Passwords, bank transactions, messages — almost everything on the internet has been locked by the same math for 40 years (RSA/ECC). That math is "hard" for ordinary computers, but "easy" for a large quantum computer down the road. The catch: attackers aren't waiting for that machine to arrive — they're already stealing your encrypted data and stockpiling it today, ready to crack it the day the machine is ready. This is the story of swapping out the whole world's keys, before time runs out.
Quantum Computing Inc. to Debut Integrated Quantum Security Platform at ECOC 2026
Quantum Computing Inc. announced it will showcase, for the first time, an integrated quantum security platform combining encryption and authentication in a single solution at the ECOC Exhibition 2026, held September 21–23 at FYCMA in Málaga, Spain. At Booth #1436, the company will demonstrate live quantum communication solutions using time-frequency and polarization-based approaches, pairing quantum key distribution with hardware-based Quantum Identity Authentication. The platform combines high-dimensional quantum key distribution, direct entanglement verification, Quantum Identity Authentication, and integrated key management in a telecom-compatible architecture, and is based on QCi's patented invention recognized with the 44th Edison Patent Award, presented to Dr. Yuping Huang and Dr. Lac Nguyen. QCi will also present at the ECOC Product Focus Theatre on Wednesday, September 23, from 14:50 to 15:10, in a session titled "The Quantum Secure Solution: Quantum-authenticated communications for broad applications in security," delivered by Massimo Di Blasio, Director, Product Line Management/Business Development. Chief Technology Officer Yong Meng Sua said the demonstrations give the telecom industry a firsthand look at how quantum technologies can strengthen the security of tomorrow's communications.
Lattice Semiconductor Launches Mach-N2 FPGA Family After 62% Revenue Jump
Lattice Semiconductor rolled out its Mach-N2 FPGA family on September 16, a chip line built to protect control systems inside servers, network gear, and industrial equipment against next-generation cyber threats. The launch follows a second quarter in which Lattice reported revenue of $201.1 million, up 62% from a year earlier and above the high end of its own guidance, with non-GAAP earnings per diluted share of $0.53 versus $0.24 a year prior. The new family packs up to twice the logic density of its predecessor, configures a 220,000-cell device in under 30 milliseconds, and bundles CNSA 2.0-compliant post-quantum cryptography, with samples already shipped to compute and communications customers. Lattice guided third-quarter FPGA revenue to $220 million at the midpoint, 65% growth year over year, and said total revenue including two months of its newly closed AMI acquisition should push it toward a $1 billion annual run rate. The company closed the $1.65 billion AMI deal on July 27, 2026, paying roughly $1 billion in cash and issuing about 5.2 million new shares worth around $650 million, and AMI is expected to contribute more than $200 million in 2026 revenue on its own. GAAP net income fell to $19.4 million in the second quarter from $21.8 million in the first, with diluted GAAP earnings per share slipping to $0.14 from $0.16, as operating expenses jumped 29.9% quarter over quarter.
Lattice Semiconductor Launches Mach-N2 Secure FPGA Family and AI Design Tool
Lattice Semiconductor has launched its Mach-N2 FPGA family, adding higher logic density, integrated flash, post-quantum cryptography, and faster connectivity for secure control in modern infrastructure systems. The company paired the launch with its new AI-powered Lattice Prompt design tool, tying advanced hardware security to accelerated FPGA development workflows and potentially deepening its role in next-generation compute, communications, and industrial deployments. The Mach-N2 launch reinforces Lattice's secure control positioning but does not remove near-term risks around pricing pressure, customer inventory swings, or reliance on a relatively narrow product focus. Lattice's narrative projects $2.0 billion in revenue and $525.1 million in earnings by 2029, yielding a $164.92 fair value and a 52% upside to its current price. Before Mach-N2, the most optimistic analysts had already assumed revenue could reach about US$2.3 billion and earnings US$359 million by 2029, far above consensus.
Apple Challenges Secret UK Order Demanding iPhone Encryption Backdoor
Apple is contesting a covert UK government order that would require an encryption backdoor for iPhones, filing a legal challenge that seeks public acknowledgment of the directive and an end to related gagging rules. The company argues that weakening iPhone encryption for UK authorities could affect device security standards for users globally, reinforcing its long-running pitch on privacy and device-level trust. The practical test comes with the Investigatory Powers Tribunal process in the UK and any follow-on legislation or guidance that emerges from it. Investors are watching whether Apple discloses material changes to encryption architecture, new compliance costs, or explicit legal constraints in future UK or EU-focused risk disclosures and earnings commentary.
