Theme Cybersecurity

Now, Claude''s intrusions concern four cybersecurity exercises that reached real systems without authorization. The last reported case dates from January of this year, but Anthropic only discovered it in August.

Malone Lam, 22, has admitted to running a crypto crime ring behind a $245 million haul that included 4,100 bitcoin.

The flaw related to Liquid a Network allowed the unauthorized withdrawal of 3996 bitcoins, valued at nearly 320 million dollars. Since then, the perpetrators have already returned 3400 BTC, however the exact technical origin and the fate of the remaining 598.5 BTC remain unknown.

The G7 urges states and companies to switch now to quantum-resistant cryptography. Its report of September 3, 2026, mentions neither bitcoin, nor exchanges, nor blockchain, but targets the component on which every wallet depends: the public key signature, which a sufficiently powerful quantum computer can break.

A new data leak expands the incident affecting hardware wallet buyers. Trezor reports that a breach at its logistics partner Shipmonk exposed information of an additional 67,000 American customers. The affected files were supposed to be deleted from the provider's systems but remained accessible. The impacted orders date from November 2019 to August 2021. With the 13,689 recorded customers, the incident concerns about 80,000 people, without compromising wallets, private keys, or backups.

OpenAI launched GPT-6 Astra on September 3, 2026, its first model classified as "Critical" in cybersecurity: according to the company, it discovers unknown vulnerabilities and writes the corresponding exploit without human guidance at each step. Its president Greg Brockman sees a possible milestone towards general artificial intelligence. For crypto, the stake is not theoretical, and it is already quantified. As early as February 2026, the EVMbench benchmark, published by OpenAI with Paradigm and OtterSec, measured this capability on smart contracts: the best agent exploited 72.2% of the tested vulnerabilities.

Hacking, phishing, or just a bug? X investigates an unprecedented wave targeting the platform's most followed crypto accounts. The details.

A nostalgic tweet, a power transfer worth 4,600 billion dollars, and a silence that says a lot about crypto. John Ternus officially takes the helm of Apple this Tuesday. Between a keynote within eight days, the OpenAI lawsuit, and a complete lack of position on bitcoin, the new boss has no time to catch his breath.

Security remains a top priority across crypto, yet losses keep climbing, with over $3.63 billion stolen since 2025. CEXes are most exposed through private key compromise, while DEXes face smart contract exploits, increasingly compounded by fake UIs and malicious integrations. The actors have evolved just as fast. Rogue individuals have given way to organized cartels and state-sponsored groups, including North Korean hackers, who now use mixers, bridges, and staggered withdrawals to stay untraceable. This report examines the shifting threat landscape, from auditing and insurance protocols to the security infrastructure CEXes like Toobit deploy to protect users. We’ve summarized the key highlights, but be sure to dig into the full 15 slides in the full report here.

The Canadian hardware wallet is evolving its security after a theft exceeding $114 million. Coldcard releases a new corrected firmware version after an analysis conducted with several AI models. This study was not limited to the initial random number generator. It also examined transactions, USB exchanges, and updates. Affected users must, however, renew their main keys before any fund transfers.

The hacking of the Directorate General of Public Finances pushes the French State to review its cybersecurity strategy. Faced with vulnerabilities affecting administrations and exposing sensitive data, the executive wants to deeply strengthen its digital audits. A response worthy of a threat that now goes beyond public systems alone. The stolen information can feed social engineering campaigns and directly target citizens, including crypto holders. Behind this shift lies a major question: that of French digital sovereignty.

SafePal reveals a data breach affecting nearly 40,000 customers. Names, addresses, and purchases were exposed, but no crypto funds were compromised.

France faces a new leak of sensitive data. A hacker claims to have extracted information concerning nearly 678,000 taxpayers following fraudulent access to the DGFiP system. Bercy confirms the intrusion and data exfiltration, but not this number yet. Individuals and professionals are among the potential victims.

