infosecfollow

daily plain-text briefing: security, markets, business, and pittsburgh

A random-number flaw in Coinkite's Coldcard wallets fueled an $88 million Bitcoin heist as OpenAI teased Astra, a model whose math breakthroughs sharpen fears of AI-driven cryptanalysis.


Emerging Trends and Key Updates

Security

1. Coldcard Wallet RNG Flaw Drives $88 Million Bitcoin Heist

Ransomware and Cybercrime · [cryptocurrency, vulnerability, theft]

Latest developments: BleepingComputer raised the tally to roughly $88.6 million and pinned the losses on the flawed random number generator, which produced predictable seeds across thousands of wallets.

read more

Coinkite's Coldcard, a Bitcoin-only hardware wallet from the Canadian maker, shipped a March 2021 firmware integration error that routed seed generation to a deterministic software pseudorandom number generator, letting attackers predict private keys and empty wallets; Galaxy Research mapped a July 30 sweep that drained 1,196 addresses in 41 minutes, and owners who generated seeds on affected firmware should move funds to a freshly seeded wallet.

Sources: BleepingComputer · The Hacker News · ↑ top

2. Atomic macOS Stealer Infection Dissected

Ransomware and Cybercrime · [macos, infostealer, malware]

Latest developments: The SANS Internet Storm Center published a hands-on analysis of an Atomic macOS Stealer infection on August 2, 2026.

read more

Atomic macOS Stealer, sold as malware-as-a-service, harvests browser credentials, cryptocurrency wallets, and keychain secrets from Mac users and typically spreads through malvertising and cracked-app installers; Mac owners should install software only from trusted sources.

Sources: SANS Internet Storm Center · ↑ top

3. OpenAI Teases Astra Model After Math Breakthroughs

AI Security · [ai, cryptanalysis]

Latest developments: OpenAI unveiled Astra, an unreleased model built for complex, long-running tasks, after an internal version produced ten significant advances in mathematics and theoretical computer science.

read more

Frontier labs increasingly ship models that solve original mathematics, a capability that shadows cryptography after Anthropic's Claude Mythos derived a fatal attack on the HAWK post-quantum signature scheme; Astra's math results sharpen questions about AI-driven cryptanalysis and the pace of offensive capability gains.

Sources: BleepingComputer · ↑ top

4. Nono Sandbox Aims to Contain Autonomous AI Agents

AI Security · [ai, tooling]

Latest developments: Luke Hinds and Stephen Parkinson launched Nono through their startup nolabs, an open-source sandbox that isolates AI coding agents from the systems their users can reach.

read more

AI coding agents run with their users' permissions, reaching sensitive files, credentials, and production systems, where a prompt injection or hallucinated command can escalate into an incident; Nono sandboxes those agents to contain the blast radius.

Sources: Help Net Security · ↑ top

5. Chrome to Block New Tab Hijacker Extensions

Endpoint Security · [browser, extensions, patch]

Latest developments: Google is preparing a Chrome feature that blocks policy-installed extensions from hijacking the New Tab page or switching the default search engine by default.

read more

Enterprise policy-installed extensions have long forced New Tab and default-search changes on users; the coming Chrome protection curbs that abuse and hands control back to administrators and users.

Sources: BleepingComputer · ↑ top

Business and Politics

Trump Calls Off Iran Strike as Talks Resume

Latest developments: Trump said U.S.-Iran talks will restart after he canceled Saturday's planned attack, and Tehran told mediators it is near a deal with Oman to reopen the Strait of Hormuz to shipping, sending oil prices lower.

read more

President Trump scrapped a planned U.S. strike on Iran late Saturday, saying Gulf states pressed him toward negotiation and that mediators sketched the outlines of a deal to end the six-month war; crude fell on the de-escalation as Tehran signaled openness to reopening the Strait of Hormuz.

Sources: FT World · WSJ World News · ↑ top

AstraZeneca in $400 Billion Talks With Bristol Myers Squibb

Latest developments: AstraZeneca opened talks with Bristol Myers Squibb over a roughly $400 billion combination that would create the world's fourth-largest drugmaker by market value.

read more

AstraZeneca, the British pharmaceutical giant, is discussing a tie-up worth about $400 billion with New York-based Bristol Myers Squibb; a completed deal would rank among the largest pharmaceutical mergers ever and reorder the industry's competitive landscape.

Sources: FT Home · ↑ top

Pittsburgh

Weather

Tonight: Chance Showers And Thunderstorms, low 67F.