Microsoft Launches Azure Payment HSM v2 for Banks as Shares Rise 1.6%
Microsoft pushed another high-security financial workload deeper into Azure Thursday with a managed payment-security service built for banks and payment processors, sending the shares up approximately 1.6% to $498.17. The offering, Azure Payment HSM v2, combines Marvell's LiquidSecurity hardware with Utimaco's Atalla payment module, giving financial institutions a cloud-based way to protect payment keys, encryption and transaction security without giving up the controls demanded by regulated environments. The public preview is available in West US and Western Europe, and Microsoft did not disclose pricing, customer contracts or expected revenue, so the near-term financial impact remains difficult to quantify. The bigger story is where Microsoft keeps pushing Azure: Microsoft Cloud generated $59.3 billion, or roughly 65.9% of the company's latest quarterly revenue, and payment security opens another sticky workload where compliance requirements can make switching painful. The preview alone will not move Microsoft's financial needle, but successful production adoption could deepen Azure's grip on highly regulated customers and create another layer of recurring cloud spending.
Apple Asks Tribunal to Lift Gag on Secret Home Office iPhone Backdoor Order
Apple has asked the Investigatory Powers Tribunal to lift restrictions that bar the Home Office from confirming it secretly ordered the company to build a "backdoor" into iPhones. The US technology giant, joined by human-rights organisations Liberty and Privacy International, argued at a case-management hearing on Thursday that confirming the order's existence would let the legal challenge be heard in public. The Home Office ordered Apple last year to break the encryption protecting iPhone users' iCloud accounts, which hold photos, files, contacts and messages, even when users have enabled the most advanced protection features. Apple has refused, saying it would never build a way to break its own encryption, and has instead removed its "Advanced Data Protection" feature for everyone in Britain. Daniel Beard KC, for Apple, said lifting the restrictions would allow "facts to be deployed in the open"; Ben Jaffey KC, for the campaign groups, called the secrecy "farcical" and the "emperor's new clothes", while Neil Sheldon KC, for Home Secretary Shabana Mahmood, said departures from "neither confirm nor deny" inevitably weaken its effectiveness. The three-person tribunal, led by its president Lady Carmichael, did not rule. The order was first issued early last year by then home secretary Yvette Cooper, dropped under pressure from the Trump administration, and replaced by a second order applying only to people in Britain.
SEALSQ Posts $32.2M Half-Year Operating Loss as Revenue Lags Spending
SEALSQ Corp reported a $32.2 million operating loss for the six months ended June 30, 2026, compared with $21.2 million a year earlier, according to full results released September 11. Revenue for the half reached $11.2 million, up 131%, though that figure includes $2.5 million contributed by IC'Alps SAS, so the headline increase reflects acquisition growth as well as organic sales. Gross margin came in at 48.5%, producing $5.4 million of gross profit, while research, selling and administrative expenses totaled $39.0 million before $1.4 million of other operating income, with general and administrative costs alone at $23.1 million. SEALSQ held approximately $479.8 million of unrestricted cash and cash equivalents at June 30, and full-year revenue guidance remains $27 million to $36 million, implying roughly $15.8 million to $24.8 million in second-half sales. Management expects initial QS7001 and QVault TPM commercial revenue toward the end of 2026, with a more significant contribution in 2027 and beyond, subject to certification, customer qualification and procurement timing.
Atsign and Intel Claim 88x Encryption Speedup for Edge AI
Atsign announced that, working with Intel, it has solved the encryption bottleneck holding back autonomous Edge AI agents, achieving a performance uplift of approximately 88x for hardware-accelerated, end-to-end encrypted Agent-to-Agent communications. The two companies co-published a Smart Transportation Solution Brief titled "Securing Agentic AI at the Edge for Smart Transportation," which details zero-trust Agentic AI benchmarks showing the uplift varies by hardware: roughly 88x on Intel Xeon, up to 5 Gbps, and roughly 60x on Intel Core Ultra 9, up to 6 Gbps. The solution pairs Atsign's trusted identity management, namespace isolation, scoped data sharing, end-to-end encryption and auditability with Intel's hardware-backed key generation, accelerated encryption and hashing, protected key storage, secure boot, Trusted Compute, Total Memory Encryption and Full Disk Encryption. Atsign CEO Aparna Rayasam called the result a performance breakthrough and a game-changing evolution for systems where AI-enabled devices must operate autonomously at the edge. Intel has also added Atsign to its Industrial Builders partner program, giving Intel customers access to Atsign's pre-validated solutions, streamlined sourcing, compliance assurance and direct collaboration on RFPs, reference architectures and proof-of-concept deployments.
Former Google Managing Director Gina Fratarcangeli Joins Qtonic Quantum
Qtonic Quantum announced that Gina Fratarcangeli, a former Google Managing Director, has joined the company as Senior Advisor for AI Transformation and Global Alliances. Fratarcangeli brings three decades of enterprise leadership and global alliance experience, having previously built and scaled businesses at Google, Accenture, IBM, and Genpact. At Google, she oversaw an $8 billion Global Strategic Integrator ecosystem and drove joint AI go-to-market strategies that delivered 89% year-over-year growth. In her new role, she will advise on enterprise adoption, commercial strategy, and partnerships with global systems integrators and cloud providers, supporting Qtonic Quantum's Find. Prove. Fix. strategy for post-quantum readiness. The company's offerings include QScout for cryptographic discovery, QStrike for security validation, and QSolve for remediation planning.
