daily plain-text briefing: security, markets, business, and pittsburgh
Social engineering breached Levi Strauss, the vishing crew UNC6671 rebranded after banking millions in extortion, and a pre-authentication WordPress flaw plus an 18-year-old Linux bug opened fresh paths to code execution and container escape.
Latest developments: Levi Strauss & Co. said intruders reached three company-issued computers through a social engineering attack and exfiltrated corporate information, North Carolina Ports called its intrusion contained as the Coast Guard and state officials investigated, and French rugby club Stade Français restored its IT environment from clean backups.
The three incidents span a consumer brand, a maritime gateway, and a sports club; North Carolina Ports switched to manual processing at the Port of Wilmington, Port of Morehead City, and Charlotte Inland Port, while Stade Français kept its ticketing platform and online store running.
Sources: The Record · BleepingComputer · The Record · The Record · ↑ top
Latest developments: WordPress patched CVE-2026-64638, a pre-authentication reflected cross-site scripting bug in its login screen scoring 8.9 that affects every version and chains into PHP code execution, and Tencent researchers detailed an 18-year-old use-after-free in Linux's SCTP networking code that grants root and escapes containers, closed in stable kernels released August 3.
Anyone running WordPress should apply the login-screen fix immediately; anyone on a Linux kernel older than 7.1.6, 6.18.42, 6.12.101, or 6.6.148 with SCTP reachable should update to block local root and container breakout.
Sources: The Hacker News · The Hacker News · ↑ top
Latest developments: SecurityWeek reported the voice-phishing extortion crew that began as BlackFile has made millions and now operates under the Redact, Pink, Helix, and Falcon brands, while BleepingComputer tied a recent wave of attacks on hedge funds and private-equity firms to the same UNC6671.
UNC6671 uses phone-based social engineering to breach and extort financial organizations; researchers link the group to the BlackFile threat actors targeting hedge funds, private equity, and investment banks.
Sources: SecurityWeek · BleepingComputer · ↑ top
Latest developments: Bruce Schneier flagged that Immigration and Customs Enforcement is buying Americans' credit card application data through data brokers, while a leaked Flock Safety presentation showed a plan to enlist roughly 350,000 Uber, Lyft, and delivery drivers to collect license-plate data for its surveillance network.
Both efforts expand tracking of ordinary people through purchased records and roaming automatic license-plate readers, sidestepping the limits that would apply to direct government collection.
Sources: Schneier on Security · 404 Media · ↑ top
Latest developments: Connor Riley Moucka, 26, of Kitchener, Ontario, pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations using Snowflake, admitting he stole the call and text records of more than 100 million AT&T customers.
Moucka drove the 2024 Snowflake data thefts and was extradited to the United States in July 2025; the plea sets up sentencing for one of the year's most consequential cybercrime cases.
Sources: Krebs on Security · SecurityWeek · ↑ top
Latest developments: Security researchers tracked and eavesdropped on a Wired reporter by exploiting vulnerabilities in a pink plastic children's smartwatch, exposing what Wired called a deeply insecure supply chain of GPS-enabled gadgets.
Cheap GPS wearables marketed for kids carry flaws that let attackers locate and listen to wearers, and the shared components spread the same risk across many rebranded devices.
Sources: Wired Security · ↑ top
Latest developments: The Bureau of Labor Statistics's July jobs report, released August 7, showed U.S. employers cutting 23,000 payrolls, an unexpected decline against forecasts for modest hiring.
The weak reading drove the dollar to a seven-week low against major currencies, pushed Treasury yields lower, and lifted U.S. stocks as traders trimmed bets on further Federal Reserve rate rises, giving the central bank cover for its July decision to hold rates steady.
Sources: Financial Times · Financial Times · WSJ Markets · WSJ Markets · ↑ top
Latest developments: Saudi Arabia, Turkey, and Pakistan signed a mutual defense pact in Mecca on August 7, deepening military cooperation as the region reorders after the Iran war.
The three governments, including the nuclear-armed Pakistan, agreed to coordinate on regional security, a realignment that reshapes the balance among Gulf, Turkish, and South Asian powers amid the instability the Iran war left behind.
Sources: WSJ World News · Financial Times · ↑ top
Latest developments: The Financial Times reported August 7 that a U.S. naval blockade appears to have halted tankers lifting Iranian crude, idling the Kharg Island export terminal, even as oil futures slipped on expectations of a deal to reopen the Strait of Hormuz.
