================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Tuesday, August 4, 2026 - 7:06 AM EDT ================================================================ Cisco Talos exposes how criminals now run Claude Code, Codex, and Gemini in their operations even as AI agents and chat logs spill developer secrets and wallet keys of their own. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Cisco Talos harvested prompt logs from criminals running Claude Code, Codex, and Cursor while a poisoned Gemini agent hand-off leaked secrets, putting AI inside offensive operations. see: Adversaries Weaponize Commercial AI; AI Agents and Chats Spill Secrets * [TREND] Attackers keep sidestepping login itself, with Unit 42's Pass-ta-key techniques hijacking Chrome passkeys and a decades-old BMC flaw leaking authentication hashes from 24,000 exposed servers. see: Pass-ta-key Attacks Hijack Google Passkeys; Decades-Old BMC Flaw Exposes 24,000 Servers * [UPDATE (new)] INC Ransomware has become the dominant crew exploiting SonicWall's SMA 1000 VPN flaws, accelerating attacks since early August and piling fresh victims onto its leak site. see: INC Ransomware Exploits SonicWall SMA 1000 * [UPDATE (new)] New breaches exposed data on 150,000 people at California's Madera Community Hospital and, via ExfilSquad, contact details for more than 100,000 U.K. police and criminal-justice staff. see: Fresh Breaches Hit Hospital, U.K. Police, and River Bank * [TREND] Commentators wrestle with AI's economics as Zitron calls model costs unsustainable, Ben Thompson credits Microsoft's efficiency payoff, and Newport doubts OpenAI's new model truly went rogue. see: Premium: AI Is Getting Way Too Expensive; Microsoft Earnings, Microsoft vs. Meta, The Efficiency Payoff; Did OpenAI's New Model "Go Rogue"? * [TREND] Local land-use fights heat up as Springdale battles ICE and a data center, Dormont resists a T-station high-rise, and PennDOT tackles Parkway East flooding. see: ICE and a Data Center Split Springdale; Dormont Fights High-Rise at T Station; PennDOT Targets Parkway East "Bathtub" Flooding SECURITY ---------------------------------------------------------------- 1. FRESH BREACHES HIT HOSPITAL, U.K. POLICE, AND RIVER BANK Data Breaches · [breach, ransomware] Latest developments: An extortion group stole personal, financial, and medical data on 150,000 people from Madera Community Hospital in California, ExfilSquad leaked contact details of more than 100,000 officers and criminal-justice staff pulled from the U.K.'s Police National Legal Database, and River Bank said the crew behind its June ransomware attack deleted the data it took. Three unrelated intrusions surfaced new victims across healthcare, law enforcement, and finance. Affected people should watch for identity theft and targeted phishing. - SecurityWeek: https://www.securityweek.com/150000-impacted-by-madera-community-hospital-data-breach/ - BleepingComputer: https://www.bleepingcomputer.com/news/security/exfilsquad-hackers-leak-info-of-over-100-000-uk-police-officers-staff/ - SecurityWeek: https://www.securityweek.com/river-bank-says-hackers-deleted-data-stolen-in-ransomware-attack/ 2. ADVERSARIES WEAPONIZE COMMERCIAL AI AI Security · [ai, threat-intel] Latest developments: Cisco Talos published prompt logs it collected from compromised threat-actor endpoints running Claude Code, OpenAI Codex, Cursor, and Gemini, documenting how attackers lean on cloud AI to write and debug their malware. Talos gathered the logs off attacker machines, showing criminals now treat commercial coding assistants as standard tooling for building malware. Defenders fold the same platforms into their security operations centers to write detections and triage alerts. - Cisco Talos: https://blog.talosintelligence.com/keep-going-bro-youve-got-this-a-data-driven-look-at-how-adversaries-are-weaponizing-ai/ - The Hacker News: https://thehackernews.com/2026/08/fomo-in-soc-where-ai-platforms-like.html 3. AI AGENTS AND CHATS SPILL SECRETS AI Security · [ai, data-exposure] Latest developments: SecurityWeek detailed a Gemini agent-to-agent attack in which a crafted prompt to a low-privilege Google ADK agent passes a poisoned hand-off comment to a privileged agent, exposing secrets and tampering with pull requests, while Schneier flagged Claude conversations—some holding cryptocurrency wallet keys and home addresses—surfacing in Google search. AI systems keep leaking the data users feed them. Google's ADK lets a low-privilege agent escalate through a privileged one, and a data-sharing toggle pushes private Claude chats into public search. Anthropic frames the chat exposure as a user-setting choice. - SecurityWeek: https://www.securityweek.com/gemini-agent-to-agent-attack-exposed-secrets-enabled-pull-request-tampering/ - Schneier on Security: https://www.schneier.com/blog/archives/2026/08/some-claude-chats-are-searchable-on-google.html 4. DECADES-OLD BMC FLAW EXPOSES 24,000 SERVERS Vulnerabilities and Exploits · [vulnerability, data-center] Latest developments: SecurityWeek reported a decades-old baseboard management controller vulnerability that leaves more than 24,000 internet-accessible server-management interfaces disclosing authentication hashes before login, putting