure failures can cascade well beyond the local area (Florian Roth). · Threat Activity

July 6, 2026

• Nordea warns that a handful of Nordic customers have been hit by card skimming at Central and Southern European tourist destinations since last autumn, with skimming devices found on public-transport ticket machines and fuel-station payment terminals (IS Digitoday). · Threat Activity & Intelligence