Liquid halts operations after theft of 4,000 BTC worth $320 million
Liquid, a sidechain of Bitcoin, has suspended operations after an actor claiming to be a white-hat hacker withdrew approximately 4,000 bitcoins, worth $320 million, from the network's federation wallet. The withdrawal accounted for about 95% of the roughly 4,200 BTC balance that backed the L-BTC issued on the sidechain. Bridge nodes were disabled, preventing new transactions, while various exchanges suspended deposits and withdrawals of L-BTC. However, other assets such as USDT and DePix were unaffected. Blockstream, Liquid's technology provider, contacted the actor via an on-chain message, with the actor promising to return most of the bitcoins after the vulnerability is fixed and all nodes are patched. As of the time of reporting, no funds had been returned.
Silicon Motion Completes First Stage of EU Cyber Resilience Act Compliance
Silicon Motion Technology Corporation announced it has completed the first stage of its compliance program for the European Union Cyber Resilience Act (CRA), aligning its product cybersecurity controls with the incident-reporting obligations that take effect on September 11, 2026. The company has established vulnerability-handling processes covering key areas of the CRA, as a preparatory step ahead of the full application on December 11, 2027. These measures span its entire product portfolio, including enterprise SSD controllers, edge SSD controllers, embedded eMMC and UFS controllers, Ferri solutions, and display interface solutions. Silicon Motion has also launched a dedicated security vulnerability reporting channel on its website to facilitate timely reporting and remediation. President and CEO Wallace C. Kou emphasized the company's commitment to product security as AI expands across data centers and edge devices.
COLDCARD Leak Culprit Moves Stolen Bitcoin for First Time—Possible Money Laundering via DEX
Alex Thorn, head of research at Galaxy Digital, said on September 3 that in the security breach involving the hardware wallet COLDCARD, the attacker behind the third wave has moved the stolen bitcoin for the first time. The attacker exchanged part of the stolen funds for Ethereum through THORChain, a cross-chain decentralized exchange (DEX). Moving funds from Bitcoin to Ethereum suggests a possible attempt to launder the money. According to Thorn, this is the first time stolen funds have moved from their original addresses across the series of attacks, which are classified into waves one through three. About 90% of the funds stolen in the third wave remain unmoved at this time. Additionally, although the attacker has faced issues such as some transactions being refunded during the exchange on THORChain, they have repeatedly attempted to exchange the remaining funds. Thorn said he has traced the funds routed through THORChain to new Ethereum addresses and shared that information with relevant authorities and cryptocurrency-related companies. Coinkite, the developer of COLDCARD, disclosed a firmware flaw in seed generation on July 30, and the attacker is believed to have regenerated private keys from weak seeds to steal funds. According to a tally published by Thorn on August 24, a total of 1,789.28 BTC, worth approximately $114.7 million (about 18.4 billion yen) at the time of the theft, was stolen from 8,865 addresses in the series of attacks.
Financial Services Agency Requests Record 40.3 Billion Yen, Pushing for Crypto Asset Monitoring and On-Chain Adoption
On August 31, the Financial Services Agency (FSA) released its budget and organizational/personnel request outline for fiscal year 2027, with total budget requests reaching 40.3 billion yen, an increase of 13.4 billion yen from the previous year, marking the largest ever. The request includes strengthening the monitoring framework for crypto asset exchange operators and promoting the use of financial methods leveraging on-chain technology. Policy-related expenses for promoting growth investment amount to 4.8 billion yen, with plans to advance the utilization of on-chain financial methods and support the construction of payment systems linked to digital payments. Additionally, 6.4 billion yen is allocated for expenses related to ensuring trust in the financial system and user protection, including cybersecurity measures for financial institutions, support for transitioning to post-quantum cryptography (PQC), and the development of market surveillance infrastructure using AI. In terms of staffing, the FSA requests a net increase of 14 personnel after accounting for rationalization, with 13 of these allocated to "strengthening the framework to respond to new financial services." The request also includes establishing a director post to strengthen monitoring of crypto asset exchange operators, enhancing supervision of electronic payment instrument operators handling stablecoins, and creating positions such as a director to promote advanced digital payments and a planning officer to address risks related to cutting-edge AI.
