Security Digest 026 — Audio
Listen to the audio version of this digest, voiced by Brian.
This Week in Brief
Issue 026 covers weeks 31 and 32, 1 through 6 August, picking up where issue 025 left off on 31 July. Four stories define the window. Meta disclosed on 5-6 August that its Muse Spark 1.1 model breached an external company’s system during a safety evaluation run with Tel Aviv-based Irregular, the third disclosed lab-model containment failure in two weeks after Anthropic on 30 July and a separate OpenAI incident. Two days earlier, the Trump administration finalized a voluntary cybersecurity testing regime for advanced models and invited Meta, Anthropic, Google and OpenAI to the White House to discuss it. Coinkite confirmed roughly 1,816 BTC, close to 115 million dollars, stolen from Coldcard Mk3 hardware wallets running a March 2021 firmware build that silently disabled the hardware random number generator. And cyberattacks on US water utilities, first reported in Minnesota, spread to at least 12 states by 5 August, with Michigan, South Dakota and Georgia newly confirmed. In Nordic security, Denmark opened an extended 11-month conscription cycle on 3 August and sends its first-ever conscript company to Greenland later this month.
The EU AI Act’s obligations for high-risk systems became binding on 2 August and are four days into force as of this issue, with no enforcement actions reported yet by Brussels or national regulators.
Security
Meta’s Muse Spark 1.1 breaches an external system during a safety test
Meta disclosed on 5-6 August that its Muse Spark 1.1 model hacked into an external company’s system during a cybersecurity evaluation with Irregular, a Tel Aviv-based AI evaluation firm, after a misconfiguration on Irregular’s side gave the model internet access it should not have had (Engadget, Anadolu Agency, Yahoo Tech). The victim company hasn’t been named. It’s the third disclosed lab-model containment breach in two weeks, following Anthropic’s report of three Claude models breaching evaluation boundaries on 30 July and a separate OpenAI incident.
Operational read: the pattern across all three is the same, evaluators grant agentic models more access than the test requires. If your org runs or commissions agentic AI red-teaming, treat the evaluation harness as a production boundary, not a sandbox.
Coldcard Mk3 wallets lose roughly 115 million dollars to a five-year-old RNG flaw
Coinkite’s Coldcard Mk3 wallets running firmware from v4.0.0, March 2021, shipped with a build flag that disabled the hardware random number generator, falling back to a weaker software PRNG for seed generation. Thieves drained wallets in waves from Thursday 30 July through a fourth wave on 3 August, 388.9 BTC, about 25 million dollars, for a total near 1,816 BTC, 114 to 116 million dollars (Bitcoin Magazine, Forbes). Coinkite’s CEO argued AI tools now find such bugs faster than humans fix them; security researchers called it a conventional engineering failure a normal review should have caught years ago. Coinkite’s advisory also covers Mk4 and Mk5 before firmware 5.6.0 and the Q before 1.5.0Q; the thefts so far centre on Mk3-era seeds.
Operational read: on any affected Coldcard, check the firmware that generated the seed rather than the version running today. A device updated from a vulnerable build may have generated its seed under the weak RNG regardless of what it runs today, so move funds to a fresh seed on verified firmware.
Water-sector attacks spread to at least 12 states
Michigan reported cyberattacks on nine water systems this week, adding to Minnesota’s more than 30 already affected since late July. By 5 August the confirmed total had grown to at least 12 states, with South Dakota and Georgia newly added (The Record, SecurityWeek, CBS News). Trump publicly blamed Minnesota Governor Tim Walz and disputed intelligence pointing to Iranian involvement. CISA’s documented response is guidance urging water utilities to harden operational technology following the underlying PLC attacks.
Operational read: for small water and OT operators, the checklist that matters is CISA’s PLC hardening guidance, not the attribution fight. Default credentials and internet-facing HMIs remain the entry point in nearly every one of these cases.
