================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Thursday, August 6, 2026 - 7:35 PM EDT ================================================================ Organized crime has entered a fraud nirvana, cloning executives' voices to raid the country's largest hedge funds, as Cisco, CPU researchers, and cryptocurrency-wallet users confront fresh critical flaws. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Criminals are weaponizing AI at scale, cloning executive voices to defraud hedge funds while token jacking rings resell stolen frontier-model API keys on a gray market. see: AI Voice Clones and Extortion Hit Hedge Funds; Token Jacking Feeds a Gray Market for AI Access * [TREND] Blockchain is both target and tool, as a twelve-year-old CryptoJS flaw drained $5.7 million from wallets while the ChainDrop npm worm hid command-and-control in Ethereum contracts. see: Weak RNG and macOS Stealers Fuel Crypto Theft; ChainDrop npm Worm Routes Command-and-Control Through Ethereum * [TREND] Speculative-execution attacks are back, with TONTOU and INTERRUPT INJECTION defeating Spectre v2 defenses to leak Linux password hashes from Intel and AMD chips. see: New CPU Attacks Defeat Spectre v2 Mitigations * [UPDATE (new)] Cisco's August 5 batch fixed roughly two dozen flaws, including three 9.8-severity bugs in Catalyst SD-WAN and IOS XE plus a root-level Integrated Management Controller vulnerability. see: Cisco Patches Two Dozen Flaws, Including a Root-Level IMC Bug * [TREND] AI's business reality drew scrutiny as Microsoft disclosures pinned 70% of AI revenue on OpenAI, Google's earnings validated its Anthropic hedge, and analysts debated a 'rogue' model. see: News: Microsoft Disclosures Suggest OpenAI Sales Account For Around 70% Of FY26 AI Revenue, More Than 7% of FY26 Revenue; Google Earnings, The Frontier Case, Amazon Earnings; Did OpenAI's New Model "Go Rogue"? * [UPDATE (new)] Steelers camp in Latrobe delivered its first fight between Payton Wilson and Ben Skowronek, McCarthy's 'Franco moments,' and talk of the deepest cornerback room in years. see: First Camp Fight Breaks Out in Latrobe; McCarthy's 'Franco Moments' Keep Steelers Sharp; Steelers Tout Deepest Cornerback Room in Years SECURITY ---------------------------------------------------------------- 1. AI VOICE CLONES AND EXTORTION HIT HEDGE FUNDS Ransomware and Cybercrime · [fraud, ai, extortion] Latest developments: Hackers ran a coordinated campaign that cloned the voices of key executives to trick employees at some of the country's largest hedge funds and investment banks into acting on fraudulent calls, while a separate extortion wave against hedge funds and private-equity firms traces to UNC6671, a group tied to the BlackFile threat actors. Dark Reading reports organized crime now nets billions through AI voice cloning, real-time deepfake video overlays, LLM-driven persona management, and automated translation. Financial firms should verify unusual executive requests through a second channel and brief staff on synthetic-voice fraud. - Frank on Fraud: https://frankonfraud.com/ai-voice-clone-cyberattacks-hit-major-investment-firms/ - Dark Reading: https://www.darkreading.com/threat-intelligence/ai-global-crime-syndicates-fraud-nirvana - BleepingComputer: https://www.bleepingcomputer.com/news/security/hedge-fund-cyberattacks-tied-to-blackfile-linked-unc6671-extortion-group/ 2. CISCO PATCHES TWO DOZEN FLAWS, INCLUDING A ROOT-LEVEL IMC BUG Vulnerabilities and Exploits · [patch, rce, vulnerability] Latest developments: Cisco's August 5 advisory batch fixed roughly two dozen flaws, among them three carrying a 9.8 severity in Catalyst SD-WAN and IOS XE that an internal AI-assisted review surfaced, plus CVE-2026-20200 in the Integrated Management Controller, which grants root through the web interface and already carries public proof-of-concept exploit code. The SD-WAN and IOS XE bugs affect Catalyst SD-WAN regardless of configuration and IOS XE in autonomous or controller mode, and the flaws reach Firepower Management Center as well. Administrators should apply the hardening releases now and prioritize the IMC patch given the live exploit path. - The Hacker News: https://thehackernews.com/2026/08/cisco-patches-12-sd-wan-and-ios-xe.html - SecurityWeek: https://www.securityweek.com/cisco-patches-critical-sd-wan-ios-xe-fmc-vulnerabilities/ - Help Net Security: https://www.helpnetsecurity.com/2026/08/06/cisco-imc-cve-2026-20200-public-poc-exploit/ 3. WEAK RNG AND MACOS STEALERS FUEL CRYPTO THEFT Ransomware and Cybercrime · [cryptocurrency, malware, theft] Latest developments: Coinspect traced the Ill Bloom wallet drains to CryptoJS.lib.WordArray.random(), a weak random-number function introduced in the JavaScript library twelve years ago that seeded predictable recovery phrases across five wallet apps and enabled at least $5.7 million in theft over two sweeps since late May, while a separate Go-based infostealer delivered through ClickFix lures empties macOS cryptocurrency holdings, Apple Keychain data, and browser passwords. Weak randomness and social-engineering lures both feed cryptocurrency theft. Users of affected wallets should regenerate seeds on sound entropy and treat copy-paste terminal 'fix' prompts as hostile. - The Hacker News: https://thehackernews.com/2026/08/cryptojs-weak-rng-behind-57-million-in.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/clickfix-attack-pushes-macos-infostealer-for-crypto-theft-attacks/ 4. NEW CPU ATTACKS DEFEAT SPECTRE V2 MITIGATIONS Vulnerabilities and Exploits · [vulnerability, cpu, research] Latest developments: Two independent teams disclosed techniques that defeat current Spectre v2 defenses: researchers unveiled TONTOU, which leaks Linux password hashes, and MIT CSAIL's Daniel Trujillo and Mengjia Yan detailed INTERRUPT INJECTION, which times a hardware interrupt to re-poison a processor's branch predictor after the mitigation runs, working on an AMD Zen 2 machine on Linux 6.14 with every default Spectre v2 mitigation enabled. Both attacks let an unprivileged local program pull kernel secrets on Intel and AMD processors despite years of speculative-execution patches. Operators of multi-tenant Linux systems carry the most exposure and should track incoming microcode and kernel updates. - BleepingComputer: https://www.bleepingcomputer.com/news/security/new-tontou-cpu-attack-bypasses-spectre-v2-fixes-leaks-linux-password-hashes/ - The Hacker News: https://thehackernews.com/2026/08/new-interrupt-injection-attack-can.html 5. TOKEN JACKING FEEDS A GRAY MARKET FOR AI ACCESS AI Security · [ai, credential-theft, gray-market] Latest developments: Unit 42 detailed token jacking, where criminals steal developer API keys to feed gray-market transfer stations that resell frontier-model access, and Okta separately uncovered more than half a dozen underground services hawking discounted or unlimited tokens, a trade it believes serves Chinese users locked out by provider and regulatory restrictions. Stolen API keys let outsiders run up victims' AI bills and route their own prompts through compromised accounts, exposing every prompt to the reseller. Developers should scope keys tightly, rotate them, and monitor for anomalous token spend. - Unit 42 (Palo Alto): https://unit42.paloaltonetworks.com/ai-token-jacking/ - Help Net Security: https://www.helpnetsecurity.com/2026/08/06/ai-model-access-fraud-gray-market/ 6. CHAINDROP NPM WORM ROUTES COMMAND-AND-CONTROL THROUGH ETHEREUM Software Supply Chain · [supply-chain, npm, worm] Latest developments: Palo Alto Networks' Unit 42 published a technical teardown of ChainDrop showing the self-propagating npm worm harvests GitHub Actions runner secrets and routes its command-and-control through Ethereum smart contracts, a blockchain channel that resists takedown. ChainDrop has spread across hundreds of npm packages by stealing publish tokens and continuous-integration secrets. Maintainers should rotate npm and GitHub Actions credentials and pin dependencies. - Unit 42 (Palo Alto): https://unit42.paloaltonetworks.com/chaindrop-npm-worm-analysis/ BUSINESS AND POLITICS ---------------------------------------------------------------- * Markets Slip on Strait of Hormuz Doubts Latest developments: U.S. stocks fell and oil rose August 6 as traders lost confidence in a quick reopening of the Strait of Hormuz, reversing the record-high optimism of earlier in the week when Iran and