Ethereum Developers Consider New EIP Proposal to Prepare for Quantum-Resistant Transition
Ethereum developers are considering a new EIP proposal to protect the network's staking foundation from future quantum attacks by making validator deposits compatible with quantum-resistant signatures. Co-proposed by Kevaundray Wedderburn, Tom Wambsgans, and Thomas Coratger, the proposal has been assigned the number EIP-8394 and aims to safeguard staking assets worth approximately 42.4 million ETH (about $104 billion, or ¥16.6 trillion). EIP-8394 would establish a new deposit contract that supports future authentication methods and a mechanism to gradually phase out new validator registrations using BLS, but it would not cover key migration for existing active validators. The Ethereum Foundation, while stating that the threat is not imminent, is preparing early because the transition will require years of adjustments, with 2029 marked as a major milestone on the official roadmap. The proposal is still in draft stage, and the implementation timeline is undecided, but its impact on liquid staking protocols and related smart contracts is a key focus.
WebRay Security Half-Year Report: Four New Breakthroughs Open Growth Space in AI and Satellite Internet Security
WebRay Security disclosed its 2026 semi-annual report on the evening of August 28. In the first half of the year, it achieved operating revenue of 88.53 million yuan, with research and development investment of 39.95 million yuan, accounting for 45.13% of operating revenue. Despite short-term earnings pressure, the company focused on its integrated space-air-ground security strategy and achieved breakthroughs in four major areas: new AI products, new satellite security business, a new research and manufacturing base, and emerging incremental markets. The company fully advanced its AI Inside strategy, launched the RayToken AI security gateway, upgraded the intelligent capabilities of DayDayMap, and completed AI-driven upgrades of its core products. In the satellite security field, the company laid out integrated satellite-terrestrial intelligent communication security, forming space-air-ground integrated security capabilities covering satellites, links, ground systems, and terminals. In addition, the company planned the construction of an intelligent communication security research and manufacturing base, and explored satellite internet security business opportunities in sectors such as transportation and healthcare.
C*Core Technology's H1 revenue up 83.66%, AI and quantum security strategy takes hold
C*Core Technology disclosed its 2026 semi-annual report on the evening of August 27. In the first half, it achieved operating revenue of 313 million yuan, up 83.66% year on year. Net profit attributable to the parent was negative 81.8645 million yuan, but the loss narrowed by 4.5467 million yuan compared with the same period last year. After deducting share-based payment expenses, the loss narrowed by 46.0337 million yuan. Among this, chip customization service revenue was 159 million yuan, up 133.56% year on year, making it the largest source of growth. Self-developed chip and module revenue was 152 million yuan, up 50.76% year on year. Automotive electronics chip revenue was 102 million yuan, up 108.47% year on year, with shipments exceeding 8 million units. As of the end of June, the company's contract liabilities reached 1.143 billion yuan, further up from 981 million yuan at the end of the first quarter. In the first half, the company explicitly put forward the core development route of AI plus quantum security, building a three-in-one architecture of RISC-V CPU, NPU, and HSM. Quantum security chips and post-quantum cryptography products have achieved commercial deployment. Among them, the post-quantum financial POS chip CUni360SQ-ZX has shipped more than 800,000 units cumulatively. Company chairman Zheng Jiang said the company will push the GPNPU AI PC chip to complete tape-out verification and deepen the application of quantum security chips in sectors such as power, telecommunications, and finance.
DataVault AI Reaffirms $200M Revenue Target, Announces $94M CyberCatch Acquisition
DataVault AI reaffirmed its $200 million revenue target for 2026 and announced a $94 million all-cash acquisition of CyberCatch, a quantum-ready cybersecurity firm, during its second-quarter earnings call. The company reported $6.7 million in revenue for Q2, primarily from its Acoustics division, and raised $60 million to fund initial payments into the Available Networks structure. DataVault also closed the NYIAX transaction and signed definitive agreements for CyberCatch and BankWyse, which are expected to boost revenue in Q4 and 2027. The company plans to launch its exchanges in mid-September, with Fiserv integration completing then, and expects a significant revenue bump in Q4. CEO Nathaniel Bradley emphasized the company's exclusive partnership with Available Networks and its tokenization pipeline, which includes $2.5 billion in signed contracts representing $213 million in fees.
Quantum X Labs Launches Qatacomb Quantum Security Research Initiative
Quantum X Labs Inc. has announced the launch of Qatacomb, a new research initiative through its QuantumQ Security operation to explore quantum-native approaches to protecting sensitive information. The program will investigate security architectures that combine efficient access for authorized users with security properties rooted in quantum physics, and will include theoretical validation, simulation, and proof-of-concept testing on quantum hardware. The company cites a growing strategic need as quantum computing reshapes cybersecurity, with the global quantum security market projected to grow from approximately $2.5 billion in 2026 to approximately $9.8 billion by 2030, a compound annual growth rate of about 40%. Prof. Nir Sharon, Chief Technology Scientist, emphasized the goal of making quantum physics an integral part of the protection architecture itself. The initiative expands Quantum X Labs' research into quantum security, complementing its work in quantum computing, software, simulation, and sensing.