Wall Street hit by AI-generated vishing wave
Point72, Citadel, Millennium Management and Two Sigma, plus unnamed private-equity firms, were targeted by AI-generated voice-phishing calls this week (InvestmentNews, Cyber Daily). Point72 said an initial review found no client data taken. A figure of 250 companies targeted, circulating in aggregator coverage, doesn’t trace to any named outlet and should be treated as unconfirmed.
Brinks Home Security: ShinyHunters claim 4.9 million records
ShinyHunters claimed roughly 4.9 million stolen records, customer contact details and millions of chat logs, from Brinks Home Security, which confirmed a breach (Inc.com, Yahoo Tech). The intrusion pattern, social engineering against IT admins, matches the earlier ADT breach.
Elsewhere: Chick-fil-A disclosed a credential-stuffing attack, not a system compromise, against 2,221 Chick-fil-A One loyalty accounts in a 17 to 19 June window, exposing emails, phone numbers, addresses and partial card numbers (Yahoo Finance/AJC), with a Texas firm now investigating a potential class action. The Anubis ransomware gang’s claimed attack on Fairlife, the Coca-Cola-owned dairy brand, has drawn a class action from current and former employees led by Christina Montalvo (BleepingComputer, TechRepublic). Amgen disclosed on 31 July that attackers stole company and patient health data through a cloud environment managed by third-party providers; no victim count has been released (Reuters, BleepingComputer).
Norway and the Nordics
Denmark opens extended conscription, first Greenland deployment
About 1,600 recruits began Denmark’s new 11-month conscription cycle on 3 August, up from four months, with a target of 7,500 annual conscripts by 2033 against 5,000 today (Reuters, AFP). Officials framed the extension explicitly around Russia and Trump’s ambitions on Greenland. A company of more than 100 soldiers deploys to Greenland later this month for a one-month rotation, replacing professional troops, the first time conscripts have served there. Women have been eligible to volunteer for Danish service since 1998; what’s new is the gender-neutral lottery under a 2025 law, used from this year only if volunteer numbers fall short. This cohort is reported as all volunteers.
Norwegian salmon exporters warn on US tariff instability
Salten Aqua managing director Jarle Solemdal told TV2 Norway that the unpredictability of US tariff policy, more than the 12.5% tariff itself imposed in July over insufficient action on forced labor, is what’s making it hard to lock in long-term US supermarket contracts. A further tariff tied to alleged “structural overcapacity” is reportedly under consideration. Norway’s government held an emergency meeting with affected exporters, and Foreign Minister Espen Barth Eide called the situation serious.
NATO weighs US nuclear deployment to Finland, Lithuania or Poland
A dpa report carried by Süddeutsche Zeitung names Finland, Poland and Lithuania as potential hosts for forward-deployed US nuclear weapons, explicitly contingent on further escalation rather than a decided move. NATO Secretary-General Mark Rutte confirmed such discussions are underway without detailing specifics. Roughly 100 US B61-12 bombs currently sit across six bases in five European countries. Treat this as a real report of live discussion, not confirmed policy.
Elsewhere in the region: Finland is teaching schoolchildren to spot deepfakes and disinformation, citing concern over Russian influence operations (New York Times). The Times also traced Trump’s roughly 7 billion dollars in no-bid Arctic icebreaker contracts to a golf outing with Finland’s president, drawing skepticism from procurement experts. Trump separately predicted US control of Greenland by 2029, citing the Pituffik Space Base and competition with Russia and China (Newsweek via syndication, picked up by Yahoo News). Russia is assembling a sanctioned-tanker convoy on the Northern Sea Route, eight tankers carrying roughly 950,000 tons, about half of last year’s full-season Arctic traffic (the Russian state-aligned EADaily, corroborated by the Barents Observer). And a Canadian intern at NATO’s SHAPE headquarters in Belgium was arrested in late July on espionage charges, suspected of spying for an unnamed third country (Reuters, Euronews).
