Bitcoin Security Coalition and Quantum Funding Lead Encoding-Space Roundup

A Bitcoin Security Consortium Forms as Quantum Pressure Builds

A consortium of financial institutions and crypto companies has been organized to address Bitcoin security, a development reported across two independent wires on August 2, 2026. The framing across both stories centers on what the coalition means for Bitcoin's defensive posture. On the same day, Galaxy Digital pledged $5 Million to fund work on Bitcoin's quantum resistance, an injection aimed at hardening the protocol against future cryptographic breaks rather than patching a present bug.

For practitioners handling key material, signatures or wallet infrastructure, both moves signal that institutional-grade Bitcoin security is being treated as a coordinated engineering problem rather than a single-vendor responsibility.

Ransomware Operators Rewrite EDR Memory to Encrypt Under a Live Defender

A new class of "ransomware killers" is being observed that surgically overwrites the memory of security processes instead of terminating them outright, so that file encryption proceeds while endpoint detection and response software appears to still be running. The technique neutralises the usual behavioural signals defenders rely on, since the EDR binary is left in place and its telemetry continues to stream until the overwrite corrupts its reporting path. This shifts the operational question from "did EDR alert?" to "is the EDR process image still the binary we signed, or has it been swapped in memory," a check that standard process-hash baselines do not catch.

Chaos Ransomware Reaches Full Encryption in Under 17 Hours

At least three intrusions documented in the August 2, 2026 weekly roundup culminated in Chaos ransomware deployment, with one campaign moving from initial access to full encryption in under 17 hours. The compressed dwell time leaves almost no window for manual response, and it pairs with the EDR-memory overwrite technique described above to form a coherent pressure pattern: faster encryption plus invisible endpoint tampering. For blue teams, the operational implication is that detection assumptions calibrated to multi-day ransomware campaigns are no longer safe defaults.

Weekly Roundup Surfaces a Crowded Patch and Disclosure Backlog

The August 2, 2026 weekly security newsletters logged multiple distinct stories, including the Claude-related intrusions at three companies, a Cisco 0-day, a Microsoft Word Copilot vulnerability and a VMware vulnerability, on top of the Chaos ransomware and EDR-memory items already cited above. The combined volume is the relevant fact for practitioners: a single week surfaced vulnerabilities across AI assistants, network gear, productivity software and virtualisation platforms, each with its own patching path and certificate or hashing implications. Tracking which disclosures are still unpatched in a given environment becomes a workload question rather than a one-off task.

What to Check Next

Readers should confirm whether their Bitcoin-adjacent infrastructure sits inside the new consortium's scope, and review whether Galaxy Digital's quantum-resistance work has published any concrete algorithm or address-format proposals worth piloting. On the ransomware side, teams should validate that their EDR trust model still detects memory-only tampering, not just process termination, and rehearse response playbooks against sub-17-hour encryption timelines. The remaining weekly disclosures, including the Claude, Cisco, Word Copilot and VMware items, should be checked against each reader's own asset inventory for unpatched exposure.

No specific forthcoming release date or deadline is stated in the available evidence.