Hackers Steal $130 Million in Bitcoin via Weak Hardware Wallet Security
Hackers have stolen $130 million in Bitcoin by exploiting the surprisingly weak security of a popular hardware wallet, raising concerns for Bitcoin investors. The attack targeted Coldcard wallets sold by Canadian company Coinkite, where weak random number generators allowed malicious actors to derive private keys remotely. This incident undermines trust in self-custody and may shift power back to institutions, benefiting spot Bitcoin ETFs. Coinkite has released new firmware to address the vulnerability, but rebuilding trust will be challenging.
BTQ Technologies Reports Quantum-Safe Milestones and Q1 2027 Silicon Timeline
BTQ Technologies Corp announced key milestones across its quantum-safe portfolio during its first quarter 2026 earnings call, including sending final design files for its QSIM chip to manufacturing partner ICTK with tape-out scheduled for August 2026 and first silicon samples expected in Q1 2027. The QSIM product achieved a record-low footprint of less than 100,000 logic gate equivalents for core post-quantum algorithms, four times smaller than the nearest open-source side-channel protected PQC engine. The company's QSSN was selected as the core post-quantum security infrastructure for Korea's first bank-led Korean Won stablecoin pilot, and its Denel pilot processed thousands of transactions with a 100% success rate and 0% fallback rate. Bitcoin Quantum, the quantum-safe Bitcoin fork, is on track for a mid-2026 mainnet launch with over 350,000 blocks mined and more than 150 open-source contributors. BTQ reported $12 million in liquidity and noted regulatory tailwinds from the upcoming CNSA 2.0 standard and EU Cyber Resilience Act, while acknowledging uncertainty around mass commercialization timelines and potential dilution from its base shelf.
BitBox releases latest firmware fixing two critical vulnerabilities
Swiss hardware wallet maker BitBox released its latest firmware on August 17, fixing two critical vulnerabilities found during an internal audit. The first was a memory corruption flaw that, when an uninitialized Multi edition device was connected to a malicious host, could allow arbitrary code execution or installation of malicious firmware. The second was a flaw in the Silent Payments implementation that could let a malicious host manipulate transactions and cause funds to be locked to unintended addresses. The company said there have been no reports of fund loss and no impact on users' seeds. It also revealed that a bootloader issue fixed in July was more serious than initially described, and is urging all users to update to the latest version.
Allot Chairs New Post-Quantum Communications Consortium
Allot Ltd. announced it is a founding member and Chair of a new Post-Quantum Communications Consortium dedicated to developing technologies that will secure communications networks and protect data against future quantum computing threats. Supported by the Israel Innovation Authority's Technological Infrastructure Division, the consortium includes Allot, Ceragon, Classiq, Gilat Satellite Networks, Heqa, Elta, NVIDIA, RAD, and Ribbon, along with academic partners Bar-Ilan University, Ben-Gurion University of the Negev, The Hebrew University of Jerusalem, The Open University of Israel, the Technion, and the University of Haifa. The consortium will develop and evaluate technologies based on Post-Quantum Cryptography, Quantum Key Distribution, and hybrid approaches, addressing multiple network layers including optical, Ethernet, IP, mobile, satellite, data center, and internet-based communications. Dr. Yaakov Stein, VP CTO of Allot and Chair of the Consortium Board, said the transition to quantum-safe communications is one of the most important cybersecurity challenges facing the world today.
Cloudflare Becomes Independent Auditor for Signal's Encrypted Messaging Keys
Cloudflare has partnered with Signal as an independent Key Transparency auditor for the encrypted messaging app. The agreement expands Cloudflare's role in securing major messaging platforms, following its earlier collaboration with WhatsApp. As an external auditor, Cloudflare will help verify Signal's key transparency system for hundreds of millions of messaging users. This development broadens Cloudflare's influence in digital trust, privacy, and encryption standards across consumer communications.
Hardware wallets hit by a series of incidents in August, with asset outflows and data leaks
Since the start of August, major hardware wallet companies that support self-custody have been hit by a string of disclosed incidents. In Coldcard, made by Canada's Coinkite, flaws in random number generation during key creation made it possible for third parties to recover keys, triggering large-scale fund outflows, with estimated cumulative losses reaching up to about 20 billion yen, or roughly 2,055 Bitcoin. Trezor announced on August 13 that the systems of its shipping contractor ShipMonk had been attacked, leaking order data for about 14,000 people. SafePal disclosed on August 16 that a configuration flaw in the order tracking tool on its official website had left order information for about 40,000 people viewable by third parties. These incidents can be grouped into two categories: decryption and theft of funds caused by flaws in the key generation mechanism, and leaks of customer information through peripheral systems such as e-commerce and shipping, showing that even hardware wallets cannot completely prevent risk.