thousands of data centers at risk. The flaw leaks authentication hashes from server-management interfaces before any login, handing attackers a foothold into the underlying hardware. Operators should pull these interfaces off the public internet and lock down access. - SecurityWeek: https://www.securityweek.com/decades-old-bmc-vulnerability-exposes-thousands-of-data-centers-to-attacks/ 5. PASS-TA-KEY ATTACKS HIJACK GOOGLE PASSKEYS Vulnerabilities and Exploits · [passkey, malware] Latest developments: Palo Alto Networks' Unit 42 disclosed three techniques—Pass-ta-key, Silver Pass-ta-key, and Golden Pass-ta-key—that let malware already running as an ordinary user on Windows abuse Chrome's Google Password Manager cloud authenticator to sign into passkey-protected accounts, bypass user verification, and pull passkey private keys. Malware on a compromised Windows machine hijacks synced Google passkeys with no fingerprint, PIN, or on-screen prompt. The Golden Pass-ta-key variant steals the account master key and exports the private keys; anyone relying on Chrome's synced Google Password Manager passkeys faces the risk. - BleepingComputer: https://www.bleepingcomputer.com/news/security/new-pass-ta-key-attacks-let-malware-hijack-google-synced-passkeys/ - The Hacker News: https://thehackernews.com/2026/08/google-password-manager-attacks-could.html 6. INC RANSOMWARE EXPLOITS SONICWALL SMA 1000 Ransomware and Cybercrime · [ransomware, exploit, vpn] Latest developments: Resecurity named INC Ransomware the dominant actor exploiting the recently disclosed SonicWall Secure Mobile Access 1000-series VPN flaws, reporting that the crew accelerated its activity since early August 2026 and listed multiple fresh victims on its data-leak site. INC Ransomware breaks into organizations through flaws in SonicWall's SMA 1000 VPN appliances, then steals data and extorts. Administrators running the SMA 1000 series should patch and hunt for signs of compromise. - The Hacker News: https://thehackernews.com/2026/08/inc-ransomware-emerges-as-dominant.html BUSINESS AND POLITICS ---------------------------------------------------------------- * U.S. Intervenes to Prop Up the Yen Latest developments: Trump and Japan's finance minister both confirmed the two governments intervened jointly in currency markets, and the dollar fell sharply against the yen, in what the Financial Times calls a new era of American "currency activism." The U.S. Treasury under Scott Bessent, working with Tokyo, sold dollars to buy yen to halt the Japanese currency's slide, a break from decades of American reticence on exchange rates; the coordinated action signals Washington will now move against trades that run counter to its interests, unsettling any bank running large dollar-yen positions. - FT Markets: https://www.ft.com/content/1be83506-b897-4c26-97cc-445d7354ee6f?syn-25a6b1a6=1 - FT Markets: https://www.ft.com/content/04b34467-dab0-4646-97dc-8c3d3e44e5e2?syn-25a6b1a6=1 PITTSBURGH ---------------------------------------------------------------- Weather: Today: Patchy Fog then Sunny, high 87F. Tonight: Partly Cloudy, low 68F. Wednesday: Partly Sunny then Scattered Showers And Thunderstorms, high 88F. Business: * Pennsylvania Opens $10 Million Fund for Frozen Fruit Crops Latest developments: State officials rolled out a new $10 million grant program to offset the fruit-crop losses an April deep freeze inflicted on Western Pennsylvania growers. A sudden April freeze devastated Western Pennsylvania's fruit crops, and Pennsylvania officials have launched a $10 million grant program to help farmers offset the damage. - TribLive: https://triblive.com/local/regional/pa-fruit-farmers-face-crop-losses-after-april-freeze-turn-to-new-10m-grant-program/ * PixCams Trains AI on African Wildlife Latest developments: The Post-Gazette profiled how the Pittsburgh-area company PixCams built round-the-clock camera and AI systems to track African wildlife and help spot poachers. PixCams, a Pittsburgh-area company, developed continuous camera and artificial-intelligence technology now used to monitor African wildlife, including black rhinos, and to help catch poachers. - Pittsburgh Post-Gazette: https://www.post-gazette.com/life/goodness/2026/08/04/pixcams-pix-african-cams-ai-pittsburgh-poachers-black-rhino/stories/202607290052 Around town: * PennDOT Targets Parkway East "Bathtub" Flooding Latest developments: PennDOT announced upgrades to the downtown Parkway East "bathtub" to curb the flooding that submerges the highway when the Monongahela River tops 25 feet. The low "bathtub" stretch of the Parkway East in downtown Pittsburgh floods whenever the Monongahela River rises above 25 feet, an increasingly frequent event, and PennDOT now plans drainage upgrades to keep the highway open. - KDKA: https://www.cbsnews.com/pittsburgh/news/penndot-parkway-east-bathtub-flooding-project/ * ICE and a Data Center Split Springdale Latest developments: PublicSource published two investigations detailing how a year of ICE arrests and opposition to a proposed data center has turned Springdale into a civic battleground, and scrutinizing the borough's police chief. In Springdale, an Allegheny Valley borough of 3,000 east of Pittsburgh, a year of immigration