================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Monday, August 3, 2026 - 10:06 AM EDT ================================================================ Attackers are handing whole intrusion and fraud campaigns to large language models, as biotech giant Amgen and other firms tally fresh data losses. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Adversaries are bending large models to their ends, from a Chinese actor's DeepSeek-driven intrusions to a Cambodia-linked ChatGPT scam ring and doubts whether OpenAI's new model went rogue. see: Chinese Actor Runs DeepSeek-Driven Autonomous Attacks; OpenAI Bans Cambodia-Linked ChatGPT Scam Network; Did OpenAI's New Model "Go Rogue"? * [TREND] Sensitive data keeps leaking through others' systems, with Amgen's patient and research files taken via a cloud partner while River Bank and Brinks Home disclosed fresh ransomware-linked thefts. see: Amgen Patient Data Stolen From Cloud Partner; River Bank and Brinks Home Disclose Data Theft * [UPDATE (new)] New research exposed subtle integrity and auth gaps, as Thermo Fisher patched a DNA file-tampering flaw and Unit 42 showed a passkey weakness cutting MFA to one factor. see: Thermo Fisher Patches DNA File-Tampering Flaw; Passkey Flaw Reduces MFA to One Factor * [TREND] Commentators are souring on AI economics, with one arguing Meta's earnings and product timing disappoint and another warning that running large models is becoming unsustainably expensive. see: Meta Earnings, Meta's Timing Problems, The Financial Tail; Premium: AI Is Getting Way Too Expensive * [UPDATE (new)] Oil slid and the Dow jumped about 500 points after Trump halted an Iran strike, though Tehran denied his claim that negotiations begin Monday. see: Trump Halts Iran Strike as Tehran Denies Talks * [UPDATE (new)] Around Pittsburgh, the Allegheny County Health Department will spray eight communities for West Nile virus while PennDOT reopens Commercial Street under the Parkway East bridge Monday. see: West Nile Prompts Mosquito Spraying; Commercial Street Reopens Under Parkway Bridge SECURITY ---------------------------------------------------------------- 1. RIVER BANK AND BRINKS HOME DISCLOSE DATA THEFT Ransomware and Cybercrime · [ransomware, breach] Latest developments: River Bank said the hackers who breached it in a June ransomware attack have since deleted the stolen data, while Brinks Home confirmed a separate breach after attackers began leaking its files. River Bank, a bank holding company, is still investigating the June incident; Brinks Home, the alarm-monitoring firm, said its monitoring and alarm functions kept running despite the leak. Victims should assume leaked data circulates regardless of deletion claims. - SecurityWeek: https://www.securityweek.com/river-bank-says-hackers-deleted-data-stolen-in-ransomware-attack/ - SecurityWeek: https://www.securityweek.com/brinks-home-discloses-data-breach-as-hackers-leak-files/ 2. CHINESE ACTOR RUNS DEEPSEEK-DRIVEN AUTONOMOUS ATTACKS AI Security · [ai, china, apt] Latest developments: Palo Alto Networks' Unit 42 uncovered a Chinese threat actor using the aliases knaithe and KnYuan who orchestrated DeepSeek and other large language models through the open-source Hermes agent to attack internet-facing systems, gaining full visibility into the operation after the actor's own agent misconfigured a file server and exposed the entire infrastructure. The actor ran an autonomous agent across multiple LLMs to scan, exploit, and pivot through exposed systems with minimal human input. Organizations should expect faster, cheaper mass exploitation and prioritize patching internet-facing services. - Help Net Security: https://www.helpnetsecurity.com/2026/08/03/deepseek-ai-autonomous-cyberattacks-hermes-agent/ 3. OPENAI BANS CAMBODIA-LINKED CHATGPT SCAM NETWORK AI Security · [fraud, ai] Latest developments: OpenAI banned a coordinated network of ChatGPT accounts that likely originated in Cambodia's Preah Sihanouk province, a region tied to scam compounds and human-trafficking operations, after a WhatsApp tip