daily plain-text briefing: security, markets, business, and pittsburgh
Attackers weaponized Atlassian's Rovo AI to siphon enterprise data as maximum-severity zero-days in Metabase, N-able, and Progress LoadMaster fell to active exploitation.
Latest developments: Metabase confirmed its unauthenticated SQL injection flaw carries a maximum CVSS 10.0 and grants admin access as a zero-day, N-able shipped N-central Hotfix 2 after attackers reached managed systems and persisted, and Progress Kemp LoadMaster CVE-2026-8037 entered CISA's catalog following 792 reported exploit attempts.
Three widely deployed enterprise tools face live attacks: Metabase business intelligence, already breaching Framework and Tally; N-able N-central remote monitoring; and Progress Kemp LoadMaster load balancers, hit by a CVSS 9.6 command injection. Patch all three immediately.
Sources: The Hacker News · The Hacker News · The Hacker News · BleepingComputer · ↑ top
Latest developments: Varonis disclosed RovoBlast, a one-click method that abused Atlassian's Rovo assistant to steal Confluence, Jira, and SharePoint data, while PromptArmor independently reached the same theft by hiding instructions in a file Rovo read.
Atlassian's Rovo AI assistant reads Confluence, Jira, and SharePoint on a signed-in user's behalf. Attackers plant hidden instructions in content Rovo ingests, then exfiltrate any data the user can reach; Atlassian confirms only one of the two attack routes closed. Restrict Rovo's data access and untrusted inputs.
Sources: SecurityWeek · The Hacker News · ↑ top
Latest developments: PortSwigger researcher Gareth Heyes revealed new CSS attacks that let email content escape its message boundary across Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail to steal passwords and tokens.
The techniques manipulate the webmail interface from inside a rendered message to capture passwords, hijack third-party accounts, leak tokens, seize trusted UI actions, and manipulate AI tools that read email. Webmail providers must sanitize CSS in message rendering.
Sources: The Hacker News · ↑ top
Latest developments: Unlimited Technology Systems said an October 2025 breach hit 3.8 million people, IEH Corporation, which builds parts for military satellites, missiles, and fighter jets, disclosed a phishing-driven mailbox breach to the SEC, and Switzerland's Federal Office of Information Technology, Systems and Telecommunication reported hackers exploited its SharePoint servers to compromise about 200 accounts.
Three unrelated intrusions surfaced across healthcare software, defense manufacturing, and government IT. Affected organizations should force credential resets and review third-party and SharePoint exposure.
Sources: BleepingComputer · The Record · Help Net Security · ↑ top
Latest developments: A study of more than 6,000 patches found AI-generated fixes fail roughly half the time, and even successful ones introduce new bugs, break other functionality, or remain open to bypass.
The research undercuts hopes that large language models can autonomously close vulnerabilities and warns teams to keep human review on any machine-written patch before merging.
Sources: Dark Reading · ↑ top
Latest developments: A New Mexico judge ordered Meta to pay $567 million in the state's child online safety case, carving out $420 million to treat New Mexico youth harmed on its platforms.
The ruling creates a fund to mitigate social media harms to minors and marks a large state-level penalty over child safety, signaling rising legal exposure for platforms over youth mental health.
Sources: The Record · ↑ top
Today: Sunny, high 88F.
Tonight: Partly Cloudy then Slight Chance Showers And Thunderstorms, low 70F.
Monday: Chance Showers And Thunderstorms then Showers And Thunderstorms, high 87F.
Latest developments: University of Pittsburgh researchers reported a milestone in a study that stimulates the spinal cord to restore arm movement after stroke.
University of Pittsburgh researchers are running a study that applies spinal cord stimulation to reconnect the brain and limb, aiming to help stroke survivors regain arm and hand movement.
Latest developments: Prosecutors charged Larry Wing with home-improvement fraud.
Larry Wing, 41, a contractor from Westmoreland County, faces home-improvement fraud charges after taking more than $13,000 for remodeling projects he never completed.
Latest developments: TribLive traced how the Seven Springs resort's princess cake became a lasting Western Pennsylvania tradition.
The princess cake, a fruit-filled specialty born at the Seven Springs Mountain Resort in the Laurel Highlands, remains in demand across Western Pennsylvania decades after the ski resort first served it.
Latest developments: Forecasters flagged Monday, August 10, as a severe weather alert day, with Tuesday and Wednesday as flooding impact days.
Meteorologists at KDKA and WTAE expect strong to severe storms across Western Pennsylvania on Monday, August 10, some arriving overnight, followed by heavy rain and flooding through Tuesday and Wednesday.
Latest developments: Duquesne residents pressed to be heard as officials consider merging their district with McKeesport Area.
Residents of Duquesne want a voice as officials weigh combining the Duquesne City School District with the McKeesport Area School District in Allegheny County.
Sources: Pittsburgh Post-Gazette · ↑ top
Latest developments: Saturday's drawing produced no winner, lifting Monday's jackpot to an estimated $905 million.
No ticket matched all six numbers in Saturday's $863.8 million Powerball drawing, the year's largest so far, pushing the August 10 jackpot to an estimated $905 million with a cash value of $391.9 million—the eighth-largest in the game's history.
Latest developments: WPXI previewed the 26th annual Little Italy Days, opening Thursday, August 13, with music, bocce, and food.
The 26th annual Little Italy Days, a street festival built around live music, bocce, and food, returns to Pittsburgh's Bloomfield neighborhood beginning Thursday, August 13.
Latest developments: At the Steelers' Saturday night practice at Latrobe, Post-Gazette observers saw left tackle Broderick Jones and quarterback Drew Allar bounce back.
The Steelers held their annual night practice at Latrobe Memorial Stadium on Saturday under new coach Mike McCarthy, where Post-Gazette camp observers noted bounce-back performances from left tackle Broderick Jones and quarterback Drew Allar under the lights.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Rookie Riley Nowakowski said he is working to earn trust in an expected special teams role.
Steelers rookie Riley Nowakowski told the Post-Gazette he is trying to earn the coaching staff's trust in his expected special teams role at training camp.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: Frederick Richard captured his first U.S. men's all-around gymnastics championship.
Frederick Richard won his first U.S. men's all-around title at the national gymnastics championships, cementing his standing as the leader of the American men's program two years before the 2028 Los Angeles Olympics.
Sources: ESPN Olympics · ↑ top
Latest developments: Skye Blakely and Claire Pease tied for the lead after the opening night of the U.S. women's gymnastics championships.
Skye Blakely and Claire Pease shared the lead after the first night of the U.S. women's gymnastics championships, opening the meet even at the top.
Sources: ESPN Olympics · ↑ top
Latest developments: President Trump hosted dozens of U.S. Winter Olympians and Paralympians at a White House reception.
President Donald Trump welcomed dozens of American Winter Olympians and Paralympians to the White House for a reception celebrating their performances at the Milan Cortina Games held earlier in 2026.
Sources: ESPN Olympics · ↑ top
S&P 500 7,705.63 ▲ +3.9% Dow 53,907.09 ▲ +3.2% Nasdaq 26,380.26 ▲ +5.7% WTI crude 77.36 ▼ -6.7% EUR/USD 1.1537 ▲ +0.7% GBP/USD 1.3459 ▲ +0.8% USD/JPY 157.80 ▼ -2.4%