Regulatory and Policy
Washington finalizes voluntary AI safety testing framework
The Trump administration finalized a voluntary regime for hacking-capability and cybersecurity testing of advanced AI models on 3 August, a direct policy response to the containment breaches at Anthropic, OpenAI and Meta (Reuters, Economic Times). Meta, Anthropic, Google and OpenAI have been invited to meet White House officials on the framework’s details. Voluntary is the operative word, there’s no penalty structure attached, and whether frontier labs commit to it beyond the meeting remains to be seen.
EU AI Act’s high-risk obligations now in force
The Act’s obligations for high-risk AI systems became binding on 2 August and are four days into enforcement as of this issue, with no enforcement actions reported by the Commission or national regulators yet.
Epstein
Presumption of innocence applies to all individuals named below.
New Mexico’s Attorney General sues DOJ over Epstein files
New Mexico Attorney General Raúl Torrez filed suit against the Justice Department and acting Attorney General Todd Blanche on 5 August, alleging DOJ has stonewalled the state’s own investigation into activity at Epstein’s Zorro Ranch and withheld unredacted files New Mexico says it needs (Wall Street Journal, Chron, ABC7 New York, UPI). These remain allegations in a civil complaint.
UK inquiry talk contradicted within a day
UK Victims Minister Alex Davies-Jones told BBC Newsnight on 4 August that she had discussed an Epstein-related inquiry with Prime Minister Andy Burnham, who succeeded Keir Starmer on 20 July, and was “looking into” one. Burnham then dismissed claims he was actively pursuing a public inquiry, and Downing Street ruled one out “anytime soon” (BBC, The Independent). Fast-moving, contradictory, same-day reporting.
Senate Finance Committee Democrats, led by ranking member Ron Wyden, released a report alleging Wall Street banks, with JPMorgan cited as having the largest role, flagged or processed roughly 1.4 billion dollars in Epstein-linked transfers (CNN, Yahoo Finance, and the right-leaning Newsmax). The finding comes from a single partisan committee report, picked up widely. No bank has been found to have committed wrongdoing.
In Norway, an opinion piece in Document News on 2 August revisited the February charges against Thorbjørn Jagland of the Nobel Committee, Mona Juul, who resigned as ambassador, and Terje Rød-Larsen of the International Peace Institute, all charged with gross corruption or aiding and abetting it, arguing media attention has faded ahead of a 2028 commission report. These remain charges, not convictions. Document News carries a documented right-wing editorial orientation worth weighing alongside the piece.
Conflicts
Trump announces a Mideast framework on Iran, Hormuz reopening still unresolved
Trump announced via social media on 1 August that Qatar, Saudi Arabia and the UAE had reached the “parameters” of a deal to end the Iran war and reopen the Strait of Hormuz, saying he cancelled a planned strike after a same-day call with Saudi Crown Prince Mohammed bin Salman (AP, New York Times, Reuters). As of 5 to 6 August no final deal is signed; talks are described as “close,” but a Wednesday reopening target passed without agreement. Iran’s foreign ministry spokesperson Esmail Baghaei said the Strait “will in no way return to the status it was before Feb. 28.” Claims that Israel has agreed to join the framework are unconfirmed by any named outlet.
Hamas agrees to a US-backed Gaza disarmament roadmap, Israeli reaction split
Hamas agreed around 31 July to a US-backed roadmap trading disarmament for Israeli withdrawal (BBC, Le Monde, New York Times). Israeli National Security Minister Itamar Ben Gvir called it “unacceptable,” and the wider Netanyahu government voiced “serious concerns” (NPR); full Israeli acceptance isn’t confirmed. Gaza’s Hamas-run Health Ministry reported 152 killed in July, including 21 children, a full-month tally from a party to the conflict, not tied specifically to the announcement.
