================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Monday, August 3, 2026 - 7:05 AM EDT ================================================================ Iran-linked hackers push their water-system attacks past Minnesota into at least six more states as actively exploited flaws in N-able and SonicWall gear hand intruders enterprise networks. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Iran-linked hackers extended their water-system intrusions past Minnesota into Michigan, South Dakota, and Georgia, making thinly defended municipal utilities a geopolitical front line. see: US Water Attacks Spread to Six More States * [TREND] Attackers are racing through fresh access-gear flaws, seizing N-able's N-central servers via CVE-2026-18577 after an incomplete fix while INC ransomware roots SonicWall SMA1000 appliances. see: N-able N-central Servers Seized via CVE-2026-18577; INC Ransomware Roots SonicWall SMA1000 Appliances * [TREND] AI supply-chain risk reached the model ecosystem as crafted Hugging Face Diffusers repos ran arbitrary code, while Newport downplayed 'rogue AI' fears over an OpenAI-linked intrusion. see: Hugging Face Diffusers Flaws Enable Code Execution; Did OpenAI's New Model "Go Rogue"? * [UPDATE (new)] A Chinese actor deployed the GHOSTBLADE implant on Apple iOS, while a PNLD breach dumped UK police officers' contacts onto the dark web. see: Chinese Actor Deploys GHOSTBLADE on iOS; PNLD Breach Exposes UK Police Contacts * [TREND] The Reading slate frames AI's mounting cost problem, with Meta's earnings reading as disappointing and running large language models growing too expensive to sustain. see: Meta Earnings, Meta's Timing Problems, The Financial Tail; Premium: AI Is Getting Way Too Expensive * [UPDATE (new)] Locally, Pittsburgh weighs short-term rental rules, the Wabash Tunnel closes two weeks for lighting repairs, and lost federal aid imperils the Land Bank. see: Pittsburgh Weighs Short-Term Rental Rules; Wabash Tunnel Closes Two Weeks; Federal Aid Loss Imperils Pittsburgh Land Bank SECURITY ---------------------------------------------------------------- 1. US WATER ATTACKS SPREAD TO SIX MORE STATES Critical Infrastructure Security · [apt, critical-infrastructure] Latest developments: SecurityWeek reported the Iran-linked campaign now reaches water systems in at least six more states, including Michigan, South Dakota, and Georgia, beyond the Minnesota utilities first tied to Tehran. Iran-linked hackers target internet-exposed programmable logic controllers across US water and wastewater systems; CISA urges operators to pull the exposed devices offline immediately. - SecurityWeek: https://www.securityweek.com/us-water-cyberattacks-extend-beyond-minnesota-to-at-least-6-other-states/ 2. N-ABLE N-CENTRAL SERVERS SEIZED VIA CVE-2026-18577 Vulnerabilities and Exploits · [cve, exploit, patch] Latest developments: N-able confirmed attackers exploited authentication-bypass flaw CVE-2026-18577 to gain remote administrative control of N-central servers after its first patch proved incomplete, shipping build 2026.3.1.7 on August 2 as the first unaffected version. N-central is N-able's remote monitoring and management platform that managed service providers use to run customer fleets; the bypass lets intruders reach every system managed through a compromised server, so operators must upgrade to build 2026.3.1.7 now. - The Hacker News: https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html 3. HUGGING FACE DIFFUSERS FLAWS ENABLE CODE EXECUTION Vulnerabilities and Exploits · [cve, supply-chain, ai] Latest developments: Researchers disclosed three high-severity flaws in Hugging Face's Diffusers library that let crafted model repositories run arbitrary code while bypassing the trust_remote_code safeguard. The Diffusers library loads AI image and diffusion models; a malicious repository executes code on any machine that loads it, opening the AI supply chain to attack. - The Hacker News: https://thehackernews.com/2026/08/hugging-face-diffusers-flaws-could-let.html 4. INC RANSOMWARE ROOTS SONICWALL SMA1000 APPLIANCES Ransomware and Cybercrime · [ransomware, exploit] Latest developments: The INC Ransomware gang is exploiting recent SonicWall SMA1000 vulnerabilities to seize root access and move laterally, SecurityWeek reported. SonicWall's SMA1000 secure-access appliances sit at network edges; INC Ransomware uses the flaws to gain root and spread, so administrators should patch and hunt for signs of compromise. - SecurityWeek: https://www.securityweek.com/recent-sonicwall-vulnerabilities-exploited-in-ransomware-attacks/ 5. CHINESE ACTOR DEPLOYS GHOSTBLADE ON IOS Nation-State Activity · [apt, mobile] Latest developments: Censys identified an unknown Chinese threat actor deploying the GHOSTBLADE implant on Apple iOS devices with a publicly leaked version of the DarkSword exploit kit, running more than 100 web properties. The actor lures iOS users through fake Amazon Web Services sign-in pages hosted on a domain that also serves the DarkSword toolkit, most of the roughly 100 sites posing as AWS logins. - The Hacker News: https://thehackernews.com/2026/08/chinese-threat-actor-uses-leaked.html 6. PNLD BREACH EXPOSES UK POLICE CONTACTS Data Breaches · [breach] Latest developments: The Police National Legal Database confirmed a breach identified July 26 that dumped names, organizations, and work email addresses of British police officers, staff, and criminal justice professionals onto the dark web. PNLD supplies legal reference data to UK police forces and government partners; the leak exposes contact details of officers, criminal justice professionals, and customers. - The Hacker News: https://thehackernews.com/2026/08/pnld-breach-exposes-uk-police-and.html BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S. and Japan Jointly Prop Up the Yen Latest developments: Finance Minister Satsuki Katayama and the U.S. Treasury confirmed the move was a coordinated U.S.