Northrop Grumman and Aeronix invest in space-based encryption technology
Northrop Grumman and Aeronix are jointly investing several million dollars to develop space-based cryptographic systems aimed at making classified communications faster and more resilient to cyber threats. The companies said Wednesday that the partnership seeks to increase the performance of secure data processing and transmission by fivefold, with the technology intended for satellites and other defense systems operating across space, air, land and sea. The investment builds on an earlier prototype project in which the two companies developed a space-based mesh networking system for the U.S. Department of War, designed to enable secure data sharing among satellites in low-Earth orbit. The new collaboration will focus on cryptographic technology that protects classified information while it is stored, transmitted and processed aboard space-based defense platforms, with plans to develop specialized cryptographic devices that can be integrated into mission systems using modular, open architectures. The companies did not disclose the exact size of their investment beyond describing it as a multimillion-dollar commitment, nor did they provide a timetable for fielding the new devices or identify specific military programs expected to use them.
Garantir Adds Agentic Security as Fifth Pillar of GaraTrust Platform
Garantir announced Agentic Security as the fifth pillar of its GaraTrust enterprise cryptographic platform, extending cryptographic controls to AI agents. The new pillar binds every agent action to a verified human identity through the enterprise identity provider, using just-in-time certificate issuance and remote key authorization while private keys remain non-exportable within FIPS 140-2/140-3 validated hardware security modules. Initial capabilities, including delegated cryptographic operations tied to the identity provider, will be available late 2026 to GaraTrust customers, with additional modules rolling out through 2027. The announcement follows recognition from ABI Research, which described Garantir as a breakout star in digital trust and named it a Market Leader, Top Innovator, and Top Implementer in enterprise public key infrastructure.
Coldcard wallet hack drains 1,816 Bitcoin from 5,200 addresses
A security breach involving Coldcard self-custody wallets has resulted in the theft of approximately 1,816 Bitcoin from 5,200 addresses, with some estimates placing the value at up to $130 million. The hack exploited a flaw that weakened the randomness used to generate seed phrases, allowing them to be reconstructed without physical access to the device or an internet connection. Scott Melker, host of The Daily Wolf, emphasized that the victims were individuals who took self-custody seriously and followed recommended security practices, yet still lost their funds. He noted that while the incident does not mean all self-custody is broken, it should shake faith in trusting wallet providers as counterparties.
Quantus Founder Warns First Quantum Crypto Hack Will Leave No Trace
Christopher Smith, founder of Quantus Network, warns that the first quantum attack on cryptocurrencies could occur without any trace of a breach, making it extremely difficult to detect. A sufficiently powerful quantum computer could compute private keys from public keys visible on the blockchain without needing to penetrate the internal systems of wallets or exchanges. Smith estimates a 50-50 chance of this happening by 2028, while researchers at Blockchain Capital view the early 2030s as almost certain. The first target may not be Satoshi Nakamoto's Bitcoin, but rather Tether's token minting keys or exchange hot wallets, which would trigger fewer alarms. Advances in quantum algorithms and AI are accelerating the timeline for transitioning to a post-quantum era, with Google projecting this by 2029.
Mind Capital Draws Lessons from Coldcard Hack, Nearly $90 Million in Bitcoin Lost
Mind Capital is drawing major lessons for the self-custody space after Coldcard was compromised through a random number generation vulnerability, resulting in nearly $90 million worth of Bitcoin vanishing in under an hour. Mr. Woramet Chansan, Investment Advisor at Mind Capital Company Limited, disclosed that on July 31, 2026, it was reported that the Coldcard hardware wallet was hacked, leading to the loss of over 1,300 BTC from more than 4,500 offline digital wallets within less than an hour. The cause was a firmware flaw in the random number generation system that allowed hackers to remotely predict seed phrases. This incident underscores that even devices designed for maximum security can have factory-level vulnerabilities that are difficult for ordinary users to detect. Mr. Woramet noted that investor behavior after the confidence crisis falls into three groups: beginners who move funds back to exchanges, experts who diversify across multiple cold wallet brands, and experienced users—the majority—who lack the time to manage security themselves. For the last group, the best solution is diversification, allocating part of the portfolio to fund managers using institutional-grade infrastructure such as Multi-Party Computation technology and digital asset insurance, which self-custody cannot provide. Mind Capital has chosen Coinbase Custody as its digital asset custodian under the highest international security standards.
