Vulnerability disclosure stories

Sep 7, 2026

Ledger and Trezor call for responsible disclosure of security vulnerabilities amid AI threats

Hardware wallet manufacturers Ledger and Trezor are jointly urging the cryptocurrency industry to adopt more responsible disclosure practices for security vulnerabilities, with concerns mounting about AI-enabled threats. The rare collaboration between competitors aims to improve security standards across the hardware wallet sector.

Sep 7, 20262 sources

Sep 1, 2026

Linux kernel vulnerabilities surge to nearly 2,000 per release as AI bug hunters overwhelm maintainers

The Linux kernel is approaching 2,000 CVEs fixed per release, up from roughly 500 during the Linux 6.x era, as AI and large language models increasingly scan the kernel's 40 million lines of code. Maintainers report being 'completely overwhelmed' by the volume of vulnerability reports.

Sep 1, 20261 source

Aug 25, 2026

Cosmos Labs faces backlash over disclosure of bug affecting four blockchains

Cosmos Labs has drawn criticism from the crypto security community over its handling of a bug disclosure in its Cosmos EVM module, which has caused issues across four blockchain networks using the module.

Aug 25, 20261 source

Top claims

▪Ledger chief technology officer Charles Guillemet criticized researchers who publish security findings before fixes are available, calling the practice "attention farming with someone else's risk."
▪Ledger chief technology officer Charles Guillemet urged security researchers to report bugs privately and agree on a timeline for fixes before publishing details.
▪Ledger's security research arm, Donjon, discovered a laser fault-injection vulnerability in the TROPIC01 chip manufactured by Tropic Square in late January 2026.

Subtopics

AI security2 Crypto2 AI tools & products1 Bitcoin wallets & custody1 Blockchain interoperability1 Crypto security1 Smart contracts1

Related timelines