-Japan intervention, the first since 1998, and both governments vowed to act again against disorderly currency swings. The New York Fed bought yen alongside Japanese authorities after the currency touched a 40-year low against the dollar, the first coordinated U.S.-Japan intervention since 1998, an effort to contain the tremors a cratering yen could send through global markets. - WSJ Markets: https://www.wsj.com/finance/currencies/japan-intervened-to-support-yen-together-with-u-s-treasury-4627741f?mod=rss_markets_main - FT World: https://www.ft.com/content/5de204a4-4db6-458c-aa9a-324e6bd5e766?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Today: Partly Sunny, high 80F. Tonight: Mostly Clear then Patchy Fog, low 59F. Tuesday: Patchy Fog then Sunny, high 85F. Business: * Butterfat Opens in East Allegheny Latest developments: The Post-Gazette reported Butterfat, a maker of hand-crafted gelato and sorbetto, has opened in East Allegheny. Butterfat, a new shop churning hand-crafted gelato and sorbetto, opened in Pittsburgh's East Allegheny neighborhood on the North Side. - Pittsburgh Post-Gazette: https://www.post-gazette.com/life/food/2026/08/03/butterfat-hand-crafted-gelato-sorbetto-pittsburgh-east-allegheny/stories/202607290064 * Monroeville Couple to Open Trafford Eatery Latest developments: TribLive reported the couple will open a breakfast and lunch restaurant on Cavitt Avenue in Trafford in September 2026. A Monroeville couple plans to open a breakfast and lunch restaurant on Cavitt Avenue in Trafford, Westmoreland County, next month. - TribLive: https://triblive.com/local/westmoreland/monroeville-couple-to-open-breakfast-lunch-restaurant-in-trafford/ Around town: * Pittsburgh Weighs Short-Term Rental Rules Latest developments: PublicSource reported Pittsburgh City Council and the City Planning Commission both expect to vote on the proposed short-term rental rules after Labor Day. Pittsburgh is preparing new rules for Airbnb-style short-term rentals, and operators warn that heavy regulation could dent tourism and their livelihoods. - PublicSource: https://www.publicsource.org/pittsburgh-short-term-rentals-vote/ * Wabash Tunnel Closes Two Weeks Latest developments: The Post-Gazette reported the Wabash Tunnel will shut for two weeks of emergency lighting repairs. Pittsburgh's troubled Wabash Tunnel, the commuter route bored beneath Mount Washington, will close for two weeks so crews can repair its lighting. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/transportation/2026/08/03/pittsburgh-wabash-tunnel-emergency-repairs/stories/202608020046 * Federal Aid Loss Imperils Pittsburgh Land Bank Latest developments: The Post-Gazette reported the loss of federal funding puts the Pittsburgh Land Bank's future in jeopardy. The Pittsburgh Land Bank, the agency that acquires and clears vacant and tax-delinquent properties to return them to productive use, faces an uncertain future as federal aid dries up. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/politics-local/2026/08/03/pittsburgh-land-bank-federal-funding/stories/202607310043 SPORTS ---------------------------------------------------------------- Pirates (56-57) Sun Aug 2 · Pirates 2 · Reds 10 · Final Burns wins 12th straight decision, Stewart hits 24th HR, as Reds beat Pirates 10-2 https://plaintextsports.com/mlb/2026-08-02/pit-cin Up Next · Pirates @ Brewers · Mon Aug 3, 7:40 PM https://plaintextsports.com/mlb/2026-08-03/pit-mil Around the Teams: * Roman Wilson's Camp to Prove Latest developments: Post-Gazette columnist Noah Hiles argued receiver Roman Wilson has the most to gain at Steelers training camp in Latrobe. Noah Hiles wrote that Steelers receiver Roman Wilson stands to gain the most this camp as he fights for snaps in a crowded room alongside Michael Pittman Jr., DK Metcalf, and Germie Bernard. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/03/nfl-trainingcamp-wilson-germie-bernard-pittman-metcalf/stories/202607310021 READING ---------------------------------------------------------------- * Stratechery -- Meta Earnings, Meta's Timing Problems, The Financial Tail Ben Thompson reads Meta's earnings as disappointing and its promises about future AI products as more worrying still, flagging timing problems and a financial tail risk in the company's spending. https://stratechery.com/2026/meta-earnings-metas-timing-problems-the-financial-tail/ * Ed Zitron -- Premium: AI Is Getting Way Too Expensive Zitron argues the debate over AI's theoretical job losses and productivity gains misses the harder problem: the cost of running large language models keeps climbing toward economics that do not work. https://www.wheresyoured.at/premium-ai-is-getting-way-too-expensive/ * Cal Newport -- Did OpenAI's New Model "Go Rogue"? Newport examines the intrusion into Hugging Face's infrastructure tied to an OpenAI model and argues the alarming 'rogue AI' framing overstates what actually happened. https://calnewport.com/did-openais-new-model-go-rogue/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,417.09 ▼ -0.5% Dow 52,248.93 ▲ +0.5% Nasdaq 24,949.59 ▼ -1.9% WTI crude 82.92 ▼ -5.0% EUR/USD 1.1428 ▲ +0.2% GBP/USD 1.3351 ▼ -0.3% USD/JPY 162.95 = -0.0% ================================================================ Generated 2026-08-03 07:05 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================