The quantum threat pushes Ethereum to reconsider its cryptographic choices. Poseidon, long considered as a hash function suitable for zero-knowledge proofs and the post-quantum era, has just been discarded by the network's researchers. Behind this change lies much more than an algorithm choice. Thus, Ethereum is revising the cryptographic foundations of its future architecture. A new approach now promises better performance, enhanced auditability, and safer integration. It remains to understand why Poseidon lost the race, what gains its replacement offers, and at what pace this transition could reach the network.

OpenAI has just suspended the internal development of Astra, its future artificial intelligence model. Indeed, its capabilities in offensive cybersecurity and code generation have crossed a threshold that teams no longer consider controllable. For the digital ecosystem, this decision sounds like a warning. At a time when financial infrastructures, blockchain, and decentralized protocols rely on the reliability of code, the AI race now progresses faster than the measures meant to regulate it.

Coldcard, Bitcoin's safest vault, turned into a sieve. Result: $100 million gone and a million addresses fleeing. Self-custody has some kinks to iron out.

Quantum computing is no longer a theoretical threat to cryptos. As tech giants accelerate their advances, the cryptographic resistance of blockchains becomes an immediate issue for investors, financial institutions, and developers. Recent warnings from several major industry figures have reignited the debate over decentralized networks' ability to face this technological disruption. Amid technical disagreements, industrial urgency, and market concerns, the crypto ecosystem faces one of the greatest challenges in its history.

In 27 hours, 16 developers reported 4,962 issues in 390 Bitcoin-related projects, including 85 critical vulnerabilities and 635 high-severity ones. Sixteen developers guided the audit using AI models and about 10,000 dollars of computing power per day, but the volume mainly reveals a triage problem. The priority is now to handle bugs before attackers.

$350,000 worth of crypto stolen from a miner: a former cop receives life imprisonment plus 15 years. The details of this shocking case.

Cold storage, long presented as the ultimate bulwark against hacking, has just suffered one of its biggest setbacks. A critical software vulnerability affecting Coldcard wallets enabled the theft of tens of millions of dollars in bitcoin, reviving questions about the limits of self-custody. This case breaks out as the market comes off a July up 7.36%, under pressure from massive institutional withdrawals and approaching two major protocol upgrades expected in August.

Pavel Durov rejects the "terrorist" label that Russia just assigned to him. The founder of Telegram states that Moscow is sanctioning him mainly for refusing mass surveillance and censorship on the platform.

Russia toughens its stance against Telegram: its founder Pavel Durov indicted for "aiding terrorism." All details in this article!

The crypto industry is going through its worst semester against hackers. Ethereum and Solana account for record losses. Full analysis.

North Korean authorities have arrested a group of former cyber operators and IT specialists accused of hacking two public banks and laundering funds via cryptocurrencies. South Korean media Daily NK revealed the case on July 25, citing an anonymous source in Pyongyang. A case that disrupts the usual narrative of North Korean cyberattacks, which were until now systematically directed outward.

9 giants of crypto and finance launch a consortium endowed with $15M to prepare Bitcoin for quantum computing. The details!

The cryptocurrency sector continues to attract cybercriminals, who perfect their methods to deceive their victims. This time, Kaspersky highlights a new malware framework designed to compromise digital wallets and steal sensitive data. Analysis shows attackers combine social engineering, fake GitHub projects, and remote access techniques to infiltrate devices. Meanwhile, another campaign targets Web3 developers through fake job offers posted on LinkedIn, revealing an evolution of threats.

The Blockchain company Consensys accidentally employed a developer linked to North Korea, who accessed some of its systems for a month. The incident, revealed on July 17, 2026, did not result in any theft of funds or malicious code according to the company. How far do North Korean networks infiltrate development teams in the sector?

The inexorable advance of cutting-edge quantum computing poses an existential threat to blockchain security, forcing the ecosystem to revise its cryptographic foundations. Preserving inactive Bitcoin wallets against machines capable of breaking private keys is a critical priority. On July 16, Project Eleven unveiled a post-quantum cryptographic proof proposal to address the "Q-Day" challenge. By replacing signature validation with lineage verification, this protocol offers an unexpected safety net.