BITBOX DISCLOSES TWO SEVERE HARDWARE WALLET VULNERABILITIES @BitBoxSwiss says there are no reports that any of the vulnerabilities were exploited or that user funds were stolen. All disclosed issues are fixed in firmware v9.26.5, and BitBox is urging all users to update immediately. Internal security audits uncovered two severe vulnerabilities, along with new details about a previously fixed bootloader flaw. One vulnerability affecting BitBox Multi devices could allow a malicious host to execute arbitrary code and potentially install malicious firmware on devices that had not yet been set up. Another flaw in Silent Payments could allow an attacker using a malicious host device to redirect funds to an unintended address, locking the Bitcoin and potentially enabling a ransom attack. BitBox also disclosed that a previously patched bootloader vulnerability could have allowed an attacker to trick users into installing malicious firmware capable of stealing funds.