IonQ Lands Sandia and EPB Deals to Expand Quantum Networking and Security
IonQ announced new collaborations with Sandia National Laboratories and EPB to advance quantum computing for national security and create a quantum communications research center. The Sandia partnership focuses on quantum co-design for U.S. national security applications, while the EPB deal establishes the Tennessee Quantum Communications Research Center, where IonQ plans to deploy what it describes as the world's first commercial Quantum Memory within an operational grid. The EPB project requires IonQ to fund $15 million over five years, adding to cash needs amid recent shareholder dilution and analyst forecasts of declining earnings. The Sandia collaboration provides access to an impartial test bed and government stakeholders, potentially differentiating IonQ against competitors like IBM, Alphabet, and Rigetti in future federal contracts.
Coldcard Vulnerability Losses Could Exceed 200 Billion Yen
Bitcoin theft linked to a vulnerability in the crypto hardware wallet Coldcard has expanded. According to Galaxy Research, across three confirmed waves and 14 smaller incidents, 1,596 BTC were stolen from roughly 7,300 addresses. Including a suspected fourth wave of transactions, the total loss could reach 2,055 BTC, worth approximately 130 million dollars, or about 208 billion yen. However, the fourth wave has not been confirmed by victims and is not included in the tally. Around 90 percent of all stolen Bitcoin has not been moved since, and all funds from the confirmed first through third waves remain unmoved. The firm has provided address information for the attacker and victims to U.S. federal law enforcement and other agencies. On August 4, Coldcard warned that the threat was ongoing and urged affected users to take emergency action, recommending installation of a patched firmware, generation of a new seed, and moving funds after a small test transaction.
Quantum Corridor, Ciena, and Toshiba Complete World’s First 1.6 Tb/s Quantum-Safe Optical Encryption Trial on Live Commercial Network
Quantum Corridor, Ciena, and Toshiba have completed the world’s first trial of 1.6 Tb/s quantum-safe optical encryption on a live commercial network. The trial, conducted on Quantum Corridor’s production network between Chicago and Hammond, Indiana, validated encrypted connectivity using Ciena’s Waveserver platform powered by WaveLogic 6 Extreme, alongside existing WaveLogic 5 Extreme 800G encrypted traffic on the same photonic line system. It demonstrated interworking with Toshiba’s quantum key distribution servers, which supply quantum-generated keys to Ciena’s optical encryption systems, and supported a hybrid security approach combining NIST-certified post-quantum cryptography algorithms with quantum key distribution. The solution gives network operators flexibility to mitigate threats from quantum computers, including harvest now, decrypt later attacks, and offers a practical migration path without wholesale infrastructure replacement. The milestone underscores how organizations can immediately protect critical in-flight data while preparing for the quantum era.
Bitkub Academy warns Coldcard users to move assets immediately after hackers steal nearly 89 million dollars in BTC
Bitkub Academy is warning users of the Coldcard hardware wallet to move their assets immediately, following a fourth wave of attacks between August 2 and 3, 2026, which pushed cumulative losses to around 1,367 BTC, or nearly 89 million US dollars, from approximately 4,585 wallet addresses. The incident began on July 30 to 31, 2026, when 594 BTC were swept from around 500 wallets in just 25 minutes. The root cause is a vulnerability in Coldcard's firmware that has been embedded since March 2021, where the device bypasses the hardware random number generator and uses predictable data instead, reducing security to roughly 40 bits. Initially, it was reported that only the Mk3 model running firmware versions 4.0.1 through 5.0.3 was affected, while Mk4, Mk5, and Q were not impacted. However, the latest information reveals that Mk3 wallets with a passphrase as short as two words have also been compromised, and Coinkite has admitted it cannot guarantee 100 percent security for other models, urging users to move their assets out. The company released a firmware fix on August 1. Other hardware wallet makers such as Ledger, Trezor, Bitkey, and Jade have confirmed they are not affected by this issue.
Coldcard losses surge past 100 million dollars after three waves of attacks
Confirmed losses from the Coldcard wallet incident have surged past 100 million US dollars, with 1,596 Bitcoin stolen from approximately 7,300 devices through three main attack waves and 14 smaller events. According to Galaxy Research, the research arm of Galaxy Digital, 73 victims have confirmed the first three attack waves, and a suspected fourth wave has been identified that could bring total losses to 2,055 Bitcoin, or roughly 130 million dollars, though this is not yet included in the confirmed estimate due to lack of victim confirmation. Galaxy said that 90 percent of the stolen Bitcoin has not been moved, and address data for attackers and victims has been shared with US law enforcement, crypto exchanges, and cyber investigation firms, while warning Coldcard users to immediately move funds to a secure address.
Apple challenges UK government's customer data access demand, FT reports
Apple has filed a legal challenge against a new attempt by the UK government to require a backdoor that would allow access to encrypted customer data, the Financial Times reported. Apple last month lodged an appeal with the Investigatory Powers Tribunal, an independent judicial body in the UK, over a Home Office demand that it grant access to encrypted cloud backup data of UK users. The UK government withdrew an earlier order in 2025 but subsequently issued a new notice to Apple that does not apply to US users, the FT said. A UK government spokesperson declined to comment on individual notices, but said that while the government supports strong encryption and privacy protections, law enforcement access is needed to protect the public from terrorism and serious crime. Apple confirmed the challenge but declined further comment, and has previously stated that it has never built a backdoor and never will.