surfaced the abuse. The network built fake online personas, generated and translated messages to scam targets, and produced promotional content for fraudulent schemes. Defenders should treat AI-polished fraud lures as the new baseline. - Help Net Security: https://www.helpnetsecurity.com/2026/08/03/openai-disrupts-chatgpt-scam-operation/ 4. AMGEN PATIENT DATA STOLEN FROM CLOUD PARTNER Data Breaches · [breach, healthcare] Latest developments: Amgen told the U.S. Securities and Exchange Commission that intruders accessed patient information and proprietary company data through a breach of third-party cloud systems. Amgen, the Thousand Oaks, California biotechnology giant, said the intrusion hit an outside cloud environment rather than its own infrastructure, and its investigation continues. Companies should audit vendor cloud access and breach-notification terms. - The Record: https://therecord.media/amgen-hackers-cyberattack-sec 5. THERMO FISHER PATCHES DNA FILE-TAMPERING FLAW Vulnerabilities and Exploits · [patch, cve] Latest developments: Thermo Fisher Scientific patched CVE-2026-17583 in select Applied Biosystems human-identification software after finding that nearly undetectable changes to .fsa and .hid DNA output files could occur before analysis software loads them. The July 31 bulletin covers forensic and paternity lab software where circumvented lab controls could let someone alter genetic evidence ahead of review. Labs should apply the fix and tighten file-handling controls. - The Hacker News: https://thehackernews.com/2026/08/thermo-fisher-patches-flaw-that-could.html 6. PASSKEY FLAW REDUCES MFA TO ONE FACTOR Vulnerabilities and Exploits · [authentication, research] Latest developments: Unit 42 detailed a new attack surface in passwordless login where relying parties that fail to validate the User Verified flag downgrade passkey multifactor authentication to a single factor. Passkeys promise phishing-resistant login, yet server-side implementation gaps can strip the second factor. Developers should verify the User Verified flag on every authentication response. - Unit 42 (Palo Alto): https://unit42.paloaltonetworks.com/passwordless-authentication-security-risks/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Trump Halts Iran Strike as Tehran Denies Talks Latest developments: Iran publicly denied President Trump's claim that negotiations begin Monday, and oil tumbled with WTI off 6.3% and Brent 5.3% while the Dow jumped roughly 500 points. President Trump canceled a planned large-scale U.S. strike on Iran and said talks would resume, pushing crude sharply lower after months of war-driven price spikes that Marriott International blamed for weak second-quarter sales. Tehran's denial that any talks are under way left the six-month war's off-ramp uncertain. - FT World: https://www.ft.com/content/c9bd508c-2915-4b34-a5a5-553bff9548a5?syn-25a6b1a6=1 - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-prices-fall-amid-hopes-of-possible-u-s-iran-deal-9a3f0ff4?mod=rss_markets_main PITTSBURGH ---------------------------------------------------------------- Weather: Today: Partly Sunny, high 80F. Tonight: Mostly Clear then Patchy Fog, low 59F. Tuesday: Patchy Fog then Sunny, high 85F. Business: * Bicycle Heaven's Rise on the North Side Latest developments: The Post-Gazette traced how a single discarded bicycle grew into Bicycle Heaven, the North Side museum and shop billed as one of the world's largest bicycle collections. Bicycle Heaven, the free museum and bike shop on Pittsburgh's North Side, assembled thousands of vintage bicycles, parts, and memorabilia, growing from one thrown-away bike into a regional attraction and working repair business. - Pittsburgh Post-Gazette: https://www.post-gazette.com/business/pittsburgh-company-news/2026/08/03/bicycle-heaven-museum-pittsburgh/stories/202608020066 * Ice Cream Truck Trade Thins Out Latest developments: TribLive's Valley News Dispatch reported the Alle-Kiski Valley's ice cream truck operators are dwindling as drivers describe the mounting costs of running the mobile