daily plain-text briefing: security, markets, business, and pittsburgh
Cisco Talos exposes how criminals now run Claude Code, Codex, and Gemini in their operations even as AI agents and chat logs spill developer secrets and wallet keys of their own.
Latest developments: An extortion group stole personal, financial, and medical data on 150,000 people from Madera Community Hospital in California, ExfilSquad leaked contact details of more than 100,000 officers and criminal-justice staff pulled from the U.K.'s Police National Legal Database, and River Bank said the crew behind its June ransomware attack deleted the data it took.
Three unrelated intrusions surfaced new victims across healthcare, law enforcement, and finance. Affected people should watch for identity theft and targeted phishing.
Sources: SecurityWeek · BleepingComputer · SecurityWeek · ↑ top
Latest developments: Cisco Talos published prompt logs it collected from compromised threat-actor endpoints running Claude Code, OpenAI Codex, Cursor, and Gemini, documenting how attackers lean on cloud AI to write and debug their malware.
Talos gathered the logs off attacker machines, showing criminals now treat commercial coding assistants as standard tooling for building malware. Defenders fold the same platforms into their security operations centers to write detections and triage alerts.
Sources: Cisco Talos · The Hacker News · ↑ top
Latest developments: SecurityWeek detailed a Gemini agent-to-agent attack in which a crafted prompt to a low-privilege Google ADK agent passes a poisoned hand-off comment to a privileged agent, exposing secrets and tampering with pull requests, while Schneier flagged Claude conversations—some holding cryptocurrency wallet keys and home addresses—surfacing in Google search.
AI systems keep leaking the data users feed them. Google's ADK lets a low-privilege agent escalate through a privileged one, and a data-sharing toggle pushes private Claude chats into public search. Anthropic frames the chat exposure as a user-setting choice.
Sources: SecurityWeek · Schneier on Security · ↑ top
Latest developments: SecurityWeek reported a decades-old baseboard management controller vulnerability that leaves more than 24,000 internet-accessible server-management interfaces disclosing authentication hashes before login, putting thousands of data centers at risk.
The flaw leaks authentication hashes from server-management interfaces before any login, handing attackers a foothold into the underlying hardware. Operators should pull these interfaces off the public internet and lock down access.
Sources: SecurityWeek · ↑ top
Latest developments: Palo Alto Networks' Unit 42 disclosed three techniques—Pass-ta-key, Silver Pass-ta-key, and Golden Pass-ta-key—that let malware already running as an ordinary user on Windows abuse Chrome's Google Password Manager cloud authenticator to sign into passkey-protected accounts, bypass user verification, and pull passkey private keys.
Malware on a compromised Windows machine hijacks synced Google passkeys with no fingerprint, PIN, or on-screen prompt. The Golden Pass-ta-key variant steals the account master key and exports the private keys; anyone relying on Chrome's synced Google Password Manager passkeys faces the risk.
Sources: BleepingComputer · The Hacker News · ↑ top
Latest developments: Resecurity named INC Ransomware the dominant actor exploiting the recently disclosed SonicWall Secure Mobile Access 1000-series VPN flaws, reporting that the crew accelerated its activity since early August 2026 and listed multiple fresh victims on its data-leak site.
INC Ransomware breaks into organizations through flaws in SonicWall's SMA 1000 VPN appliances, then steals data and extorts. Administrators running the SMA 1000 series should patch and hunt for signs of compromise.
Sources: The Hacker News · ↑ top
Latest developments: Trump and Japan's finance minister both confirmed the two governments intervened jointly in currency markets, and the dollar fell sharply against the yen, in what the Financial Times calls a new era of American "currency activism."
The U.S. Treasury under Scott Bessent, working with Tokyo, sold dollars to buy yen to halt the Japanese currency's slide, a break from decades of American reticence on exchange rates; the coordinated action signals Washington will now move against trades that run counter to its interests, unsettling any bank running large dollar-yen positions.
Sources: FT Markets · FT Markets · ↑ top
Today: Patchy Fog then Sunny, high 87F.
Tonight: Partly Cloudy, low 68F.
Wednesday: Partly Sunny then Scattered Showers And Thunderstorms, high 88F.