Monday: Partly Sunny, high 80F.

Monday Night: Mostly Clear, low 60F.

Business

Op-Ed Presses Credit Access for Minority Businesses

Latest developments: Writing in TribLive, Barāta A. Bey argued minority-owned businesses grow through better access to capital and urged policymakers to expand credit for entrepreneurs.

read more

In a TribLive opinion piece, Barāta A. Bey contended that success for minority-owned businesses starts with an idea, determination, and access to capital, calling on lawmakers to widen entrepreneurs' access to credit.

Sources: TribLive · ↑ top

Highland Park Victorian Sits on Its Own Block

Latest developments: Pittsburgh Magazine's Hot Property featured a 1923 brick Victorian at 5454 Wellesley Avenue in Highland Park that occupies its own dedicated parcel.

read more

A brick Victorian built in 1923 at 5454 Wellesley Avenue in Pittsburgh's Highland Park neighborhood stands on an unusual parcel that gives the house a full block to itself, a quirk left by the original subdivision.

Sources: Pittsburgh Magazine · ↑ top

Around Town

Mount Lebanon Tables E-Bike Restrictions

Latest developments: Mount Lebanon commissioners tabled a proposed ordinance to restrict e-bike use in the South Hills municipality, sending the plan back for revision.

read more

Mount Lebanon's commissioners set aside an ordinance meant to crack down on e-bikes in the South Hills community, returning the measure to the drawing board after debate over its restrictions.

Sources: WPXI · ↑ top

Flash Flood Warning Hits Western Pennsylvania

Latest developments: Forecasters escalated Sunday's Flood Watch to a Flash Flood Warning as downpours dropped up to three inches, a water main broke in the Strip District, muddy water rushed down a Cranberry Township hillside, and Kennywood closed early.

read more

Heavy rain of up to three inches triggered a Flash Flood Warning across Western Pennsylvania on August 2, sending muddy water down a hillside in Cranberry Township, Butler County, bursting a water main that flooded a road in Pittsburgh's Strip District, and forcing Kennywood Park to shut down early.

Sources: WTAE · WTAE · WTAE · ↑ top

Events

PedalPGH Bike Ride Returns August 30

Latest developments: Organizers expect nearly 3,000 cyclists for the 33rd annual UPMC Health Plan PedalPGH, set for August 30.

read more

The 33rd annual UPMC Health Plan PedalPGH, a citywide fundraiser bike ride through Pittsburgh, returns Sunday, August 30, 2026, with organizers expecting nearly 3,000 riders across its routes.

Sources: WPXI · ↑ top

Sports

Pirates (56-57)

Sat Aug 1 · Pirates 4 · Reds 1 · Final

Pirates beat Reds 4-1 to snap four-game losing streak

Sun Aug 2 · Pirates 2 · Reds 10 · Final

Burns wins 12th straight decision, Stewart hits 24th HR, as Reds beat Pirates 10-2

Up Next · Pirates @ Brewers · Mon Aug 3, 7:40 PM

Around the Teams

Steelers Cut Savage, Sign Safety Jenkins

Latest developments: The Steelers released former first-round safety Darnell Savage and signed 10th-year veteran Rayshawn Jenkins, and the Post-Gazette reported the team still hunting safety help behind Jaquan Brisker and DeShon Elliott.

read more

The Pittsburgh Steelers cut Darnell Savage, a former Green Bay first-round pick, and added free-agent safety Rayshawn Jenkins, a 10-year veteran who spent last season with the Cleveland Browns, as coaches keep searching for depth alongside Jaquan Brisker and DeShon Elliott.

Sources: Post-Gazette Steelers · ↑ top

Pads Come On at Steelers Camp

Latest developments: With padded practices beginning at Saint Vincent College, the Post-Gazette assessed which Steelers stand to shine once the physical work starts under head coach Mike McCarthy.

read more

The Post-Gazette previewed the first full-contact practices at the Steelers' training camp in Latrobe, weighing which players will separate themselves as the pads go on in Mike McCarthy's first camp as head coach.

Sources: Post-Gazette Steelers · ↑ top

Reading

Markets

weekly average, change vs prior week

S&P 500     7,417.09  ▼ -0.5%
Dow        52,248.93  ▲ +0.5%
Nasdaq     24,949.59  ▼ -1.9%
WTI crude      82.92  ▼ -5.0%
EUR/USD       1.1428  ▲ +0.2%
GBP/USD       1.3351  ▼ -0.3%
USD/JPY       162.95  = -0.0%