daily plain-text briefing: security, markets, business, and pittsburgh
Two actively exploited zero-days—Metabase, which already breached laptop maker Framework, and N-able's N-central, now feeding China-linked ransomware—anchor a day that also brought Iran-linked water attacks and passkey-defeating research.
Latest developments: Metabase shipped a fix for the zero-day that lets unauthenticated remote attackers seize administrative control, and Framework told customers the intruders took names, email addresses, phone numbers, physical addresses, and login IP addresses, sparing payment and order records.
Metabase's self-hosted business intelligence software carried a flaw granting unauthenticated attackers admin access; San Francisco laptop maker Framework counts among the confirmed victims. Operators should apply the patch at once and audit administrator access logs.
Sources: Help Net Security · SecurityWeek · ↑ top
Latest developments: Microsoft tied the ongoing exploitation of N-able CVE-2026-18577 to a China-linked actor turning N-central into a ransomware launchpad, and N-able shipped a mandatory Hotfix 2 that supersedes the first and adds fresh indicators of compromise.
N-able's N-central remote monitoring and management platform, popular with managed service providers, carries an actively exploited command-injection flaw a China-linked actor now uses to plant ransomware. MSPs must apply Hotfix 2 even after Hotfix 1 and hunt for the shared indicators of compromise.
Sources: The Record · Help Net Security · ↑ top
Latest developments: Valve began notifying European Steam hardware buyers that thieves stole their data by breaching shipping partner CEVA Logistics, while LexisNexis pulled its Diligence, Metabase API, and Newsdesk products offline after detecting suspicious activity on servers a third-party vendor runs.
Two data incidents trace to third-party vendors: Valve's Steam hardware customer data left through logistics partner CEVA Logistics, and LexisNexis suspended three services over unusual activity on an outside vendor's servers. Affected customers should watch for phishing tied to the exposed contact details.
Sources: BleepingComputer · BleepingComputer · ↑ top
Latest developments: Three separate research teams defeated passkey protections by reusing signed authentication material that Windows exposed, extracting cloud-synced private keys from malware already on the victim's machine, and sidestepping phishing-resistant multifactor checks.
Passkeys promise phishing-resistant logins that replace reusable passwords, yet researchers showed malware on a compromised Windows machine can reuse signed authentication material and pull synced private keys. Defenders should treat endpoint compromise as passkey compromise.
Sources: The Hacker News · ↑ top
Latest developments: New Jersey and Alabama joined at least a dozen states where hackers linked to Iran targeted industrial control systems at water facilities, widening a campaign that earlier hit Minnesota, Clayton County, Georgia, and South Dakota.
Iran-linked hackers reached the industrial control systems running drinking-water utilities across at least a dozen states, now including New Jersey and Alabama. Water operators should segment and lock down any internet-exposed control systems.
Sources: SecurityWeek · ↑ top
Latest developments: SecurityWeek detailed Ghostjacking, in which an AI agent runs attacker commands planted word-for-word inside the log or alert that recorded a blocked request.
Ghostjacking poisons the logs and alerts that security systems generate, so an AI agent reading a record of a blocked request executes the attacker's embedded instructions. Teams deploying autonomous agents should sanitize log and alert text before an agent acts on it.
Sources: SecurityWeek · ↑ top
Today: Chance Showers And Thunderstorms then Showers And Thunderstorms, high 86F.
Tonight: Chance Showers And Thunderstorms then Showers And Thunderstorms Likely, low 69F.
Tuesday: Chance Showers And Thunderstorms, high 84F.
Latest developments: The venue enters its final week, closing for good August 15, and NEXTpittsburgh detailed how the loss is reverberating through the city's live-music scene.
The Original Pittsburgh Winery, a music venue run by co-owners Tim Gaber and Anthony Jardine, shuts down August 15 after announcing the decision July 24, and it is playing a full slate of farewell shows on the way out, including sets by Gaber's band, the Buzz Poets.
Sources: NEXTpittsburgh · ↑ top
Latest developments: TribLive reported Mauro's Corner Exxon reached its 30th year serving Penn Hills.
Mauro's Corner Exxon, a gas station and neighborhood fixture in Penn Hills, marked three decades in business, functioning as a local gathering spot well beyond the fuel pumps.
Latest developments: Forecasters extended the severe-weather and flooding threat through Wednesday and Thursday, warning of up to 4 inches of rain, after declaring Monday, August 10, an Alert Day.
WTAE and KDKA warn of rounds of heavy rain, damaging wind, flash flooding, and possible tornadoes and hail across Western Pennsylvania, with August 10 and Tuesday both First Alert weather days; Pittsburgh has already logged 3.32 inches of rain in the month's first nine days.
Latest developments: TribLive reported that a growing number of Pittsburgh-area municipalities are passing ordinances to regulate electric-bike use.
Municipalities across the Pittsburgh region are enacting ordinances governing e-bikes, responding to safety concerns as the bikes proliferate on local streets and trails, TribLive reported.
Latest developments: The Post-Gazette's 'Off The Bat' examined the Pirates' bullpen rebuild, arguing there is no blueprint for it after the trade-deadline overhaul.
The Pittsburgh Post-Gazette analyzed how the Pirates are rebuilding their relief corps around deadline pickup Luke Weaver, a right-hander acquired from the New York Mets, describing an effort without an obvious model.
Sources: Post-Gazette Pirates · ↑ top
Latest developments: Post-Gazette camp observers reported bounce-back showings from tackle Broderick Jones and quarterback Drew Allar at the Steelers' Saturday night practice in Latrobe.
At the Steelers' Saturday night training-camp practice, offensive tackle Broderick Jones and quarterback Drew Allar rebounded with strong performances, the Post-Gazette's camp observations noted.
Sources: Post-Gazette Steelers · ↑ top
Latest developments: The Post-Gazette reported that rookie Riley Nowakowski is working to earn coaches' trust in an expected special-teams role at Steelers camp.
Steelers rookie Riley Nowakowski is trying to earn a spot on special teams, telling the Post-Gazette from training camp that gaining the coaches' trust is his path onto the roster.
Sources: Post-Gazette Steelers · ↑ top
S&P 500 7,705.63 ▲ +3.9% Dow 53,907.09 ▲ +3.2% Nasdaq 26,380.26 ▲ +5.7% WTI crude 77.36 ▼ -6.7% EUR/USD 1.1533 ▲ +0.9% GBP/USD 1.3459 ▲ +0.8% USD/JPY 157.76 ▼ -3.2%