Latest developments: State officials rolled out a new $10 million grant program to offset the fruit-crop losses an April deep freeze inflicted on Western Pennsylvania growers.
A sudden April freeze devastated Western Pennsylvania's fruit crops, and Pennsylvania officials have launched a $10 million grant program to help farmers offset the damage.
Latest developments: The Post-Gazette profiled how the Pittsburgh-area company PixCams built round-the-clock camera and AI systems to track African wildlife and help spot poachers.
PixCams, a Pittsburgh-area company, developed continuous camera and artificial-intelligence technology now used to monitor African wildlife, including black rhinos, and to help catch poachers.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: PennDOT announced upgrades to the downtown Parkway East "bathtub" to curb the flooding that submerges the highway when the Monongahela River tops 25 feet.
The low "bathtub" stretch of the Parkway East in downtown Pittsburgh floods whenever the Monongahela River rises above 25 feet, an increasingly frequent event, and PennDOT now plans drainage upgrades to keep the highway open.
Latest developments: PublicSource published two investigations detailing how a year of ICE arrests and opposition to a proposed data center has turned Springdale into a civic battleground, and scrutinizing the borough's police chief.
In Springdale, an Allegheny Valley borough of 3,000 east of Pittsburgh, a year of immigration arrests and opposition to a proposed data center has fueled a wave of civic organizing, and PublicSource reported the borough's police chief has drawn civil and criminal complaints across his career amid clashes with critics.
Sources: PublicSource · PublicSource · ↑ top
Latest developments: Dormont residents pushed back against a proposed high-rise apartment building that would replace the park-and-ride lot beside the T station.
A developer has proposed a high-rise apartment building on the park-and-ride lot next to Dormont's T station, and residents are objecting; borough leaders emphasize the project remains in its early stages.
Latest developments: Barrel and Flow, the Black-owned-brewing festival that USA Today readers rank among the country's best, returns Thursday, August 6 through Sunday, August 9 at multiple Pittsburgh locations.
Barrel and Flow, an annual festival celebrating Black excellence in brewing, runs Thursday, August 6 through Sunday, August 9 at multiple Pittsburgh locations; details and tickets are at barrelandflow.com.
Sources: Pittsburgh City Paper · ↑ top
Pirates (57-57)
Mon Aug 3 · Pirates 4 · Brewers 3 · Final
Horwitz drives in 3 runs, Pirates defeat Brewers for the 6th time in 7 games this season
Up Next · Pirates @ Brewers · Tue Aug 4, 7:40 PM
Latest developments: General manager Ben Cherington explained his deadline haul, saying "we believe in the team," and left the Pirates' offense and starting rotation untouched even after Mitch Keller's season-ending injury.
The Pittsburgh Pirates rebuilt a battered bullpen at the August 3 deadline by adding Luke Weaver, Kirby Yates, and Lake Bachar, and the Post-Gazette's Noah Hiles argues the upgrades now leave the offense and rotation to carry a team clinging to contention.
Sources: Post-Gazette Pirates · Post-Gazette Pirates · ↑ top
Latest developments: The Post-Gazette assessed whether running back Kaleb Johnson, who barely played as a rookie, can earn a role in the Steelers' backfield this season.
Steelers running back Kaleb Johnson never found his footing as a rookie, and the Post-Gazette weighs his chances of working into the offense under Aaron Rodgers and Mike McCarthy behind Jaylen Warren.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Post-Gazette columnist Noah Hiles named receiver Roman Wilson the Steeler with the most to gain in training camp as he competes with Germie Bernard for snaps.
Steelers receiver Roman Wilson is battling Germie Bernard for playing time behind Michael Pittman Jr. and DK Metcalf, and the Post-Gazette's Noah Hiles calls him the player with the most to gain this camp.
Sources: Post-Gazette Steelers · ↑ top
S&P 500 7,417.09 ▼ -0.5% Dow 52,248.93 ▲ +0.5% Nasdaq 24,949.59 ▼ -1.9% WTI crude 82.92 ▼ -5.0% EUR/USD 1.1458 ▲ +0.5% GBP/USD 1.3379 ▲ +0.1% USD/JPY 161.74 ▼ -0.9%