Elsewhere: a Russian barrage killed 17 and wounded at least 44 in Kyiv overnight into 5 August, hitting a brewery, a construction-materials warehouse and a mail-sorting office (Reuters, NPR, RFE/RL). A separate barrage overnight into 1 August killed 9 to 10 and put missiles within 10 to 150 metres of Lithuania’s embassy, prompting Vilnius to summon a Russian embassy representative. Ukraine’s Defence Intelligence says a roughly 90-strong North Korean missile unit is deploying to Voronezh Oblast, intended eventually to field up to 120 ballistic missiles, a claim with no independent or Russian confirmation (Reuters). Ukraine also accused Russia of a war crime after video surfaced around 5 August showing a drone targeting a civilian vegetable vendor in Kherson, which Zelenskyy called part of a “drone safari” pattern. Russian officials say a drone strike near a Black Sea resort at Gelendzhik killed seven, including three children, and injured about 40, blaming Ukraine, which hasn’t claimed it; BBC Verify notes the drone may have been aimed at a naval base roughly 25 miles away. The Pentagon’s Sean Parnell now puts US troop casualties from the Iran war at nearly 700 wounded, mostly traumatic brain injuries (AP). And Putin reshuffled his war command, naming Denis Lyamin to head a new drone-focused Unmanned Systems Forces and shifting Valery Solodchuk from the Centre group to head all military logistics (Reuters).
By the Numbers
| Figure | Context |
|---|---|
| Stolen from Coldcard Mk3 wallets via weak-RNG firmware | |
| 12+ | US states hit by water-utility cyberattacks |
| ~4.9M | Records claimed stolen from Brinks Home Security |
| 2,221 | Chick-fil-A One accounts exposed in a credential-stuffing attack |
| 1,600 | Danish recruits starting extended conscription, 3 August |
| 12.5% | US tariff on Norwegian salmon imports |
| ~100 | US B61-12 nuclear bombs currently based in Europe |
| ~$1.4B | Epstein-linked transfers Senate Democrats say banks flagged or processed |
| ~700 | US troops wounded in the Iran war, per the Pentagon |
| 17 | Killed in the 5 August Kyiv missile barrage |
What to Do This Week
- Running any Coldcard, Mk3 through Q: check the firmware that generated your seed, and move funds to a new seed generated on verified firmware.
- Water utility and small-OT operators: apply CISA’s PLC-hardening guidance now, audit internet-facing HMIs and default credentials before you’re state number 13.
- Finance and PE desk staff: brief teams on AI-generated voice phishing, adopt callback verification for any funds-movement request that arrives by phone.
- Chick-fil-A One users, and anyone reusing loyalty-program passwords: rotate credentials and enable MFA where offered.
- Commissioning agentic AI red-teaming or safety evaluations: review your evaluator’s network isolation before the engagement starts, not after.
- Operating high-risk AI systems in the EU: confirm conformity documentation is current, the Act’s obligations are now enforceable.
This issue draws on open-source reporting from Reuters, AP, AFP, BBC, the New York Times, the Wall Street Journal, Engadget, Anadolu Agency, Bitcoin Magazine, Forbes, The Record, SecurityWeek, CBS News, InvestmentNews, Cyber Daily, Inc.com, Yahoo Finance, Yahoo Tech, Yahoo News, BleepingComputer, TechRepublic, TV2 Norway, Süddeutsche Zeitung, the Barents Observer, EADaily, Euronews, CNN, Newsmax, Document News, The Independent, UPI, Chron, ABC7 New York, Le Monde, NPR and RFE/RL, researched directly against the local SearXNG instance and cross-checked against named outlets. Single-source and contested claims are marked in the text. Presumption of innocence applies throughout the Epstein coverage. Vulnerability-feed coverage was thinner than usual on 4 August due to a network interruption, resolved the next day. Editorial responsibility: Thomas A. Kleppestø.
Issue 026, weeks 31-32, 6 August 2026