Iran's oil exports have stalled under the U.S. blockade, choking Tehran's main revenue source while negotiators work toward reopening the Strait of Hormuz, a passage whose near-total closure has lifted global oil and food prices.
Sources: Financial Times · WSJ Markets · ↑ top
Today: Showers And Thunderstorms Likely, high 85F.
Tonight: Chance Showers And Thunderstorms, low 69F.
Saturday: Scattered Showers And Thunderstorms then Isolated Showers And Thunderstorms, high 85F.
Latest developments: KDKA reported August 7 that the ECHL's Wheeling Nailers reached a new affiliation agreement with the Columbus Blue Jackets, weeks after the Pittsburgh Penguins ended a partnership that had run more than 25 years.
The Penguins' new owner, the Hoffmann Family of Companies, also owns the ECHL's Florida Everblades and moved Pittsburgh's minor-league affiliation there, leaving the Wheeling Nailers to pair with the Columbus Blue Jackets.
Latest developments: WPXI reported August 7 that the Pennsylvania Department of Corrections will hold a job fair to fill staff vacancies at the State Correctional Institution Fayette.
The corrections department is recruiting to staff its Fayette County state prison, offering on-the-spot hiring for open positions.
Latest developments: The Post-Gazette reported August 7 that Senator John Fetterman is losing support among Pennsylvania Democratic voters, with prominent party figures emerging as potential primary challengers.
Fetterman, the Pennsylvania Democrat who won his Senate seat in 2022, faces growing discontent within his own party, and several high-profile Democrats are positioning to run against him.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Forecasters flagged Friday, August 7, as an impact day, warning that slow-moving storms could spark flash flooding across Western Pennsylvania that evening, with the weekend turning mostly drier.
Nearly saturated air over the Pittsburgh region keeps a flash-flood risk in place through the weekend, with the heaviest downpours expected in the mornings; the threat pushed the Steelers to close Friday's Latrobe training camp to fans.
Latest developments: KDKA and TribLive reported August 7 that Matt Humbert is leaving his post as Belle Vernon Area athletic director for the same role at the Bethel Park School District.
Humbert spent more than a decade as Belle Vernon Area's athletic director and, as its football coach, won two WPIAL titles and PIAA state championships in 2021 and 2022 before taking the Bethel Park job.
Sources: KDKA · TribLive · ↑ top
Latest developments: The Post-Gazette reported August 7 that the growing partnership between inside linebackers Payton Wilson and Patrick Queen is paying dividends at Steelers training camp in Latrobe.
Wilson and Queen, the Steelers' starting inside linebackers under head coach Mike McCarthy, have built the on-field chemistry the beat expects to steady the front seven this season.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Post-Gazette reported August 6 that a losing skid in Milwaukee dropped the Pirates into last place in the National League Central, with ace Paul Skenes still searching for sharpness even after a switch to catcher Henry Davis.
Pittsburgh's rotation has sputtered on the road, with starter Jared Jones calling his outing 'terrible' and Skenes off his form, dragging the club below .500 and into the division cellar despite a bullpen remade at the trade deadline.
Sources: Post-Gazette Pirates · Post-Gazette Pirates · ↑ top
Latest developments: ESPN graded the summer's major U.S. men's national team transfers on August 7, handing a B+ to Arfsten for his move to Middlesbrough.
As the 2026 summer window runs, several U.S. players changed clubs, and ESPN assessed the biggest deals for the American core heading toward the 2026 World Cup hosted across the United States, Canada, and Mexico.
Sources: ESPN Soccer · ↑ top
Latest developments: ESPN argued August 7 that the U.S. men's national team has yet to meaningfully improve under Mauricio Pochettino, raising doubts as he starts a contract extension running toward the 2030 World Cup.
Pochettino signed a new deal keeping him as USMNT manager, and with the 2026 World Cup approaching on home soil, ESPN questioned whether his tenure has delivered real progress.
Sources: ESPN Soccer · ↑ top
S&P 500 7,652.05 ▲ +3.4% Dow 53,596.71 ▲ +2.8% Nasdaq 26,116.91 ▲ +5.0% WTI crude 78.66 ▼ -6.2% EUR/USD 1.1533 ▲ +1.2% GBP/USD 1.3460 ▲ +1.0% USD/JPY 158.12 ▼ -3.4%