arrests and opposition to a proposed data center has fueled a wave of civic organizing, and PublicSource reported the borough's police chief has drawn civil and criminal complaints across his career amid clashes with critics. - PublicSource: https://www.publicsource.org/how-ice-and-a-data-center-turned-a-small-pittsburgh-suburb-into-a-civic-battleground/ - PublicSource: https://www.publicsource.org/springdale-ice-police-chief/ * Dormont Fights High-Rise at T Station Latest developments: Dormont residents pushed back against a proposed high-rise apartment building that would replace the park-and-ride lot beside the T station. A developer has proposed a high-rise apartment building on the park-and-ride lot next to Dormont's T station, and residents are objecting; borough leaders emphasize the project remains in its early stages. - WTAE: https://www.wtae.com/article/dormont-residents-push-back-against-proposed-high-rise-apartment-project/73339261 Events: * Barrel and Flow Beer Festival Returns Latest developments: Barrel and Flow, the Black-owned-brewing festival that USA Today readers rank among the country's best, returns Thursday, August 6 through Sunday, August 9 at multiple Pittsburgh locations. Barrel and Flow, an annual festival celebrating Black excellence in brewing, runs Thursday, August 6 through Sunday, August 9 at multiple Pittsburgh locations; details and tickets are at barrelandflow.com. - Pittsburgh City Paper: https://www.pghcitypaper.com/food-drink/barrel-and-flow-restaurant-week-and-more-pittsburgh-food-news/ SPORTS ---------------------------------------------------------------- Pirates (57-57) Mon Aug 3 · Pirates 4 · Brewers 3 · Final Horwitz drives in 3 runs, Pirates defeat Brewers for the 6th time in 7 games this season https://plaintextsports.com/mlb/2026-08-03/pit-mil Up Next · Pirates @ Brewers · Tue Aug 4, 7:40 PM https://plaintextsports.com/mlb/2026-08-04/pit-mil Around the Teams: * Cherington Bets on the Bullpen, Holds the Rest Latest developments: General manager Ben Cherington explained his deadline haul, saying "we believe in the team," and left the Pirates' offense and starting rotation untouched even after Mitch Keller's season-ending injury. The Pittsburgh Pirates rebuilt a battered bullpen at the August 3 deadline by adding Luke Weaver, Kirby Yates, and Lake Bachar, and the Post-Gazette's Noah Hiles argues the upgrades now leave the offense and rotation to carry a team clinging to contention. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/08/03/pirates-bullpen-weaver-yates-doval-bachar-trade-deadline-gm/stories/202608030028 - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/08/03/mlb-bullpen-trade-deadline-rotation-lineup/stories/202608030051 * Can Kaleb Johnson Crack the Backfield in Year 2? Latest developments: The Post-Gazette assessed whether running back Kaleb Johnson, who barely played as a rookie, can earn a role in the Steelers' backfield this season. Steelers running back Kaleb Johnson never found his footing as a rookie, and the Post-Gazette weighs his chances of working into the offense under Aaron Rodgers and Mike McCarthy behind Jaylen Warren. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/03/kaleb-johnson-trainingcamp-offense-rodgers-mccarthy-warren-dowdle/stories/202608030024 * Hiles: Roman Wilson Has the Most to Gain Latest developments: Post-Gazette columnist Noah Hiles named receiver Roman Wilson the Steeler with the most to gain in training camp as he competes with Germie Bernard for snaps. Steelers receiver Roman Wilson is battling Germie Bernard for playing time behind Michael Pittman Jr. and DK Metcalf, and the Post-Gazette's Noah Hiles calls him the player with the most to gain this camp. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/03/nfl-trainingcamp-wilson-germie-bernard-pittman-metcalf/stories/202607310021 READING ---------------------------------------------------------------- * Stratechery -- Microsoft Earnings, Microsoft vs. Meta, The Efficiency Payoff Ben Thompson argues Microsoft's earnings impressed through strategic clarity, lower costs, and tangible AI applications, and contends the reason behind that success is more unsettling than it first appears. https://stratechery.com/2026/microsoft-earnings-microsoft-vs-meta-the-efficiency-payoff/ * Ed Zitron -- Premium: AI Is Getting Way Too Expensive Zitron argues the ballooning, unsustainable cost of running large language models now overshadows the theoretical debates over lost jobs and productivity gains that dominate AI discussion. https://www.wheresyoured.at/premium-ai-is-getting-way-too-expensive/ * Cal Newport -- Did OpenAI's New Model "Go Rogue"? Newport dissects the reported intrusion into Hugging Face's production infrastructure and questions the alarming narrative that OpenAI's new model acted on its own. https://calnewport.com/did-openais-new-model-go-rogue/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,417.09 ▼ -0.5% Dow 52,248.93 ▲ +0.5% Nasdaq 24,949.59 ▼ -1.9% WTI crude 82.92 ▼ -5.0% EUR/USD 1.1458 ▲ +0.5% GBP/USD 1.3379 ▲ +0.1% USD/JPY 161.74 ▼ -0.9% ================================================================ Generated 2026-08-04 07:06 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================