business. Mobile ice cream vendors across the Alle-Kiski Valley are disappearing, drivers told the Valley News Dispatch, as fuel, inventory, and equipment expenses squeeze a seasonal trade that was once a fixture of Western Pennsylvania summers. - TribLive: https://triblive.com/local/valley-news-dispatch/where-did-the-ice-cream-trucks-go-drivers-talk-challenges-of-the-mobile-business/ Around town: * Commercial Street Reopens Under Parkway Bridge Latest developments: PennDOT will reopen Commercial Street beneath the bridge Monday afternoon, three weeks after the Parkway East bridge replacement closed the road. PennDOT reopens Commercial Street along the Parkway East (Interstate 376) on Monday, another milestone in the Commercial Street Bridge replacement that has reshaped traffic in Pittsburgh's East End. - WTAE: https://www.wtae.com/article/commercial-street-to-reopen-monday-three-weeks-after-parkway-bridge-closure/73328634 * West Nile Prompts Mosquito Spraying Latest developments: The Allegheny County Health Department will spray eight Pittsburgh-area communities with the pesticide Zenivex E20 after mosquito samples tested positive for West Nile virus. Positive West Nile virus mosquito samples prompted the Allegheny County Health Department to schedule truck-mounted spraying of Zenivex E20 across eight communities, a treatment the department calls one of the safest approved insecticides. - WPXI: https://www.wpxi.com/news/local/8-pittsburgh-communities-be-treated-mosquitoes-after-positive-west-nile-virus-samples/OHSR3RFU3VAZ3J5LAMIQJKRXMI/ SPORTS ---------------------------------------------------------------- Pirates (56-57) Sun Aug 2 · Pirates 2 · Reds 10 · Final Burns wins 12th straight decision, Stewart hits 24th HR, as Reds beat Pirates 10-2 https://plaintextsports.com/mlb/2026-08-02/pit-cin Up Next · Pirates @ Brewers · Mon Aug 3, 7:40 PM https://plaintextsports.com/mlb/2026-08-03/pit-mil Team USA: * Pochettino Stays as USMNT Manager Through 2030 Latest developments: U.S. Soccer announced Monday that Mauricio Pochettino signed a new contract to remain U.S. men's national team head coach through the 2030 World Cup, resolving the doubt that lingered after the 2026 round-of-16 exit. Mauricio Pochettino will keep coaching the United States men's national team through the 2030 World Cup under a fresh deal, though ESPN notes the pull of a major European club could still test the partnership before then. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49519633/mauricio-pochettino-signs-deal-remain-usmnt-manager - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49519755/will-lure-european-club-football-threaten-fresh-mauricio-pochettino-usmnt-partnership READING ---------------------------------------------------------------- * Stratechery -- Meta Earnings, Meta's Timing Problems, The Financial Tail Argues Meta's latest earnings disappointed and its promises about future AI products look mistimed against heavy spending, with the long financial tail of the AI buildout a growing worry. https://stratechery.com/2026/meta-earnings-metas-timing-problems-the-financial-tail/ * Ed Zitron -- Premium: AI Is Getting Way Too Expensive Contends the central AI story is runaway cost, arguing the economics of running large language models are becoming unsustainable regardless of claimed job losses or productivity gains. https://www.wheresyoured.at/premium-ai-is-getting-way-too-expensive/ * Cal Newport -- Did OpenAI's New Model "Go Rogue"? Examines reports tying OpenAI's new model to the Hugging Face infrastructure intrusion and asks whether the model truly acted autonomously or the episode has a more mundane explanation. https://calnewport.com/did-openais-new-model-go-rogue/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,417.09 ▼ -0.5% Dow 52,248.93 ▲ +0.5% Nasdaq 24,949.59 ▼ -1.9% WTI crude 82.92 ▼ -5.0% EUR/USD 1.1428 ▲ +0.2% GBP/USD 1.3351 ▼ -0.3% USD/JPY 162.95 = -0.0% ================================================================ Generated 2026-08-03 10:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================