Relying on one person for private key access creates significant organizational risks and can lead to catastrophic losses.

A vulnerability tracked as CVE-2024-31497 in PuTTY 0.68 through 0.80 could potentially allow attackers with access to 60 cryptographic signatures to recover the private key used for their generation.

Unlike Ledger’s previously released key recovery product, Ledger Recover, the new Ledger Recovery Key is always offline and doesn’t require identification. Ledger, a major provider of hardware ...