SUPPLY CHAIN ATTACK TARGETING LEDGER CRYPTO WALLET LEAVES USERS HACKED

Summary from the TLDR InfoSec newsletter

Ledger has reported that hackers compromised the code for the Ledger Connect software development kit used by decentralized apps to interface with Ledger wallets. The hackers pushed out a malicious version of the kit. Ledger pushed out an update of the Connect Kit to replace the malicious one within 40 minutes of becoming aware. The attackers have amassed $600,000 in stolen funds.