[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

official (Trezor investigation update, Nov 12, 2026; firmware 2.13.1 released Nov 11); investigation ongoing

Trezor confirms cellular implants in three Safe 5 wallets sold by CryptoBilis, ships firmware that blinds them, and cuts 80% of its resellers

  • CryptoBilis buyers (since March 2026): still move funds to a new wallet with a new seed; the firmware can't protect a backup captured before the update. Trezor offers a free replacement.
  • Everyone: buy hardware wallets direct from the vendor; beware scammers posing as Trezor offering replacements or refunds.
  • Trezor says the implant works the same way as those found in Ledger devices from the same reseller, adapted to the Safe 5 display.

Sources: Trezor: Our CryptoBilis investigation: what we found and what we've changed (Nov 12, 2026) · Trezor firmware changelog (Safe 5 2.13.1, Nov 11, 2026)