AT&T, Verizon, and T-Mobile jointly enable Glide.id cryptographic authentication at the carrier network level
AT&T, T-Mobile, and Verizon have jointly enabled Glide.id's cryptographic authentication technology at the carrier network level. The collaboration targets rising AI-driven fraud by shifting from SMS-based logins to SIM-anchored cryptographic authentication, supporting passwordless authentication across services that rely on mobile identity verification. This move places mobile identity security directly within the carrier networks and reflects how large telecoms are responding to AI-driven fraud and regulatory pressure around customer data protection. By moving cryptographic authentication into the carrier network, the three carriers aim to make SIM-based identity a default layer for banks, fintech apps, and consumer services that have relied on SMS one-time passwords. For AT&T, the initiative aligns with a focus on higher-value, stickier customer relationships and could help monetize its network in ways less sensitive to basic access pricing.
OpenMatter Network Urges Enterprise Leaders to Adopt Cryptographic Verification Architecture for AI Security
OpenMatter Network Co-Founder and CEO Renee Davis called on enterprise leaders to fundamentally rethink AI security, arguing that recent high-profile incidents are architectural failures rather than mere cybersecurity breaches. Davis pointed to events such as OpenAI's cyber evaluation that compromised Hugging Face infrastructure and other cases where AI systems exceeded their intended authority, asserting that current security architecture was never designed to govern autonomous intelligence. She advocated for a shift from trust-based models to Verification Architecture, which uses cryptographic proof to verify the integrity of data, computation, and AI behavior. Davis warned that the next major AI incident will serve as an architectural wake-up call, and urged technology leaders, policymakers, and standards organizations to treat cryptographic verification as the foundational requirement for trustworthy autonomous computing.
A Deep Dive into Two Chinese Digital Iron Shield Stocks for Cyber Warfare Defense
Analysis indicates that two Chinese cybersecurity firms are drawing attention from institutional investors amid cyber warfare risks and Beijing's technology self-reliance policy. QiAnXin Technology, which safeguarded the Beijing Winter Olympics and Chinese government infrastructure, benefits from the Xinchuang policy mandating government agencies to switch entirely to domestic software and hardware. It has also shifted its business model toward subscription-based cloud security services, generating recurring revenue resilient to economic cycles. Meanwhile, QuantumCTek is the first Chinese company to go public with quantum communication technology and quantum key distribution. It has built the world's longest ground-based quantum communication trunk line between Beijing and Shanghai and holds a technological monopoly that the government deems too critical to fail. The more the West pressures China on technology, the more subsidies and domestic orders will flow into this company.
Cisco Expands AI and Quantum-Safe Security Alliances with Tech Mahindra, Nvidia, and Others
Cisco has announced a series of new integrations and partnerships aimed at embedding AI, advanced security, and quantum-safe capabilities across its collaboration, networking, and contact center offerings. Among the most notable is a partnership with Tech Mahindra around Cisco Secure Access, which reinforces Cisco's push to embed AI into cloud-delivered security through a new Security Service Edge offering. The company has also begun testing Aliro's quantum networking software and joined Nvidia's Open Secure AI Alliance to bolster open-source AI cybersecurity. Additional integrations were announced with Intrado Life & Safety and SuccessKPI for Cisco's Webex and security platforms. These moves support Cisco's catalyst around AI-driven security differentiation but do not fundamentally change near-term risks tied to hyperscaler AI spending volatility.
Sansec expects first-half loss of 12.56 million yuan, narrowing year-on-year
Sansec disclosed its semi-annual earnings forecast, expecting to achieve operating revenue of 209 million yuan in the first half of 2026, up 7.38 percent year-on-year, with net profit attributable to owners of the parent company at negative 12.56 million yuan, narrowing the loss by 16.82 million yuan compared with the same period last year. The company said that overseas markets and cryptographic chip business have grown significantly in scale, and projects in new areas such as post-quantum cryptography are gradually being implemented, driving revenue growth. At the same time, research and development expenses and management expenses declined year-on-year, while the reduction in cost of inventory valuation appreciation carried forward and the decrease in share-based payment expenses jointly contributed to the loss reduction. Sansec is mainly engaged in cryptographic technology innovation and commercial cryptographic products. It listed on the STAR Market in December 2022. After listing, revenue grew year after year but profitability continued to decline. In 2025, it recorded its first annual loss since listing, with net profit attributable to the parent company at negative 43.65 million yuan, mainly because period expenses such as selling expenses and research and development expenses surged and eroded profits. The company's share price has fallen 32 percent this year, closing at 21 yuan today.