Critical Adobe Flaw, $70M Coldcard Hack & Rising Cybersecurity Threats - August 1, 2026

Key points

• •Adobe addressed a critical security vulnerability (CVE-2026-48449) in Adobe Campaign Classic with a CVSS score of 10.0 on August 1, 2026, that permitted attackers to execute arbitrary code remotely without requiring any user interaction, highlighting the ongoing risk posed by software flaws in widely used marketing platforms.[The Hacker News RSS]
• •Cybercriminals exploited a firmware flaw in Coldcard hardware wallets to steal $70.2 million in Bitcoin from 1,196 addresses within just 41 minutes, emphasizing serious risks in the security of hardware wallets and the complexity of modern crypto thefts mapped by Galaxy Research.[The Hacker News RSS]
• •Malicious actors compromised hotel Wi-Fi networks to distribute the CornFlake remote access Trojan via fake browser update prompts as part of the Storm-2 campaign, enabling surveillance through webcams, microphones, and keystroke logging, demonstrating sophisticated supply chain-style attacks on public network users.[The Hacker News RSS]
• •In 2026, the FBI launched investigations into cyberattacks on water systems in Michigan and Minnesota, exposing vulnerabilities in critical infrastructure that threaten public safety and resource management, prompting state responses including the creation of dedicated cybersecurity offices.[Scripps News][The Journal Gazette]
• •Hackers compromised the Adform advertising JavaScript on July 27, 2026, injecting code that swapped cryptocurrency wallet addresses on client sites to redirect transactions, potentially misappropriating millions of dollars, which highlights the risks of third-party script supply chain attacks in the crypto ecosystem.[The Hacker News RSS]
• •AI cybersecurity issues were spotlighted in 2026 as experts criticized AI companies Anthropic and OpenAI for breaches threatening national security, reflecting concerns about AI platform vulnerabilities and the growing intersection of AI and cybersecurity risks.[Crypto Briefing]
• •Institutions have begun strengthening access controls in response to escalating cyber threats; for example, Cornell University mandated longer passwords for NetID accounts in August 2026 to guard against unauthorized access amid a rise in cyberattacks.[The Cornell Daily Sun]
• •India declared cybersecurity a strategic national priority in 2026 due to escalating cyber threats fueled by rapid digital expansion, marking a significant policy shift focused on safeguarding its burgeoning digital economy and infrastructure.[ETGovernment.com]
• •The exposure of a cyber scheme involving Ukraine's 'Crypto Academy' in 2026 revealed attackers stealing seed phrases from phone galleries, highlighting the ongoing danger of phishing and credential theft in cryptocurrency operations.[ForkLog]

Relevant articles

Go deeper