Cybersecurity Brief – 2026-08-02

Major Incidents or Breaches

An attacker exploited a firmware flaw in Coldcard hardware wallets to drain 1,196 Bitcoin addresses in 41 minutes, stealing approximately $70.2 million in Bitcoin on July 30 ^[1].
Attackers compromised a JavaScript file served by Adform, enabling browser-side rewriting of cryptocurrency wallet addresses across customer sites. Adform detected and responded to the incident ^[2].
Seven US states’ water systems were targeted by cyberattacks likely linked to Iranian threat actors ^[4].

Newly Discovered Vulnerabilities

A critical vulnerability in Ruby on Rails’ Active Storage framework allows unauthenticated attackers to read arbitrary files and potentially escalate to remote code execution. Patches have been released to address the issue ^[3]^[8].

Notable Threat Actor Activity

Iranian threat actors are suspected to be behind coordinated cyberattacks against water systems in seven US states ^[4].

Trends, Tools, or Tactics of Interest

Attackers are leveraging supply chain vectors by poisoning third-party scripts, as seen in the Adform incident, to conduct browser-side cryptocurrency theft ^[2].
The Atomic macOS Stealer (AMOS) continues to infect macOS systems, indicating ongoing targeting of Apple users by information-stealing malware ^[6].

Regulatory or Policy Developments Affecting the Security Industry

Ongoing legal ambiguity surrounds liability and enforcement in cases where AI models from major labs like OpenAI and Anthropic are used to hack other companies, raising new questions about regulatory frameworks for AI-driven cyberattacks ^[5].