daily plain-text briefing: security, markets, business, and pittsburgh
Iran-linked hackers push their water-system attacks past Minnesota into at least six more states as actively exploited flaws in N-able and SonicWall gear hand intruders enterprise networks.
Latest developments: SecurityWeek reported the Iran-linked campaign now reaches water systems in at least six more states, including Michigan, South Dakota, and Georgia, beyond the Minnesota utilities first tied to Tehran.
Iran-linked hackers target internet-exposed programmable logic controllers across US water and wastewater systems; CISA urges operators to pull the exposed devices offline immediately.
Sources: SecurityWeek · ↑ top
Latest developments: N-able confirmed attackers exploited authentication-bypass flaw CVE-2026-18577 to gain remote administrative control of N-central servers after its first patch proved incomplete, shipping build 2026.3.1.7 on August 2 as the first unaffected version.
N-central is N-able's remote monitoring and management platform that managed service providers use to run customer fleets; the bypass lets intruders reach every system managed through a compromised server, so operators must upgrade to build 2026.3.1.7 now.
Sources: The Hacker News · ↑ top
Latest developments: Researchers disclosed three high-severity flaws in Hugging Face's Diffusers library that let crafted model repositories run arbitrary code while bypassing the trust_remote_code safeguard.
The Diffusers library loads AI image and diffusion models; a malicious repository executes code on any machine that loads it, opening the AI supply chain to attack.
Sources: The Hacker News · ↑ top
Latest developments: The INC Ransomware gang is exploiting recent SonicWall SMA1000 vulnerabilities to seize root access and move laterally, SecurityWeek reported.
SonicWall's SMA1000 secure-access appliances sit at network edges; INC Ransomware uses the flaws to gain root and spread, so administrators should patch and hunt for signs of compromise.
Sources: SecurityWeek · ↑ top
Latest developments: Censys identified an unknown Chinese threat actor deploying the GHOSTBLADE implant on Apple iOS devices with a publicly leaked version of the DarkSword exploit kit, running more than 100 web properties.
The actor lures iOS users through fake Amazon Web Services sign-in pages hosted on a domain that also serves the DarkSword toolkit, most of the roughly 100 sites posing as AWS logins.
Sources: The Hacker News · ↑ top
Latest developments: The Police National Legal Database confirmed a breach identified July 26 that dumped names, organizations, and work email addresses of British police officers, staff, and criminal justice professionals onto the dark web.
PNLD supplies legal reference data to UK police forces and government partners; the leak exposes contact details of officers, criminal justice professionals, and customers.
Sources: The Hacker News · ↑ top
Latest developments: Finance Minister Satsuki Katayama and the U.S. Treasury confirmed the move was a coordinated U.S.-Japan intervention, the first since 1998, and both governments vowed to act again against disorderly currency swings.
The New York Fed bought yen alongside Japanese authorities after the currency touched a 40-year low against the dollar, the first coordinated U.S.-Japan intervention since 1998, an effort to contain the tremors a cratering yen could send through global markets.
Sources: WSJ Markets · FT World · ↑ top
Today: Partly Sunny, high 80F.
Tonight: Mostly Clear then Patchy Fog, low 59F.
Tuesday: Patchy Fog then Sunny, high 85F.
Latest developments: The Post-Gazette reported Butterfat, a maker of hand-crafted gelato and sorbetto, has opened in East Allegheny.
Butterfat, a new shop churning hand-crafted gelato and sorbetto, opened in Pittsburgh's East Allegheny neighborhood on the North Side.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: TribLive reported the couple will open a breakfast and lunch restaurant on Cavitt Avenue in Trafford in September 2026.
A Monroeville couple plans to open a breakfast and lunch restaurant on Cavitt Avenue in Trafford, Westmoreland County, next month.
Latest developments: PublicSource reported Pittsburgh City Council and the City Planning Commission both expect to vote on the proposed short-term rental rules after Labor Day.
Pittsburgh is preparing new rules for Airbnb-style short-term rentals, and operators warn that heavy regulation could dent tourism and their livelihoods.
Sources: PublicSource · ↑ top
Latest developments: The Post-Gazette reported the Wabash Tunnel will shut for two weeks of emergency lighting repairs.
Pittsburgh's troubled Wabash Tunnel, the commuter route bored beneath Mount Washington, will close for two weeks so crews can repair its lighting.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: The Post-Gazette reported the loss of federal funding puts the Pittsburgh Land Bank's future in jeopardy.
The Pittsburgh Land Bank, the agency that acquires and clears vacant and tax-delinquent properties to return them to productive use, faces an uncertain future as federal aid dries up.
Sources: Pittsburgh Post-Gazette · ↑ top
Pirates (56-57)
Sun Aug 2 · Pirates 2 · Reds 10 · Final
Burns wins 12th straight decision, Stewart hits 24th HR, as Reds beat Pirates 10-2
Up Next · Pirates @ Brewers · Mon Aug 3, 7:40 PM
Latest developments: Post-Gazette columnist Noah Hiles argued receiver Roman Wilson has the most to gain at Steelers training camp in Latrobe.
Noah Hiles wrote that Steelers receiver Roman Wilson stands to gain the most this camp as he fights for snaps in a crowded room alongside Michael Pittman Jr., DK Metcalf, and Germie Bernard.
Sources: Post-Gazette Steelers · ↑ top
S&P 500 7,417.09 ▼ -0.5% Dow 52,248.93 ▲ +0.5% Nasdaq 24,949.59 ▼ -1.9% WTI crude 82.92 ▼ -5.0% EUR/USD 1.1428 ▲ +0.2% GBP/USD 1.3351 ▼ -0.3% USD/JPY 162.95 = -0.0%