Oman agreed a shipping route. The Dow led U.S. stocks lower and crude climbed on August 6 as markets doubted the United States and Iran will finalize a deal to reopen the Strait of Hormuz, the chokepoint for roughly a fifth of the world's seaborne oil, keeping the sixth-month Iran war and energy supply at the center of a jittery session. - WSJ Markets: https://www.wsj.com/finance/stocks/u-s-stocks-down-on-hormuz-deal-doubts-37f55a6a?mod=rss_markets_main - WSJ Markets: https://www.wsj.com/finance/commodities-futures/oil-declines-amid-growing-optimism-over-reopening-of-strait-of-hormuz-274b0ea9?mod=rss_markets_main PITTSBURGH ---------------------------------------------------------------- Weather: Tonight: Chance Showers And Thunderstorms then Patchy Fog, low 70F. Friday: Slight Chance Showers And Thunderstorms then Showers And Thunderstorms Likely, high 85F. Friday Night: Showers And Thunderstorms, low 69F. Business: * Terminated NIH Grants Cost Pitt $40 Million Latest developments: The Post-Gazette reported August 6 that canceled National Institutes of Health grants have cost the University of Pittsburgh $40 million in research funding. The University of Pittsburgh, one of the region's largest employers and research engines, has lost $40 million after the National Institutes of Health terminated grants, the Post-Gazette reported August 6. - Pittsburgh Post-Gazette: https://www.post-gazette.com/news/education/2026/08/06/nih-grants-university-pittsburgh/stories/202608060065 * Original Pittsburgh Winery to Close Latest developments: KDKA reported August 6 that the Original Pittsburgh Winery will close this month. The Original Pittsburgh Winery, a longtime Strip District tasting room and music venue, will shut its doors this month, KDKA reported August 6. - KDKA: https://www.cbsnews.com/pittsburgh/video/the-original-pittsburgh-winery-to-close-this-month/ Around town: * Peoples Gas to Close Lawrenceville, Strip Streets Latest developments: TribLive reported August 6 that Peoples Gas will intermittently close streets in Lawrenceville and the Strip District through spring for pipeline work. Peoples Gas will lay two new pipelines—one plastic, one metal—to replace a large-diameter cast iron main dating to 1887, intermittently closing several streets in Lawrenceville and the Strip District until spring, TribLive reported August 6. - TribLive: https://triblive.com/local/peoples-gas-pipeline-construction-to-close-streets-in-lawrenceville-strip-district/ * Oakmont Approves Deer Harvesting Program Latest developments: KDKA reported August 6 that Oakmont borough council voted Tuesday night to move forward with a deer harvesting program. Oakmont borough council voted to start a deer-harvesting program to thin a herd residents say overruns private and public property, adopting a management tool Pittsburgh has used, KDKA reported August 6. - KDKA: https://www.cbsnews.com/pittsburgh/news/oakmont-deer-harvesting-program/ * Pennsylvania Measles Cases Hit Record Latest developments: WTAE reported August 6 that Pennsylvania is recording a record number of measles cases this year, most of them in Lancaster County. Pennsylvania is seeing a record number of measles cases in 2026, the majority in Lancaster County, and a Pittsburgh-based doctor urged parents to watch for symptoms and prioritize vaccination, WTAE reported August 6. - WTAE: https://www.wtae.com/article/pennsylvania-measles-cases-rise-doctor-warns-parents/73369574 Events: * Little Italy Days Returns to Bloomfield Latest developments: KDKA reported August 6 that the 26th annual Little Italy Days begins August 13 in Pittsburgh's Bloomfield neighborhood. The 26th annual Little Italy Days, a street festival celebrating Italian heritage with food, music, and vendors, opens Thursday, August 13, 2026, in Pittsburgh's Bloomfield neighborhood. - KDKA: https://www.cbsnews.com/pittsburgh/video/pittsburghs-bloomfield-neighborhood-gearing-up-for-26th-annual-little-italy-days/ SPORTS ---------------------------------------------------------------- Around the Teams: * Steelers Tout Deepest Cornerback Room in Years Latest developments: The Post-Gazette wrote August 6 that the Steelers' cornerback group could be their best and deepest in a long time. The Post-Gazette called the Steelers' cornerback room—Asante Samuel Jr., Joey Porter Jr., Brandin Echols, and Jamel Dean—possibly the team's best and deepest in years in an August 6 training-camp analysis. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/06/cornerback-asante-samuel-porter-echols-jamel-dean-nfl/stories/202608060043 * First Camp Fight Breaks Out in Latrobe Latest developments: The Post-Gazette's August 6 camp observations noted the season's first training-camp fight, between linebacker Payton Wilson and receiver Ben Skowronek. Linebacker Payton Wilson and receiver Ben Skowronek scuffled in the season's first training-camp fight at Saint Vincent College in Latrobe, the Post-Gazette reported August 6, on what it called the most physical day of camp so far under head coach Mike McCarthy. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/06/observations-fight-payton-wilson-skowronek-rodgers/stories/202608060044 * McCarthy's 'Franco Moments' Keep Steelers Sharp Latest developments: The Post-Gazette reported August 6 on head coach Mike McCarthy's 'Franco moments,' the surprises he uses to keep players alert at camp. The Post-Gazette detailed August 6 how Steelers head coach Mike McCarthy invokes 'Franco moments'—a nod to Franco Harris and the Immaculate Reception—to keep his team on its toes through training camp in Latrobe. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/08/06/franco-moments-mccarthy-trainingcamp-immaculate-reception/stories/202608070021 Team USA: * Clark, Bueckers Headline USA World Cup Roster Latest developments: ESPN reported August 6 that Caitlin Clark, Paige Bueckers, Angel Reese, and Aliyah Boston will make their first major USA appearances at next month's FIBA World Cup in Germany. USA Basketball named Caitlin Clark, Paige Bueckers, Angel Reese, and Aliyah Boston to the women's roster for the FIBA World Cup in Germany next month, marking the group's first major international competition with the national team, ESPN reported August 6. - ESPN Olympics: https://www.espn.com/olympics/story/_/id/49544848/clark-bueckers-team-usa-women-roster-fiba-world-cup * Manchester United Eye USMNT's Antonee Robinson Latest developments: ESPN's Transfer Talk reported August 6 that Manchester United are looking at a move for United States left back Antonee Robinson. Manchester United are weighing a move for United States men's national team left back Antonee Robinson, the Fulham defender, ESPN's Transfer Talk reported August 6. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49543040/transfer-rumors-news-liverpool-offered-real-madrid-cb-amid-defensive-woes READING ---------------------------------------------------------------- * Ed Zitron -- News: Microsoft Disclosures Suggest OpenAI Sales Account For Around 70% Of FY26 AI Revenue, More Than 7% of FY26 Revenue Zitron argues Microsoft's own disclosures show OpenAI accounts for roughly 70% of Microsoft's fiscal-2026 AI revenue and more than 7% of its total revenue, underscoring how dependent the AI boom's headline numbers are on a single customer. https://www.wheresyoured.at/news-microsoft-disclosures-suggest-openai-sales-account-for-around-70-of-fy26-ai-revenue-more-than-7-of-fy26-revenue/ * Stratechery -- Google Earnings, The Frontier Case, Amazon Earnings Ben Thompson reads Google's earnings as confirming its Anthropic hedge and credits Amazon's Andy Jassy with explaining why both companies' heavy capital spending on AI is justifiable. https://stratechery.com/2026/google-earnings-the-frontier-case-amazon-earnings/ * Cal Newport -- Did OpenAI's New Model "Go Rogue"? Newport examines whether OpenAI's new model truly 'went rogue' in the Hugging Face infrastructure intrusion, unpacking what the episode actually reveals about AI autonomy and security. https://calnewport.com/did-openais-new-model-go-rogue/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,597.58 ▲ +2.7% Dow 53,261.30 ▲ +2.3% Nasdaq 25,871.67 ▲ +4.0% WTI crude 79.92 ▼ -6.6% EUR/USD 1.1533 ▲ +1.2% GBP/USD 1.3460 ▲ +1.0% USD/JPY 158.12 ▼ -3.4% ================================================================ Generated 2026-08-06 19:35 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================