WordPress Bricksforge & SonicWall SMA CVSS 10.0 exploits; Ledger spy chips drain wallets
Two maximum-severity RCEs under active wild attack: WordPress Bricksforge (CVE-2026-85097) and SonicWall SMA 1000 (CVE-2026-102255). Ledger hardware wallets via CryptoBilis reseller contain spy chips; 360K+ iRhythm patients affected by data breach.